Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.mft
File:                     C8395D8D16513ABA5BCE3876BC86946E464F3BC7.mft (raw, json)
Hash identifier:          /1b718oru8l7sXe9fs9aqulD/eHQEV7VWAkvUIgAk5M=
Subject key identifier:   F8:75:18:11:FA:D4:FF:9D:B1:07:16:69:A1:28:93:9C:68:46:59:49
Authority key identifier: C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7
Certificate issuer:       /CN=C8395D8D16513ABA5BCE3876BC86946E464F3BC7
Certificate serial:       4D424AC912DF2BA53566B24E260DE0773DFF19FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.mft
Manifest number:          017A
Signing time:             Mon 15 Apr 2024 10:22:06 +0000
Manifest this update:     Mon 15 Apr 2024 10:17:06 +0000
Manifest next update:     Tue 16 Apr 2024 10:35:06 +0000
Files and hashes:         1: 3137372e37312e3130302e302f32342d3234203d3e20323731333336.roa (hash: epXzKixUQY6xsgG8fihaQ7wfWDTfNQCT/XAVs3Rwyfc=)
                          2: 3137372e37312e3130322e302f32342d3234203d3e20323731333336.roa (hash: EqdiSLiGoEiaCO98QST/i67fvkGhmbV0JzaiajCYAU4=)
                          3: 3137372e37312e3130312e302f32342d3234203d3e20323731333336.roa (hash: CQeiRSYaPdcbDwVSTg0+dwKB4aVHci+LWldFmfPmL+4=)
                          4: 3137372e37312e3130302e302f32322d3232203d3e20323731333336.roa (hash: lmgPUfPUk8WNGC9T4w5w1PRNgXUfBl2CqCJ6cN6auqo=)
                          5: C8395D8D16513ABA5BCE3876BC86946E464F3BC7.crl (hash: 9kB01qPPxe5DbGevSRCmnqq3P5QYcgZ2NDtXqZ8jKTU=)
                          6: 3137372e37312e3130302e302f32332d3233203d3e20323731333336.roa (hash: bnBlXpp56CROKfsCrOiQjDI61/b80oQ2urCwsnVQ4bI=)
                          7: 323830343a373965633a3a2f33322d3332203d3e20323731333336.roa (hash: yt2QdvRR8SWJ6m8oqXjXtKCTkkt27stY57rf6zThWYs=)
                          8: 3137372e37312e3130332e302f32342d3234203d3e20323731333336.roa (hash: x792CV4ukRb0oWWDwYVObI7NJVbr4w2Tt/hecgyEmAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:42:4a:c9:12:df:2b:a5:35:66:b2:4e:26:0d:e0:77:3d:ff:19:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8395D8D16513ABA5BCE3876BC86946E464F3BC7
        Validity
            Not Before: Apr 15 10:17:06 2024 GMT
            Not After : Apr 16 10:35:06 2024 GMT
        Subject: CN=F8751811FAD4FF9DB1071669A128939C68465949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:26:11:99:16:24:c6:25:d0:35:02:59:d3:
                    51:a4:b6:00:52:1a:80:3a:0f:1d:f2:0e:7b:15:7d:
                    d1:e1:a8:bd:b3:e7:9d:5e:1b:3f:81:89:03:44:b5:
                    67:c0:a7:48:c1:2f:a3:aa:b9:ee:8d:04:b1:62:ac:
                    ff:c5:57:17:43:54:e3:2e:a1:58:83:ab:94:35:79:
                    66:b8:e2:2b:63:a4:dd:6e:04:9e:38:85:39:d6:a2:
                    6b:9d:bb:9d:cb:33:87:60:c7:c5:5b:9f:1a:bc:be:
                    13:20:86:a3:22:65:42:c3:e8:dd:ae:92:6e:4b:95:
                    22:f1:cb:4e:8e:3f:0c:33:76:e5:3e:97:d8:0f:f8:
                    a7:00:91:20:0f:48:f1:74:58:e6:66:56:d5:65:d7:
                    83:38:a9:d9:6d:59:62:2d:4a:cf:f3:c1:c6:3e:50:
                    6f:59:f8:2b:7d:be:0d:c0:15:89:fb:61:eb:7f:61:
                    86:49:0e:24:61:28:af:a2:2c:f9:b6:54:aa:80:8f:
                    00:45:b9:fd:9a:94:60:34:b2:38:80:bb:29:2c:87:
                    71:e3:8c:4a:64:b1:e6:6f:98:65:ca:b8:1b:89:cb:
                    3e:23:6a:69:d8:f8:7f:7e:c1:46:dc:59:49:28:20:
                    e9:d0:5f:41:5f:c1:33:67:35:96:5b:8a:e7:10:f9:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:75:18:11:FA:D4:FF:9D:B1:07:16:69:A1:28:93:9C:68:46:59:49
            X509v3 Authority Key Identifier:
                keyid:C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:9d:3b:12:0f:87:8e:f4:21:7a:dc:39:1d:fa:6d:a3:93:03:
         cc:05:a6:bc:aa:8a:2b:05:3c:32:20:88:79:ca:f7:d6:ff:ad:
         c4:c8:d8:97:12:b8:61:2f:50:5b:fc:2f:5a:10:31:83:78:04:
         4b:a9:47:8c:91:49:27:9e:31:b3:21:fa:87:52:9b:a2:44:db:
         e7:d0:a9:74:6e:e1:52:17:2e:0c:60:11:69:81:4b:ac:d5:38:
         30:7a:79:b4:71:bb:4f:85:d4:f8:76:cd:f7:3e:0c:87:2e:d4:
         63:5e:f0:74:bb:b3:67:89:56:6c:c1:6f:8a:8b:95:1d:9b:8b:
         54:82:02:0d:41:67:79:11:7d:5d:f4:e1:c2:01:d1:16:7b:67:
         94:24:6f:48:57:bc:47:b1:f9:cb:d4:0d:76:5d:0d:16:01:8c:
         02:1c:35:7a:e3:a8:a2:03:52:7f:19:e1:29:51:e5:48:7b:9e:
         bb:af:1c:1c:81:3a:77:b0:a8:6e:4c:a6:bc:7e:ca:2c:0d:1d:
         00:73:44:db:5c:ca:18:b9:3d:32:ed:f4:7a:fc:1c:a3:57:7b:
         35:73:8a:de:46:9e:7f:a8:5e:ef:56:5a:03:5c:df:d3:5e:98:
         04:3d:b3:7d:3a:d1:ca:d3:81:1a:8c:34:56:17:50:67:09:f0:
         eb:93:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org