Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/432A09356CFC4BB8197E452038BB66C2873D93C6.mft
File:                     432A09356CFC4BB8197E452038BB66C2873D93C6.mft (raw, json)
Hash identifier:          imvf46L3jiXhv2UNaDat4PBQu8PPDxMm+zs+u7KE9Vo=
Subject key identifier:   9E:7F:E1:A5:17:D0:97:0C:77:7E:7F:5D:60:9B:FC:31:D3:92:5F:14
Authority key identifier: 43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6
Certificate issuer:       /CN=432A09356CFC4BB8197E452038BB66C2873D93C6
Certificate serial:       6AD27EB1C52D96F3E68E8906968EDAADCA04B1BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/432A09356CFC4BB8197E452038BB66C2873D93C6.mft
Manifest number:          E5
Signing time:             Mon 15 Apr 2024 08:54:21 +0000
Manifest this update:     Mon 15 Apr 2024 08:49:21 +0000
Manifest next update:     Tue 16 Apr 2024 11:32:21 +0000
Files and hashes:         1: 323830343a323336383a3a2f33322d3332203d3e20323634313630.roa (hash: tb1DP7hiL28jrZk8/IqZfqK5K2LUvzhBNWMrKX40FLg=)
                          2: 3133382e39392e36382e302f32332d3233203d3e20323634313630.roa (hash: byHTuGbJ+Gjb/tylu2R9If/veiP7/7d+ggDluykgowo=)
                          3: 3133382e39392e37302e302f32332d3233203d3e20323634313630.roa (hash: Y/OzEvRTtxl2C1RZvmtOr61IusGJnMtYB+ZNv+BNQck=)
                          4: 323830343a323336383a303a313a3a2f36342d3634203d3e20323634313630.roa (hash: 41BgptNgNVifgkrl75rco3kgBCRkY4A7h4ypWKqCwSM=)
                          5: 432A09356CFC4BB8197E452038BB66C2873D93C6.crl (hash: PPqVFRAoAA+UAvqdO+sXmD6cyhIY0LYk596hhLJ+ykg=)
                          6: 3133382e39392e36382e302f32322d3232203d3e20323634313630.roa (hash: hbZ4Bxg9+I9kyfOwQt3W9aVtU/+N0ylxgigs06K9PQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d2:7e:b1:c5:2d:96:f3:e6:8e:89:06:96:8e:da:ad:ca:04:b1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432A09356CFC4BB8197E452038BB66C2873D93C6
        Validity
            Not Before: Apr 15 08:49:21 2024 GMT
            Not After : Apr 16 11:32:21 2024 GMT
        Subject: CN=9E7FE1A517D0970C777E7F5D609BFC31D3925F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9f:35:d8:92:e3:0e:b2:46:bd:3d:5c:5a:e9:
                    86:f7:ce:15:dc:89:d5:3c:47:1c:52:8a:e0:39:2c:
                    24:17:cd:7b:71:a7:d8:db:16:ec:ba:7b:3c:98:05:
                    55:e3:02:fb:fa:53:40:ec:eb:0d:c0:93:9c:27:80:
                    5b:40:06:62:49:0f:e1:c7:92:3f:3c:04:80:10:71:
                    2f:be:ef:70:c6:98:d1:09:d5:d1:30:68:7c:46:61:
                    48:42:e3:1a:37:e9:87:5c:54:cd:e8:18:3f:10:9b:
                    cb:f4:f0:58:76:89:73:a8:65:ef:b9:02:ad:35:d3:
                    a1:5c:b7:5b:80:55:25:46:e8:50:cc:3d:e8:2a:98:
                    11:5c:e8:17:b7:82:9b:1c:17:61:fd:39:e0:88:90:
                    19:6e:b0:df:89:7d:2b:13:45:81:9f:ac:8f:1d:d1:
                    21:a0:07:52:a1:95:6a:07:50:bd:67:6a:b4:47:d7:
                    d9:eb:69:d7:7c:8c:8c:ff:72:38:b1:de:36:8f:f0:
                    18:a8:8d:23:44:2a:8f:0d:44:e9:39:03:09:05:01:
                    cf:da:ae:b4:ae:1a:b4:17:ec:fb:03:ff:d3:ec:0a:
                    cc:ae:6f:3c:e7:9a:37:75:53:30:0c:25:d3:5d:2b:
                    e7:bc:69:cf:31:93:a4:3e:03:51:1e:89:9c:48:dd:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:E1:A5:17:D0:97:0C:77:7E:7F:5D:60:9B:FC:31:D3:92:5F:14
            X509v3 Authority Key Identifier:
                keyid:43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/432A09356CFC4BB8197E452038BB66C2873D93C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/432A09356CFC4BB8197E452038BB66C2873D93C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:35:0b:6c:0b:1f:b9:45:14:2d:01:b5:a1:43:37:36:58:b7:
         43:7a:e6:1a:57:5a:8c:74:43:c7:7a:5a:68:27:0e:d2:6c:d5:
         0e:f3:e8:c7:0f:e5:46:e2:34:df:4b:bb:39:ce:2c:e6:74:53:
         78:9a:38:4a:ef:9e:97:95:91:54:62:72:b9:33:95:b4:90:84:
         77:0f:ec:6e:cc:fe:f9:6e:29:d4:9a:a2:74:2a:6f:df:34:ef:
         f9:f5:d3:de:3e:de:77:69:a6:de:d6:47:da:4e:ae:c1:0f:38:
         2b:71:f6:c5:7a:35:2a:7e:1c:38:30:3c:b3:81:e4:38:6c:fa:
         fa:89:f5:fc:bb:36:73:67:cb:30:32:8d:3b:e5:a1:b4:20:32:
         32:2f:88:18:a3:90:8e:47:4a:2d:fb:bb:e1:92:eb:d3:ff:b0:
         a1:32:a1:d7:5c:96:55:4c:86:b0:18:3c:76:19:90:34:00:7b:
         e3:4c:3e:01:2e:e2:6c:43:aa:c7:e1:82:92:5a:32:41:ff:49:
         7b:e7:54:b8:08:f2:69:86:2e:0c:48:bd:1f:d7:a4:b4:16:f4:
         27:9a:04:db:f7:64:ef:4d:d6:71:ef:33:82:e8:31:15:6d:eb:
         4b:92:5b:88:4b:c3:e1:ec:11:dc:57:e7:b7:44:f1:64:8f:31:
         89:53:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org