Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.mft
File:                     F427EBED04EEA9E14CD726DEB3CC299993C1802E.mft (raw, json)
Hash identifier:          28j1jEHOi90KwXa3XVL/KEbseCn+McVzNtzF9q+AJJM=
Subject key identifier:   84:63:CE:EF:16:73:A9:6B:D1:42:18:4D:24:B0:DC:5E:6F:75:20:90
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       4BD88DA21B77DEF59530E98EA9400C08A6AFC18E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.mft
Manifest number:          0408
Signing time:             Mon 15 Apr 2024 09:50:00 +0000
Manifest this update:     Mon 15 Apr 2024 09:45:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:11:00 +0000
Files and hashes:         1: 3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa (hash: Zr6KEgE5PTatWa1N6gnBDCDbGKWlYnKuhmEOCVFbyrQ=)
                          2: F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl (hash: fRTB2jYbvyUw8FB3pPmhSjYVgauoK4r/uU2YlBHTsu4=)
                          3: 3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa (hash: ekbjTr+zFNB0ELtZKBn1tNCBitk9Ojlm1qU9UC4AIgs=)
                          4: 3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa (hash: ei+8Jgrx97WN6oaKizPsqT+/WbOZDtn6dZwkJDNYbWg=)
                          5: 3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa (hash: GftlYBhHgMXQGwN8UNmxFU7LRUzovd65DwWXdmvi6GM=)
                          6: 323830343a323633343a3a2f33322d3438203d3e20323634333332.roa (hash: Veoim7IfgIM2BPTibbiey53gt39elcLTZje5L+XMQmM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d8:8d:a2:1b:77:de:f5:95:30:e9:8e:a9:40:0c:08:a6:af:c1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Apr 15 09:45:00 2024 GMT
            Not After : Apr 16 10:11:00 2024 GMT
        Subject: CN=8463CEEF1673A96BD142184D24B0DC5E6F752090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:1b:c8:80:09:81:93:b8:73:f6:df:dd:c5:
                    9b:78:f6:6c:bb:0f:ee:24:64:2b:54:6b:ea:7d:79:
                    1d:c2:cb:d3:57:28:f4:e3:34:69:c8:d9:be:74:ca:
                    a3:11:f0:b0:c5:a2:8a:a6:ac:f6:e0:2e:e7:c0:d9:
                    a9:f8:48:5e:f4:1c:ef:fc:24:bb:76:f3:81:8f:66:
                    0a:bd:10:f8:f1:94:95:1e:15:85:de:f5:81:27:fd:
                    c1:b3:93:69:0f:fc:35:b1:f1:e6:e6:6a:3b:d6:5b:
                    fa:e0:f3:8f:a5:28:0a:05:16:cd:62:f1:b8:85:62:
                    c2:36:8b:77:af:60:6a:2a:84:2b:4e:e6:63:ce:fa:
                    b3:42:44:9f:c3:a3:e3:16:d0:e3:37:aa:44:83:eb:
                    76:58:f9:7f:33:2c:03:b5:45:c5:e8:4f:2d:55:4c:
                    77:d9:4b:42:8b:1f:0e:f0:30:0f:07:3a:19:7d:83:
                    c9:1e:57:4d:19:3d:dd:45:83:08:8d:49:8c:37:fa:
                    73:70:e2:99:e4:5f:79:d9:ce:9d:3e:03:c7:04:2d:
                    54:40:4b:bd:87:ad:41:e2:11:f0:96:e9:8f:32:24:
                    8f:fa:9e:ab:df:6a:f9:65:20:0a:e5:12:55:6a:5e:
                    33:9e:c9:1d:95:ce:93:90:4d:f5:82:2c:10:ce:ee:
                    87:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:63:CE:EF:16:73:A9:6B:D1:42:18:4D:24:B0:DC:5E:6F:75:20:90
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:5f:31:66:37:b3:3f:9f:c7:8e:bf:b2:c7:ca:bc:ba:16:5a:
         e5:5d:98:4e:82:16:1d:5c:93:29:af:0e:04:95:6b:2d:72:06:
         d0:55:01:03:2a:77:ce:0a:ef:a9:17:a5:f2:b8:60:e3:bc:7f:
         81:f8:6c:f2:c5:ac:e6:81:a9:b0:31:79:ab:f4:cd:17:a6:4f:
         47:28:65:91:8f:15:5e:4a:90:cf:4f:51:68:5e:4f:d1:a3:5d:
         7f:93:d7:5b:e3:66:35:b2:c3:89:e1:c4:10:c7:42:a7:2f:7d:
         2e:73:86:ce:3f:9f:40:b5:b3:d0:31:9e:96:d0:67:47:af:2f:
         6f:f3:01:cf:b0:80:76:48:95:06:0f:70:4b:50:de:de:ea:6b:
         e3:38:da:bc:32:a0:7b:b9:d5:03:f5:59:60:52:5b:d7:b4:c1:
         20:3a:be:da:0f:c8:e4:f9:7f:8d:d4:7a:3f:5e:f1:f4:50:4e:
         81:84:2f:48:b1:e3:89:1d:cc:c1:a8:62:4c:c0:e6:87:bd:99:
         89:03:16:3c:cb:7c:ca:9e:69:80:5e:62:99:48:55:5b:35:9f:
         9c:9d:9d:47:3c:9c:bc:83:d6:7e:20:b0:40:93:84:31:70:eb:
         ec:42:fb:cf:7c:b3:93:9b:5b:9c:13:33:a9:a1:46:c0:9f:65:
         55:2d:ce:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org