Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.mft
File:                     AA645B4C304DB254B5BF6669A930A294780DC49B.mft (raw, json)
Hash identifier:          iyVZBOXnP65njffi4fAx39S7cj2382uiX0/+hpgK0tM=
Subject key identifier:   64:8E:34:42:C9:C5:7D:88:80:6D:96:35:05:70:C0:EE:B1:4C:7E:D9
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Certificate issuer:       /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial:       43968324D501C0ADF27776A005BF2E45D2DC5DAE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.mft
Manifest number:          01F7
Signing time:             Sun 14 Apr 2024 21:40:03 +0000
Manifest this update:     Sun 14 Apr 2024 21:35:03 +0000
Manifest next update:     Mon 15 Apr 2024 21:43:03 +0000
Files and hashes:         1: 34352e3232382e38362e302f32332d3233203d3e20323637303637.roa (hash: VV953xZddArSTfaVtX//YrOkCF4Cwz/2pPqmZ4my/5k=)
                          2: AA645B4C304DB254B5BF6669A930A294780DC49B.crl (hash: RsuQ2bliF17WuU0iPTM8gZ2Y2mIuW+Yng/M2eAIbhYQ=)
                          3: 34352e3232382e38342e302f32332d3233203d3e20323637303637.roa (hash: 1bgjsDY/43ipfIatXCHno40suBZGoK9MbQGDMx8Kw5A=)
                          4: 34352e3232382e38342e302f32322d3232203d3e20323637303637.roa (hash: hR/+rOYJKXaFVK0zpvEb8BL3j0uMwlI2WHx2eFNj2qA=)
                          5: 323830343a343761343a3a2f33322d3332203d3e20323637303637.roa (hash: qabRc2B10DMeT1n9kvxoY+5Aly7fLkaehGpCqUhdI8U=)
                          6: 323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa (hash: oMWQhvtN2Ht74DwScQKZ4/6v8dT/317EmMLjfL/5WpM=)
                          7: 323830343a343761343a3230303a3a2f34302d3430203d3e20323637303637.roa (hash: 5QkLidt/5QrhA+Vb0ryd40Ux6sXl2oVDsxxzGEYWOxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:96:83:24:d5:01:c0:ad:f2:77:76:a0:05:bf:2e:45:d2:dc:5d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
        Validity
            Not Before: Apr 14 21:35:03 2024 GMT
            Not After : Apr 15 21:43:03 2024 GMT
        Subject: CN=648E3442C9C57D88806D96350570C0EEB14C7ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:f2:36:55:c4:98:aa:1f:69:28:af:a1:31:
                    17:47:28:bc:20:69:ad:58:b7:42:a9:04:ae:61:dc:
                    1f:ef:4d:b5:76:8a:ee:8f:56:b2:bf:36:79:5f:47:
                    6f:ad:5d:95:0b:ed:ff:52:2c:36:62:7c:25:df:3b:
                    81:9d:53:81:bb:28:77:22:c3:fb:2b:90:55:9d:d1:
                    e7:05:4f:fb:6b:74:3c:45:4c:2d:fa:3e:c4:f4:7f:
                    38:ea:d2:be:7c:73:e2:c7:d3:cb:8e:2a:fc:e3:15:
                    5e:9e:01:1a:55:7a:f2:89:96:ca:f5:da:32:7c:fa:
                    96:88:19:f8:e7:91:01:5c:53:c7:29:f9:9c:a4:21:
                    39:58:80:4f:55:a4:0e:a1:c9:79:28:1a:d6:df:75:
                    97:77:97:43:02:0f:9b:94:70:f7:24:bb:92:60:f8:
                    95:c7:6a:d0:58:d4:53:5b:7c:d0:2b:08:c6:c1:07:
                    22:c5:f7:61:03:d4:f3:72:1a:f3:f1:e9:52:32:3a:
                    09:3a:b6:58:04:54:a4:2a:f9:36:86:9d:67:5f:07:
                    d7:9b:9f:bd:67:d1:96:bb:4d:7b:d4:04:fd:c6:74:
                    ef:df:04:29:0e:45:dd:a6:90:ee:1e:e7:ea:51:5c:
                    f3:38:82:72:88:b8:02:11:4c:e6:34:c1:74:86:bb:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8E:34:42:C9:C5:7D:88:80:6D:96:35:05:70:C0:EE:B1:4C:7E:D9
            X509v3 Authority Key Identifier:
                keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:5f:3c:29:99:e3:35:e5:01:39:19:b8:3a:9e:3b:d6:b8:
         40:5a:e8:c2:79:11:d6:04:9d:c5:06:28:38:27:0a:7e:94:d5:
         b4:c5:7c:68:8a:78:91:37:dc:09:05:37:6f:8d:ce:e8:7e:ed:
         3d:98:d4:e9:2d:63:16:a5:0b:58:07:9f:f9:84:69:cf:09:ab:
         73:9a:e4:d2:c8:62:49:5e:90:ec:3c:bc:f7:75:85:5f:0b:8c:
         99:b7:88:a2:6c:2f:e3:e3:1d:ce:2f:72:f4:24:76:e0:57:42:
         43:be:53:ab:1e:08:50:63:76:07:2d:aa:a2:34:0a:3c:08:fd:
         3f:36:a4:bd:1c:4e:3d:d8:5f:00:87:d3:eb:06:ca:b3:00:e0:
         c4:d3:ec:10:d1:de:59:83:f3:f3:be:27:2a:46:c6:aa:3f:54:
         79:2e:9d:0c:0a:86:9e:46:09:49:94:9b:a1:12:86:40:f6:9a:
         c1:65:ba:a9:2c:04:f9:6b:17:7b:0b:c5:9c:36:73:66:9f:17:
         d7:58:81:ba:69:cc:26:b2:af:a5:14:2f:90:69:3b:e3:58:05:
         98:ee:6f:89:46:05:5a:b1:b7:34:1a:63:c2:8b:96:4c:5c:66:
         23:85:30:b2:68:89:6d:39:87:0b:c3:2d:b9:82:0e:0a:b8:af:
         32:f3:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org