Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.mft
File:                     DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.mft (raw, json)
Hash identifier:          w647goCoGo+FBiZeLvOsqrMm57rCuedxQ6nwNnnM3wI=
Subject key identifier:   D1:1F:EF:08:65:C3:D9:62:54:81:41:BE:DB:45:DE:A4:A1:53:AA:78
Authority key identifier: DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63
Certificate issuer:       /CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
Certificate serial:       1B282D9832460383676CE5C5A65C3EAF21BBE499
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.mft
Manifest number:          0335
Signing time:             Mon 15 Apr 2024 02:23:51 +0000
Manifest this update:     Mon 15 Apr 2024 02:18:51 +0000
Manifest next update:     Tue 16 Apr 2024 04:42:51 +0000
Files and hashes:         1: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: t+s085dnkp7zGtTDj7jTnQwBi4GtfjzaHlytZbMNCL4=)
                          2: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: t9A7l7LzTjZjmLaB/V+JqOG9f9SbhzXPjJ5D0uIke1U=)
                          3: DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.crl (hash: pXB0d1Wl0kP63p+z2f+3EVKciZbTlK7tjtddpZ0ihjc=)
                          4: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: uhM++d7lkAnfcVMeXGMW8WvuesF2aWEwkX71TEX6XeI=)
                          5: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: X7NkL+PQPHlcKFuoM/Rb5v7xfOTyGMmOhrzRFchshHw=)
                          6: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: Z3ch8XckBaEgktyzbuHdN/iO+tYFuEaFqWXBxvc5ywU=)
                          7: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: e6nXmHdN46riBkxgkaxBDHP39LTsEvPhiMckGBioYpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:28:2d:98:32:46:03:83:67:6c:e5:c5:a6:5c:3e:af:21:bb:e4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
        Validity
            Not Before: Apr 15 02:18:51 2024 GMT
            Not After : Apr 16 04:42:51 2024 GMT
        Subject: CN=D11FEF0865C3D962548141BEDB45DEA4A153AA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:84:35:21:a6:9a:b8:52:f2:92:a1:00:62:
                    ee:d2:bd:4c:b3:37:da:14:6f:23:db:17:d1:41:c4:
                    cd:3b:e9:96:8d:e8:fd:30:c0:ff:2e:ea:1c:36:48:
                    41:09:71:de:d2:81:41:48:ce:b8:88:45:c0:9c:09:
                    3d:0c:1c:00:05:f5:86:19:d8:a1:b6:6f:37:1a:4b:
                    6e:ec:0f:47:7e:17:a0:ad:b6:57:b0:bc:9e:6b:a2:
                    56:e1:4f:7f:dc:fd:a6:86:6c:51:b4:b9:24:d1:9b:
                    4d:f2:8a:c2:1a:20:97:97:ee:46:24:79:f7:15:51:
                    4e:72:e6:96:7d:9c:0b:06:81:ee:86:29:d2:b3:f6:
                    aa:bc:f4:2e:47:82:57:b8:76:05:4b:d9:dc:85:87:
                    b5:ba:a8:a1:db:a8:1b:95:fd:12:c5:67:00:6f:99:
                    dd:d5:7c:13:9e:e5:e0:35:43:53:a7:4c:97:cb:a6:
                    ba:d3:81:6f:04:2c:63:f8:39:b7:70:f8:fd:83:34:
                    3c:d4:17:3f:aa:17:8f:22:a6:80:4e:9c:62:f3:d9:
                    d8:ce:27:38:37:8d:08:0c:5a:24:41:d6:3f:b9:f6:
                    9b:8f:74:ad:da:99:0a:68:3b:2e:d9:08:17:48:57:
                    46:8e:e6:b1:de:38:c8:da:f4:b4:34:7b:98:bd:98:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1F:EF:08:65:C3:D9:62:54:81:41:BE:DB:45:DE:A4:A1:53:AA:78
            X509v3 Authority Key Identifier:
                keyid:DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:de:a3:49:c7:3d:9d:8d:88:d4:98:3e:cb:04:12:be:c3:6d:
         5e:7b:5f:0a:fe:08:4e:df:02:11:d6:4c:5f:05:4a:b9:b0:f8:
         4b:78:ca:5d:06:71:b7:2e:57:51:16:8b:4a:ad:5f:df:8e:8a:
         42:d8:bd:2e:b1:c1:8a:76:95:7c:2c:a8:1e:34:81:84:dc:b1:
         a9:e1:98:d5:e8:fa:30:30:98:8a:7f:34:83:17:95:73:bf:a3:
         27:92:f6:bb:2f:2b:db:1f:a0:68:3c:dc:2c:ef:0d:d3:7b:c1:
         27:a2:2e:69:af:78:1a:13:ea:9b:77:7f:b5:21:4a:6f:74:6f:
         9f:3b:5a:6b:0a:b8:67:db:e9:3d:e6:62:cb:0a:3b:44:c2:85:
         02:f2:cd:39:46:84:ba:30:48:bb:d5:3b:97:d5:42:cf:30:44:
         49:0f:f4:a9:92:a8:6f:32:54:f1:d2:05:f9:ff:b2:62:ed:3d:
         2a:d6:9d:cf:ca:7e:a0:d4:c1:58:c5:de:65:e5:2e:21:73:56:
         ab:a4:b3:7a:1b:7d:a1:e9:73:65:5f:e1:7e:a2:f5:db:33:ef:
         31:cb:6c:ce:90:22:2a:05:57:03:9d:f2:a2:de:ac:d8:71:74:
         67:15:f3:28:95:6e:df:bc:34:90:cf:aa:fa:8c:95:0b:8b:e1:
         9d:0a:08:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org