Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.mft
File:                     B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.mft (raw, json)
Hash identifier:          HSwtDllycPgOOgy2HcuQtYc+fhIHRcZS5ZqPvnMJivI=
Subject key identifier:   A3:14:45:43:28:37:03:CC:C0:6F:4A:B3:AD:56:38:5F:A8:96:0B:9C
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       21D5145FAC952ED2840B80ED5D7F5EEF19D8BC9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.mft
Manifest number:          9F
Signing time:             Mon 15 Apr 2024 11:40:37 +0000
Manifest this update:     Mon 15 Apr 2024 11:35:37 +0000
Manifest next update:     Tue 16 Apr 2024 15:14:37 +0000
Files and hashes:         1: 34352e3138352e39362e302f32332d3233203d3e20323639333732.roa (hash: pi4JOMdbD36N6iSCLtEOqPxAzcvfZchdDMgkiprNjhE=)
                          2: 34352e3138352e39362e302f32342d3234203d3e20323639333732.roa (hash: XG5EM5hzlBeT6nfzeeHPEJ6Q38vBY5cfnCKgxjM15VY=)
                          3: 34352e3138352e39392e302f32342d3234203d3e20323639333732.roa (hash: wfYGmP1CBxOzN9n4aV2yV2ZwV0tJUMxej0jZHz8xGRg=)
                          4: 34352e3138352e39372e302f32342d3234203d3e20323639333732.roa (hash: 4+qTVfCn1l21zmdOFJA8bNgliKBjySbWvk2yXnOm5Ow=)
                          5: B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl (hash: PZluHBHO/azNpCezcKPZsk8r34DbD3OpHzz8Y+Zgbt8=)
                          6: 323830343a363339633a3a2f33332d3333203d3e20323639333732.roa (hash: KDwb/ldRDt261OHB/ScD3MouX4HJKkcG5djJP6NVUQo=)
                          7: 34352e3138352e39382e302f32342d3234203d3e20323639333732.roa (hash: SOOCE/hK2YYt0IBiAxCVrkLWYVdOe4bglPd+VGtkuBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d5:14:5f:ac:95:2e:d2:84:0b:80:ed:5d:7f:5e:ef:19:d8:bc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Apr 15 11:35:37 2024 GMT
            Not After : Apr 16 15:14:37 2024 GMT
        Subject: CN=A3144543283703CCC06F4AB3AD56385FA8960B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:68:e8:f1:fa:f0:30:8c:86:4d:e4:8b:c2:
                    f5:05:76:b6:86:c6:80:84:af:bd:8f:4e:57:78:19:
                    73:a3:99:85:02:10:f1:70:1d:3b:d9:1a:8c:45:a7:
                    d8:65:55:6e:ef:18:fa:d1:6d:cf:79:6e:e2:df:e8:
                    c5:e7:b0:96:be:03:dd:ed:68:e1:10:8c:0f:7b:9b:
                    ad:7e:d4:14:67:8a:98:bd:ac:49:7b:74:bb:29:24:
                    84:17:bf:97:94:42:2a:d6:9f:cc:bd:81:ad:f2:97:
                    7b:94:76:42:d7:4c:47:dc:3c:2e:69:54:96:59:ee:
                    0f:f1:44:6a:9d:dd:be:83:60:c3:a8:dd:f5:51:57:
                    63:f3:6e:e7:84:ca:14:99:80:11:54:e7:5c:2f:a9:
                    ba:e2:56:46:d2:7f:38:5a:fa:cc:66:28:21:09:9f:
                    08:56:59:0a:89:98:3f:5d:f7:a7:b9:5a:a4:a5:37:
                    1d:2f:4c:23:f6:5c:ee:62:95:8e:7c:cc:23:28:b2:
                    52:62:e3:a3:0c:11:26:ea:e9:51:3d:89:27:78:2d:
                    3b:7a:c3:43:0c:cb:fc:2a:e5:f7:94:2b:ac:94:1d:
                    e8:71:a0:fb:72:18:81:35:39:50:a6:3b:e0:db:6a:
                    96:40:6e:6e:ba:1b:63:94:83:51:e0:ab:a3:9d:79:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:14:45:43:28:37:03:CC:C0:6F:4A:B3:AD:56:38:5F:A8:96:0B:9C
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ef:71:8a:c3:06:95:fe:a7:27:b5:dd:7a:74:7b:94:00:12:
         00:09:f0:58:f9:2d:53:ab:ab:95:aa:40:ac:90:c3:a5:bb:18:
         80:3a:d6:68:a2:ee:e6:11:0b:9c:65:54:6f:74:3e:75:69:3e:
         f1:da:83:91:b3:45:8e:38:d3:5b:13:13:67:b8:4c:6d:01:00:
         51:ba:85:1a:f2:78:64:48:68:02:73:02:f2:46:f4:eb:67:05:
         05:70:5c:0c:63:8c:e9:c7:24:77:ee:e5:c4:42:5f:dd:1d:99:
         8d:7f:a7:09:59:ae:49:c7:c5:5b:f0:9d:89:2d:5f:a3:14:b9:
         91:6e:7a:51:2c:d3:4a:4c:df:3f:e3:57:ff:db:97:8d:45:7d:
         7f:49:dc:d7:d2:c6:c8:0a:a5:a9:c3:22:aa:a1:6a:91:e1:23:
         a9:dd:55:6d:d4:be:74:46:36:3e:f6:33:47:1a:12:75:01:c1:
         32:ae:c3:49:76:de:9b:26:1a:bf:30:bd:2e:3f:87:a4:32:8b:
         6f:8b:91:04:2f:83:d4:2f:91:fe:c2:1f:8a:7f:4f:9c:c2:b8:
         27:dc:63:dc:0d:a5:52:77:5e:81:d6:47:33:e2:00:17:f5:08:
         5c:6b:26:8d:6f:ec:72:b1:c6:d8:07:a2:99:30:f2:2e:22:88:
         4a:29:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org