Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/439FF6311D69FD8E0CED053845878C844A00FE9F.mft
File:                     439FF6311D69FD8E0CED053845878C844A00FE9F.mft (raw, json)
Hash identifier:          VV1F8EJSjoP2bH3vuN+gjDO2RT8JBhx1OYrJiHcCZ4c=
Subject key identifier:   BF:C5:1F:D5:9A:9D:4F:0A:06:24:7D:5D:1D:7A:AD:3A:CC:FF:90:CC
Authority key identifier: 43:9F:F6:31:1D:69:FD:8E:0C:ED:05:38:45:87:8C:84:4A:00:FE:9F
Certificate issuer:       /CN=439FF6311D69FD8E0CED053845878C844A00FE9F
Certificate serial:       5488A9BAF26799D3643288927242B28622A59499
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/439FF6311D69FD8E0CED053845878C844A00FE9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/439FF6311D69FD8E0CED053845878C844A00FE9F.mft
Manifest number:          02D8
Signing time:             Sun 14 Apr 2024 23:31:57 +0000
Manifest this update:     Sun 14 Apr 2024 23:26:57 +0000
Manifest next update:     Tue 16 Apr 2024 03:19:57 +0000
Files and hashes:         1: 323830343a373738343a3a2f33322d3334203d3e20323731313833.roa (hash: cww+93ZUNELJrgFRjX87/UjJyyy4iw8hZuAggpNHmRo=)
                          2: 3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa (hash: fjwDBiJ62Kfoh4il7/GwWK7tazrFbNkrL8oqcJht6ys=)
                          3: 3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa (hash: jkUUgna7ZOqdwTK952YsXpRq4KWIB4evgZhcq34sRDI=)
                          4: 439FF6311D69FD8E0CED053845878C844A00FE9F.crl (hash: tVNEp81107WNpRKiQPSof+SPLYrlM+ykWEApxX6KtME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:88:a9:ba:f2:67:99:d3:64:32:88:92:72:42:b2:86:22:a5:94:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439FF6311D69FD8E0CED053845878C844A00FE9F
        Validity
            Not Before: Apr 14 23:26:57 2024 GMT
            Not After : Apr 16 03:19:57 2024 GMT
        Subject: CN=BFC51FD59A9D4F0A06247D5D1D7AAD3ACCFF90CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:2e:cc:bd:59:cf:ed:66:68:9e:f2:9f:a2:
                    6e:44:94:53:bd:12:0c:ff:2d:fc:62:de:d0:62:94:
                    70:b4:65:2c:df:71:70:c1:20:27:54:ab:2d:15:88:
                    0f:ff:6f:dc:55:f0:53:ae:92:61:07:1d:0e:11:cf:
                    c5:00:e9:1a:d5:43:53:03:ff:b4:e1:ad:00:75:a1:
                    34:05:1f:4f:5b:9b:00:f9:47:5d:a9:a8:b3:5b:20:
                    bc:91:51:23:c3:c0:8e:4c:89:fd:09:54:d7:5d:c6:
                    8d:6e:03:11:b1:7f:7c:e2:d4:60:d4:ee:40:59:cc:
                    f6:48:b5:40:f0:2a:8b:4e:4a:53:60:b8:1d:76:65:
                    54:fc:61:e8:f7:1c:c3:e9:be:0f:a9:03:47:4e:7a:
                    2e:39:8d:cd:c9:8f:be:00:12:93:e1:aa:b0:fd:70:
                    b6:94:c9:ca:ee:fc:16:96:5a:a2:94:be:e1:22:19:
                    5e:0b:96:ad:0d:8c:67:2c:bd:41:76:93:f1:55:0d:
                    a8:ee:c1:6d:01:f2:75:a5:de:ce:c7:8c:35:91:52:
                    31:6a:26:de:50:66:9f:ae:a1:8d:6a:12:fc:5f:e0:
                    86:c1:57:6c:ed:e3:71:3c:c5:a5:c3:12:ef:3b:6a:
                    7f:c2:11:a7:37:83:4d:3c:3a:40:4b:99:2e:3e:b3:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:1F:D5:9A:9D:4F:0A:06:24:7D:5D:1D:7A:AD:3A:CC:FF:90:CC
            X509v3 Authority Key Identifier:
                keyid:43:9F:F6:31:1D:69:FD:8E:0C:ED:05:38:45:87:8C:84:4A:00:FE:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/439FF6311D69FD8E0CED053845878C844A00FE9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/439FF6311D69FD8E0CED053845878C844A00FE9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/439FF6311D69FD8E0CED053845878C844A00FE9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:81:d7:8a:9f:8a:27:ab:c7:ba:dd:6d:59:2e:ff:d5:70:
         d4:25:ac:5c:e1:87:b5:72:cd:83:9d:1d:c2:9c:ee:e6:43:b1:
         cb:e9:e0:4e:77:78:6e:aa:46:ce:73:28:ad:25:35:8e:44:d8:
         7c:ce:c6:6d:c7:6b:c3:fb:77:4d:07:f2:7f:73:82:f7:7c:5e:
         d6:33:83:97:f3:e2:be:72:ea:27:b9:5a:d7:ca:55:3b:cd:8d:
         ba:e0:11:19:93:d3:92:a0:34:bd:8d:b1:a7:f8:1d:b8:01:0b:
         34:d2:ad:5d:47:6d:93:0e:1c:b8:b3:20:f6:09:94:19:fa:71:
         d1:d6:b2:7d:1d:ed:0a:95:95:8d:a2:56:41:6f:7c:53:ff:3e:
         b1:2f:37:a0:ca:b5:57:10:b7:e6:cc:10:87:d2:9c:73:e6:5a:
         67:51:cf:3f:bd:c0:35:53:bb:0c:c4:4c:f6:7c:dd:1a:a4:1e:
         33:e1:91:9f:6e:87:be:96:02:72:3d:88:39:28:9a:ea:4f:42:
         5d:84:9b:06:4d:20:26:8a:85:68:bf:23:b0:32:75:f1:4b:e5:
         ed:53:7c:ae:c1:45:c2:65:3b:16:aa:5b:5f:d6:7b:32:58:ca:
         f3:7d:01:22:80:0d:7d:97:5d:3b:52:7c:bd:5c:fa:8b:54:24:
         c2:2f:f1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org