Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.mft
File:                     928AC495DA09D88A3B9ECB22758AFD89A7AA482F.mft (raw, json)
Hash identifier:          EUO3gMT7z/9wskEGKa9t5aoqfJ/daq/vzAE+XyblCxY=
Subject key identifier:   38:A1:9C:00:AE:A5:BC:53:4E:DE:7B:47:AD:E3:52:30:76:9F:11:53
Authority key identifier: 92:8A:C4:95:DA:09:D8:8A:3B:9E:CB:22:75:8A:FD:89:A7:AA:48:2F
Certificate issuer:       /CN=928AC495DA09D88A3B9ECB22758AFD89A7AA482F
Certificate serial:       4ACBD9CD756203F5A37B8A7179FE9CB01DA8425E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.mft
Manifest number:          027D
Signing time:             Mon 15 Apr 2024 08:11:30 +0000
Manifest this update:     Mon 15 Apr 2024 08:06:30 +0000
Manifest next update:     Tue 16 Apr 2024 10:11:30 +0000
Files and hashes:         1: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: 12o5sprLoRM4N1mPyoU6WqeTqgIiSZlEji2o27s639s=)
                          2: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: jUSSJyREuo8hvqoN0q7bw5l81056tFyvCMAgKHRL6Tw=)
                          3: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: RgJbDINtZF9afC8bxJ9XVY6PW5kgkDifFp+HCj4LZqw=)
                          4: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: +AT6Whs8f7t73joSz8Nr9G1n1sCIrFCgVYT11gFlgC8=)
                          5: 928AC495DA09D88A3B9ECB22758AFD89A7AA482F.crl (hash: wjRbVNr2CrKZWsZ99BaaJS0DxuK8IU0TUQWTsGj+CFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cb:d9:cd:75:62:03:f5:a3:7b:8a:71:79:fe:9c:b0:1d:a8:42:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928AC495DA09D88A3B9ECB22758AFD89A7AA482F
        Validity
            Not Before: Apr 15 08:06:30 2024 GMT
            Not After : Apr 16 10:11:30 2024 GMT
        Subject: CN=38A19C00AEA5BC534EDE7B47ADE35230769F1153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:13:35:ec:a6:81:78:b2:54:85:0f:40:1b:8e:
                    2f:47:c4:ec:81:82:8f:c6:31:93:50:74:09:85:54:
                    74:e4:82:9a:10:8f:96:01:25:3c:92:c6:3f:b7:10:
                    97:ef:78:bd:d2:db:8a:39:2e:7d:03:4d:55:13:e4:
                    83:00:35:04:a8:1b:31:07:31:e7:29:8f:4c:29:80:
                    94:95:c9:71:b6:d8:d2:18:ff:33:95:7f:10:30:11:
                    e4:e4:37:a1:16:f1:9b:af:88:d3:01:4d:64:a5:22:
                    4c:d1:3c:62:b5:75:29:38:1d:2e:35:89:9e:a1:b2:
                    6c:9b:15:95:38:71:a0:2c:50:70:eb:8a:52:2d:49:
                    79:3b:2e:05:35:04:88:7e:00:1c:b3:31:fb:9a:7d:
                    47:e2:d4:cf:ae:6d:fd:98:82:65:ed:66:7e:b6:83:
                    0d:49:5b:f3:28:11:a3:6f:ed:63:2b:ad:f4:1f:3a:
                    10:4d:d1:2c:dd:83:27:2e:80:8f:fe:a0:36:ac:41:
                    6c:80:5a:bc:ec:59:ec:5e:26:2e:8d:75:fb:c8:25:
                    69:51:ee:ba:e1:be:1c:35:a0:5d:29:d7:ed:5d:b3:
                    f7:f6:86:6e:0a:c7:c4:e0:34:24:96:6e:99:77:48:
                    ce:be:86:40:bf:ee:94:fb:ae:8a:1f:f2:0c:d9:fe:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A1:9C:00:AE:A5:BC:53:4E:DE:7B:47:AD:E3:52:30:76:9F:11:53
            X509v3 Authority Key Identifier:
                keyid:92:8A:C4:95:DA:09:D8:8A:3B:9E:CB:22:75:8A:FD:89:A7:AA:48:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a5:5f:7c:f7:1b:bc:57:3c:e3:18:71:37:cc:1c:ac:dd:1f:
         0e:2c:5d:7f:60:0f:17:5b:3c:73:d6:89:8b:80:f8:dc:c1:f9:
         e4:58:1d:83:71:19:7a:c9:74:5a:08:47:67:d9:4e:d7:62:44:
         f8:3b:64:8a:d0:c2:4a:31:b6:01:8f:8f:5f:c6:a4:93:cf:fe:
         b9:ac:b7:8d:ed:74:c0:89:0f:79:09:6c:e9:2b:e9:c4:ae:14:
         a9:e4:a4:55:88:1b:99:f9:cb:a6:96:b1:4b:6b:b4:f4:3a:a5:
         76:9f:0a:0f:f8:27:93:ff:d1:95:ba:fe:58:04:1c:32:2f:c8:
         33:f6:59:e9:df:90:60:38:47:66:d0:30:cb:31:ee:4c:09:b4:
         ab:a9:bb:ce:8a:ba:a8:56:61:9e:de:e1:17:4a:6e:cf:e0:e8:
         49:59:3d:97:e3:49:00:a8:56:95:26:10:01:f4:c4:35:be:64:
         3b:21:17:69:39:11:a5:a7:b9:c2:4b:2e:2a:0f:62:58:49:21:
         3b:74:99:45:7f:f3:42:71:5c:2c:b1:cf:54:88:be:5e:80:73:
         83:79:f3:92:d4:a5:87:8e:8a:ed:5f:82:91:84:62:8b:a9:90:
         ca:b7:46:73:df:cd:79:a1:9f:4f:c6:41:35:9a:c8:28:c0:22:
         30:a0:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org