Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/585B7220F2B7E072CBB10D8AAA427BAB8904FFF3.mft
File:                     585B7220F2B7E072CBB10D8AAA427BAB8904FFF3.mft (raw, json)
Hash identifier:          1s/K4Lp8ojXuezwkZ8i0RtuqBABHI0cAfqYT0DUppLI=
Subject key identifier:   04:BD:D0:C8:96:4E:82:B5:5B:E7:0D:6B:BE:79:18:42:29:97:B9:03
Authority key identifier: 58:5B:72:20:F2:B7:E0:72:CB:B1:0D:8A:AA:42:7B:AB:89:04:FF:F3
Certificate issuer:       /CN=585B7220F2B7E072CBB10D8AAA427BAB8904FFF3
Certificate serial:       3BB011E99D0E62F71057291CBD08F0418E2E2AD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/585B7220F2B7E072CBB10D8AAA427BAB8904FFF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/585B7220F2B7E072CBB10D8AAA427BAB8904FFF3.mft
Manifest number:          6A
Signing time:             Mon 15 Apr 2024 05:20:20 +0000
Manifest this update:     Mon 15 Apr 2024 05:15:20 +0000
Manifest next update:     Tue 16 Apr 2024 06:32:20 +0000
Files and hashes:         1: 3139302e332e3136372e302f32342d3234203d3e20323731363033.roa (hash: X6SRj/d0sd9SrZ0QRgCL75EvonCGwRYojRybKb0/ZV8=)
                          2: 323830343a376531633a3a2f33322d3332203d3e20323731363033.roa (hash: QmPryfY1LM1WpbWaDmYwr4ptkD6wNbHPuuhsgKw7jIQ=)
                          3: 3139302e332e3136342e302f32322d3234203d3e20323731363033.roa (hash: CVEuQUFzJXNNaWiz95MzgczwnW45QptMKS17P2EYDyE=)
                          4: 3139302e332e3136342e302f32322d3232203d3e20323731363033.roa (hash: pYH4HG3xG8qVq28o6LhwBettjJsGiH0Pw9SswGWOx5g=)
                          5: 585B7220F2B7E072CBB10D8AAA427BAB8904FFF3.crl (hash: JftjPOMhZarHsiI/2cX6U57a/UtV8O7Upv0AFVbbn7I=)
                          6: 3139302e332e3136342e302f32342d3234203d3e20323731363033.roa (hash: MLZbXOU8xY6wmXZ7u5JC8znUpw8asvORm5iFXMAC9JM=)
                          7: 3139302e332e3136362e302f32342d3234203d3e20323731363033.roa (hash: nHYMnxyrwcMBu7tiss+glNEdc4vZzArPC9SW44bGYqA=)
                          8: 3139302e332e3136352e302f32342d3234203d3e20323731363033.roa (hash: paWb6F96ZofZun9tJwRwLIkyKgLZ2FK563vuDKUWMCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b0:11:e9:9d:0e:62:f7:10:57:29:1c:bd:08:f0:41:8e:2e:2a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585B7220F2B7E072CBB10D8AAA427BAB8904FFF3
        Validity
            Not Before: Apr 15 05:15:20 2024 GMT
            Not After : Apr 16 06:32:20 2024 GMT
        Subject: CN=04BDD0C8964E82B55BE70D6BBE7918422997B903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:32:a5:ad:65:68:a9:dd:32:3f:02:4a:9d:b4:
                    d4:76:6b:ea:e2:22:87:0e:ea:6a:22:64:ed:21:f1:
                    2c:96:b1:2b:e4:77:49:10:1d:76:9d:13:c7:ae:39:
                    a6:a7:e9:4d:b9:13:05:40:9d:75:39:73:8c:ad:89:
                    49:b6:34:81:8a:5c:31:e0:1f:72:99:c4:5d:4b:cf:
                    3c:18:b6:74:7b:e3:35:26:28:63:e1:85:a3:57:f7:
                    f0:03:37:65:e2:d4:55:dd:75:5a:0d:49:a1:e8:ba:
                    7f:66:91:a2:39:e0:f1:6c:68:14:05:84:bf:b5:75:
                    9b:7d:e5:c5:56:8d:00:2b:f6:3c:ab:2a:02:80:ef:
                    4d:f9:ad:e3:f3:3a:b3:30:37:4d:a1:5a:4c:15:08:
                    22:3e:6a:48:89:8b:c2:12:40:89:76:a7:dd:9b:37:
                    fb:01:d4:43:f2:93:8f:83:4f:e0:26:2b:bf:2d:e7:
                    0f:03:c1:81:cf:06:97:2b:8a:e8:5a:98:d5:69:16:
                    5e:24:f8:3c:2a:26:5b:66:de:60:71:f9:66:06:01:
                    75:32:48:f0:9e:1f:32:88:5a:f0:91:c7:af:e0:be:
                    95:41:04:6d:be:0a:18:b8:78:fd:d6:4b:97:c2:10:
                    2f:2a:e8:ef:82:e3:db:6a:24:14:0e:9d:b8:29:84:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BD:D0:C8:96:4E:82:B5:5B:E7:0D:6B:BE:79:18:42:29:97:B9:03
            X509v3 Authority Key Identifier:
                keyid:58:5B:72:20:F2:B7:E0:72:CB:B1:0D:8A:AA:42:7B:AB:89:04:FF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/585B7220F2B7E072CBB10D8AAA427BAB8904FFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/585B7220F2B7E072CBB10D8AAA427BAB8904FFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/585B7220F2B7E072CBB10D8AAA427BAB8904FFF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:12:8b:87:7f:ad:82:c1:36:1a:e9:fb:15:3c:e5:5a:6c:29:
         fd:8b:d0:09:23:e4:e1:ab:6c:8f:d8:d3:95:f2:62:5b:8b:b8:
         d1:fb:2f:e7:6a:50:ea:40:3b:26:3f:ea:00:47:69:cc:fb:9f:
         ff:25:60:bf:50:8f:7e:44:17:d2:ec:20:16:11:19:67:dd:26:
         3a:f5:c4:50:c3:75:7b:aa:ef:48:de:76:b7:df:08:86:02:14:
         d0:6a:69:7e:57:08:e9:a0:1f:64:7d:85:59:66:50:0f:83:0b:
         6e:ea:9e:30:c4:5f:6e:f4:7b:31:1a:d7:3d:08:07:a2:69:4c:
         ea:25:fe:69:82:34:56:2c:db:40:dd:b5:c8:e8:d1:60:dd:2f:
         3d:80:3c:e4:e1:bd:65:7a:c9:02:9b:2c:6f:16:3d:7e:f0:62:
         82:d7:f9:cb:ec:a7:30:69:95:6f:69:0f:ba:63:0f:a1:b6:39:
         c8:9c:d9:e2:dc:15:02:19:1b:b6:98:f4:79:d7:65:47:87:df:
         0d:41:f0:38:7d:1f:26:5b:e1:95:3b:a3:09:55:f0:33:e6:ac:
         1e:59:9f:1c:32:1b:e9:08:25:c4:50:0a:7e:ec:42:f2:67:de:
         64:6e:32:39:d5:92:97:5c:a9:f6:d8:64:00:11:66:96:bb:62:
         ba:4a:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org