Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.mft
File:                     489A4EF4D133DC9A829FC327FFED5038FD2206A5.mft (raw, json)
Hash identifier:          fPfygPQwrJv/bUVVS2MmBTDK5SKSEzatIjxSSSvTEp4=
Subject key identifier:   05:2F:B4:8C:B7:4C:FC:76:DC:9E:3B:18:AB:76:D3:D0:D4:A7:A8:8B
Authority key identifier: 48:9A:4E:F4:D1:33:DC:9A:82:9F:C3:27:FF:ED:50:38:FD:22:06:A5
Certificate issuer:       /CN=489A4EF4D133DC9A829FC327FFED5038FD2206A5
Certificate serial:       3B83332CDDE144270A1885F5D03E7FC50DF3232C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.mft
Manifest number:          011C
Signing time:             Sun 14 Apr 2024 19:09:38 +0000
Manifest this update:     Sun 14 Apr 2024 19:04:38 +0000
Manifest next update:     Mon 15 Apr 2024 22:01:38 +0000
Files and hashes:         1: 323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa (hash: //jd2w85QmwunYT/ri0vozz+jepdct8yZHA4jsATOew=)
                          2: 489A4EF4D133DC9A829FC327FFED5038FD2206A5.crl (hash: oF5r1nMEbyArZpy40vfK7C/Df74f/mUFWsCF05eHsvU=)
                          3: 323830343a386133343a3a2f33382d3338203d3e20323733363534.roa (hash: VJAxmmiLX6Rzyq4cEV8sW98RAW0uBLVG/LTS7FjpZAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:83:33:2c:dd:e1:44:27:0a:18:85:f5:d0:3e:7f:c5:0d:f3:23:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489A4EF4D133DC9A829FC327FFED5038FD2206A5
        Validity
            Not Before: Apr 14 19:04:38 2024 GMT
            Not After : Apr 15 22:01:38 2024 GMT
        Subject: CN=052FB48CB74CFC76DC9E3B18AB76D3D0D4A7A88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:e6:33:21:92:75:6a:12:1b:c7:68:85:85:
                    a9:91:94:d7:bd:bd:cd:f5:0d:8a:8f:63:fd:0d:11:
                    df:91:bb:d9:e7:dc:29:f6:01:3a:1b:93:b9:fc:d1:
                    85:f4:4f:47:fe:79:a1:20:fb:4a:8b:a1:73:1d:72:
                    eb:89:2f:0e:46:d1:49:11:b8:b8:f0:b1:18:07:4e:
                    96:70:9d:14:81:d1:1d:7c:82:a1:be:83:42:59:ab:
                    ec:5e:01:9f:ca:1d:68:cb:8b:c1:e3:f8:ca:1a:31:
                    a5:0f:fe:f9:9c:44:5a:be:3f:92:ba:27:f9:17:dd:
                    0c:ea:c5:28:c6:0f:6e:1b:d6:00:75:cc:c7:f7:d3:
                    66:f9:90:f2:1c:54:2d:32:f0:a8:23:34:c1:55:62:
                    31:4b:0b:9b:9a:08:c1:ef:ca:b7:37:3d:53:eb:3f:
                    ba:2f:43:88:4e:ce:34:e5:ef:7b:04:65:40:c4:95:
                    2b:2a:ba:47:3b:4b:ca:90:c3:37:39:cb:7f:4c:27:
                    81:16:ef:15:8a:15:25:68:67:f9:1e:d6:13:dd:6c:
                    4f:bb:2d:ce:89:f0:74:5e:ae:c1:5c:53:34:0b:ce:
                    70:0d:18:fa:c1:e7:dd:a7:86:38:6b:ff:81:56:59:
                    f2:a3:e3:f5:46:33:7e:ae:77:9a:13:69:e1:14:b5:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2F:B4:8C:B7:4C:FC:76:DC:9E:3B:18:AB:76:D3:D0:D4:A7:A8:8B
            X509v3 Authority Key Identifier:
                keyid:48:9A:4E:F4:D1:33:DC:9A:82:9F:C3:27:FF:ED:50:38:FD:22:06:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4d:ef:2f:a6:c0:db:e2:65:16:07:a9:1a:e8:47:a9:86:7a:
         a6:e6:bc:ce:d3:b1:b6:27:03:4e:b9:78:d5:98:04:04:36:47:
         68:41:23:ad:99:37:c4:c3:a5:72:62:e8:fd:bb:2f:0e:6a:ec:
         55:47:d6:08:ec:5b:ea:ce:e6:36:ec:e8:88:ad:97:1a:9a:de:
         97:d8:45:d2:2f:60:58:be:92:57:d6:a5:93:2a:a6:d1:13:e6:
         07:ea:b4:16:41:b1:03:32:07:fc:72:d6:c5:b2:db:ca:6d:66:
         4e:bd:ac:48:df:5d:f1:6d:89:d8:99:b3:0f:0f:b1:b2:33:f3:
         73:3c:82:dd:fc:11:e9:22:e2:86:3f:b5:d0:b2:48:25:57:28:
         70:b3:41:46:87:de:54:87:6e:12:6c:0d:31:5c:28:a6:51:6a:
         28:8f:a8:84:b5:90:b1:2a:34:66:b9:af:dd:7b:5c:f1:e7:fe:
         f7:de:87:a0:f9:38:a2:2a:52:98:56:32:e9:aa:67:5b:5e:96:
         31:68:a9:48:2a:23:13:49:a6:1e:d9:ad:79:c2:77:d8:dc:a7:
         78:fe:cd:76:3d:eb:e8:0d:03:14:3a:4a:0d:ef:62:69:fb:ce:
         39:94:be:86:2c:9a:26:52:9a:49:1d:92:d1:af:54:ea:75:09:
         8d:db:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org