Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/D1BCC595BDD75810B73D1FC485087BFB71859BFC.mft
File:                     D1BCC595BDD75810B73D1FC485087BFB71859BFC.mft (raw, json)
Hash identifier:          CcW/wP8d9I/eoDrNBGugO9Kl4M0I9WnUf6ieOYcPIiE=
Subject key identifier:   78:AD:11:AC:D7:AD:23:0F:8D:0E:96:E0:73:74:62:8F:CC:AA:FF:7F
Authority key identifier: D1:BC:C5:95:BD:D7:58:10:B7:3D:1F:C4:85:08:7B:FB:71:85:9B:FC
Certificate issuer:       /CN=D1BCC595BDD75810B73D1FC485087BFB71859BFC
Certificate serial:       47D7144C76043C4D8ADA72264D3BAFC1D399B62E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1BCC595BDD75810B73D1FC485087BFB71859BFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/D1BCC595BDD75810B73D1FC485087BFB71859BFC.mft
Manifest number:          1C
Signing time:             Sun 14 Apr 2024 18:56:32 +0000
Manifest this update:     Sun 14 Apr 2024 18:51:32 +0000
Manifest next update:     Mon 15 Apr 2024 20:42:32 +0000
Files and hashes:         1: 34352e342e3134382e302f32322d3332203d3e20323636303733.roa (hash: 4j14h1PmmJqZA6mEbnB9BceR+PUhuUxvIlNvKNAatQs=)
                          2: D1BCC595BDD75810B73D1FC485087BFB71859BFC.crl (hash: HLYnwTfbICWoozU6Qq/XjNPxBWCfxGfOh81SqduAmbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d7:14:4c:76:04:3c:4d:8a:da:72:26:4d:3b:af:c1:d3:99:b6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1BCC595BDD75810B73D1FC485087BFB71859BFC
        Validity
            Not Before: Apr 14 18:51:32 2024 GMT
            Not After : Apr 15 20:42:32 2024 GMT
        Subject: CN=78AD11ACD7AD230F8D0E96E07374628FCCAAFF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:62:5b:63:06:02:6f:6e:1f:23:b5:19:37:
                    19:f7:19:e2:32:b7:cb:ba:88:23:20:c8:df:4a:06:
                    2d:78:6d:55:8a:42:65:e1:f3:7c:78:7c:6e:f9:33:
                    e2:f8:87:a9:93:6a:55:2a:ab:16:7d:de:11:df:e3:
                    ba:eb:74:23:64:4a:ef:bb:a3:4c:11:c3:23:c9:09:
                    c2:fc:e0:ed:90:07:25:7a:61:a1:fb:5f:52:bb:a6:
                    77:42:e6:a7:7b:74:31:05:1a:f3:2b:a5:59:7f:ed:
                    98:9f:b7:70:39:07:9a:34:9d:9f:1b:42:5f:a5:19:
                    19:97:bd:87:52:10:61:bf:8f:35:b7:2f:71:23:11:
                    fd:3f:af:4c:05:86:54:8f:1b:83:40:27:34:5e:4d:
                    84:6b:d2:3e:c6:8c:44:63:cb:0d:6c:52:f4:f5:3a:
                    bd:14:b6:c7:cd:cf:84:98:3d:83:72:a6:5a:8e:07:
                    97:ca:fc:9f:3d:78:d7:dc:bd:0b:22:80:67:96:6d:
                    5b:5f:d0:6a:a8:cf:59:8d:b3:90:eb:dc:35:f7:7c:
                    c1:1f:68:de:d8:35:a5:01:e9:b5:0f:e1:26:7b:a3:
                    54:7a:2c:d2:2b:36:dd:9b:2c:4b:40:54:17:8c:77:
                    6e:7e:2b:15:73:d3:df:c7:66:cc:60:35:8b:d5:c9:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AD:11:AC:D7:AD:23:0F:8D:0E:96:E0:73:74:62:8F:CC:AA:FF:7F
            X509v3 Authority Key Identifier:
                keyid:D1:BC:C5:95:BD:D7:58:10:B7:3D:1F:C4:85:08:7B:FB:71:85:9B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/D1BCC595BDD75810B73D1FC485087BFB71859BFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1BCC595BDD75810B73D1FC485087BFB71859BFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/D1BCC595BDD75810B73D1FC485087BFB71859BFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:23:cf:94:cc:ac:72:cb:8e:f8:ee:e9:c4:0d:4a:68:03:57:
         80:66:71:a5:b4:c9:f8:ea:47:c2:a7:be:83:6b:3a:9d:dc:2d:
         83:02:1e:2a:36:3b:cb:2a:d4:35:76:c2:25:3d:8c:f6:aa:8d:
         73:40:12:aa:32:25:52:84:c3:2e:83:a3:7c:69:3a:71:af:a1:
         56:a8:db:3e:4b:31:aa:12:78:ff:70:1f:19:48:c9:a1:f3:a2:
         1e:9e:89:ef:39:34:95:88:02:29:79:a9:d1:dc:ed:81:ce:94:
         8d:44:fe:38:50:53:b4:6c:8d:c0:99:2d:15:07:ff:a2:3b:4c:
         b8:b0:f3:f5:86:2d:7c:f6:95:fd:64:04:3c:16:f9:de:3b:05:
         8e:f3:d2:be:d4:1e:fd:23:8c:25:9c:2f:af:86:8c:55:61:6c:
         41:a6:6e:b5:6f:0b:fd:43:21:c9:7f:0b:71:ea:1c:4b:66:9c:
         4e:f3:bd:c5:e4:4f:ad:31:20:59:5d:5c:4d:41:57:0e:ca:c2:
         3d:38:e6:3c:e5:68:ab:60:c0:29:a1:f9:1d:b1:2c:8f:da:36:
         9b:f1:f4:93:6d:f7:ca:23:94:4d:1f:ec:0e:19:43:95:8c:24:
         69:91:ac:28:b2:4f:8b:67:de:61:8c:76:d8:2b:20:40:a5:f3:
         03:b8:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org