Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.mft
File:                     D596B96A1DCB205F276BFCEF3F65B233325D0788.mft (raw, json)
Hash identifier:          /QT8GKl3inmjrpjJz+y6fFNqiBGE/aInRcL3y8ty7Uo=
Subject key identifier:   F1:AB:E4:9E:54:0B:72:48:F7:E2:37:5E:17:00:54:3C:DB:E1:B7:1A
Authority key identifier: D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
Certificate issuer:       /CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
Certificate serial:       08D42B063237386C1699F588A47D390D9C36FB3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.mft
Manifest number:          3A
Signing time:             Mon 15 Apr 2024 09:55:12 +0000
Manifest this update:     Mon 15 Apr 2024 09:50:12 +0000
Manifest next update:     Tue 16 Apr 2024 12:41:12 +0000
Files and hashes:         1: 3137302e3234372e33392e302f32342d3234203d3e20323634353234.roa (hash: kepf64mpGG5Pedhn6s3LDrLiBBXnCY18CX1FH4M45Vs=)
                          2: 3133382e302e312e302f32342d3234203d3e20323634353234.roa (hash: aZ+7YmT9B5cW2sgtcZGQTCGPctvcwbpha6Rs8drIdqU=)
                          3: 3133382e302e302e302f32322d3232203d3e20323634353234.roa (hash: 83u9DpsWTGZfjoSwa6OtR0oWyBGrQUTRcFPXreiwSZA=)
                          4: 3133382e302e302e302f32342d3234203d3e20323634353234.roa (hash: DAFHFqrErJtAKU2rtdj1zLKfUs375hSCDZKl9lu9tE4=)
                          5: 3137302e3234372e33362e302f32322d3232203d3e20323634353234.roa (hash: FUShftX7NFgCKLtaIaQU5fE5r875tnJZ1JXIsIDWGLI=)
                          6: 3137302e3234372e33372e302f32342d3234203d3e20323634353234.roa (hash: fhKGzxxq8T8020PkN08hIG7XM8Lvx4/fPoJ+hxQ9txs=)
                          7: 3137302e3234372e33362e302f32342d3234203d3e20323634353234.roa (hash: doFyxOxauFfqhHtrCABGQ4zIQv2zAV/5oqvTu+zpM2o=)
                          8: 3133382e302e332e302f32342d3234203d3e20323634353234.roa (hash: OEYDyrByeg1I5ANzQhrkpVkXRpnMk4U0FRDvrYXV3Ug=)
                          9: D596B96A1DCB205F276BFCEF3F65B233325D0788.crl (hash: 5RqWWD5sgxk0Bq1zkyCuiAAs9WSNclaibIkLC3YBJC0=)
                          10: 3137302e3234372e33382e302f32342d3234203d3e20323634353234.roa (hash: k6EvvYKjb448SxvFDGuAEJ/c9TK0N/+wvg/HSU2vl5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d4:2b:06:32:37:38:6c:16:99:f5:88:a4:7d:39:0d:9c:36:fb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
        Validity
            Not Before: Apr 15 09:50:12 2024 GMT
            Not After : Apr 16 12:41:12 2024 GMT
        Subject: CN=F1ABE49E540B7248F7E2375E1700543CDBE1B71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:af:d1:85:04:95:76:a5:c9:98:a3:aa:df:da:
                    74:eb:99:c1:46:17:11:90:e7:fc:8f:ab:f1:e3:ca:
                    b7:7f:86:83:fb:e2:e7:c8:a0:d8:30:98:94:5e:9d:
                    09:3f:e2:a5:0d:8a:92:d1:25:e6:44:3e:6d:3c:41:
                    a9:4a:1f:c4:34:d7:0a:67:15:85:03:3e:63:fe:e2:
                    f7:ad:2f:a6:90:88:27:36:82:be:49:b8:e9:ef:c8:
                    ed:5f:37:30:0f:d8:ee:80:a4:71:71:b2:db:e0:6a:
                    8f:a8:b3:76:07:25:9d:1f:59:81:25:09:1b:4d:2d:
                    cc:b1:8b:49:7e:d2:9f:99:0b:64:e0:b8:fd:1f:d4:
                    5c:7f:19:4a:68:fb:5f:3b:a1:20:fa:15:d4:47:56:
                    5c:17:db:bd:b5:e7:ab:75:ee:97:5f:59:e3:d4:aa:
                    ec:ea:66:30:31:30:20:6f:22:4f:66:8b:75:22:a1:
                    6c:e2:ec:09:d2:e3:96:f4:fb:15:70:51:78:0a:14:
                    80:5d:4c:6e:7a:f8:2f:c4:5e:a5:b2:cf:f8:40:46:
                    bf:16:d9:c0:53:eb:4a:86:51:17:a7:66:81:91:2b:
                    34:7c:4a:5e:c2:67:42:06:ad:92:ac:82:92:0c:51:
                    a5:85:a7:02:15:35:c1:83:8d:46:13:29:cd:a3:6c:
                    f9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AB:E4:9E:54:0B:72:48:F7:E2:37:5E:17:00:54:3C:DB:E1:B7:1A
            X509v3 Authority Key Identifier:
                keyid:D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:bc:5c:95:85:db:f6:b1:96:dc:bc:73:6f:e0:2f:0d:44:
         20:e2:96:c1:52:ae:c8:a3:6c:72:34:f1:66:81:cf:cc:17:58:
         ef:aa:61:d8:0d:06:19:93:5a:4f:d4:ab:89:cd:b2:51:92:82:
         e1:4e:09:7b:6e:79:40:d2:28:e2:58:b1:8b:ad:9f:7f:ea:03:
         bb:46:58:95:ef:aa:5e:32:90:f2:dc:0f:52:0e:40:c6:d3:e6:
         73:d1:ca:90:85:d2:28:9a:71:ad:d8:04:31:9d:e9:e1:96:11:
         f6:b5:46:a0:02:bd:89:bf:0d:7f:80:c1:d5:06:cb:fe:e1:46:
         20:90:90:bc:0f:80:9d:7e:8f:8b:cc:cb:87:a7:c8:8b:ee:89:
         c2:e9:51:f3:97:d3:75:d7:21:26:e9:b7:17:4d:c4:74:ef:9a:
         bb:d4:44:38:7c:2f:f0:83:d1:82:1a:6a:c3:27:9d:4f:ef:cb:
         06:8e:69:3f:94:7e:a3:aa:4e:0f:a6:94:1d:62:83:ee:de:ef:
         a9:8b:96:6b:66:6c:c1:7d:7d:d8:ae:0b:d0:d4:6e:a0:ca:b5:
         b8:48:93:78:90:6b:3e:5b:4e:f3:2d:7a:9d:fd:56:2e:26:e8:
         3c:d5:cb:40:4d:9f:c0:f5:f2:c2:8e:a4:0c:a4:ac:63:dc:9d:
         94:3c:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org