Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/66071341D63E79CFFB28924CC5439D027A3440BA.mft
File:                     66071341D63E79CFFB28924CC5439D027A3440BA.mft (raw, json)
Hash identifier:          9QLPYDbbFLTadiaFSYeGE3cz+mi7McDFrNoLJlqXJAw=
Subject key identifier:   30:8E:24:2C:3B:D9:ED:61:C4:8A:BA:E3:A8:3D:DB:3E:4B:E0:82:C7
Authority key identifier: 66:07:13:41:D6:3E:79:CF:FB:28:92:4C:C5:43:9D:02:7A:34:40:BA
Certificate issuer:       /CN=66071341D63E79CFFB28924CC5439D027A3440BA
Certificate serial:       211103607EB7DCC66DD998E7C7D391505E26D68B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66071341D63E79CFFB28924CC5439D027A3440BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/66071341D63E79CFFB28924CC5439D027A3440BA.mft
Manifest number:          11
Signing time:             Mon 15 Apr 2024 07:25:48 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:48 +0000
Manifest next update:     Tue 16 Apr 2024 10:37:48 +0000
Files and hashes:         1: 3137372e33392e3231362e302f32312d3234203d3e203532373935.roa (hash: MDf0CojOC0YJKEufOsurNDA+hTQgSSMJ1HmuRAy5/Ew=)
                          2: 323830343a323134343a3a2f33322d3438203d3e203532373935.roa (hash: W8AuSpKpi0yyFY7mrDddRcuyz2qSsk5shPbTgJOFTzU=)
                          3: 66071341D63E79CFFB28924CC5439D027A3440BA.crl (hash: C+Mcx+U/If8Pn91elJ0/gp/QXblHsq2Leaf+lZid+nM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:11:03:60:7e:b7:dc:c6:6d:d9:98:e7:c7:d3:91:50:5e:26:d6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66071341D63E79CFFB28924CC5439D027A3440BA
        Validity
            Not Before: Apr 15 07:20:48 2024 GMT
            Not After : Apr 16 10:37:48 2024 GMT
        Subject: CN=308E242C3BD9ED61C48ABAE3A83DDB3E4BE082C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:9c:4e:4c:bb:0d:33:5a:ee:ca:96:d9:84:
                    72:94:16:c5:ee:c6:34:97:22:51:39:f7:c6:cf:45:
                    c6:ca:6b:a1:f2:b7:d8:e3:d7:b9:5f:27:64:4f:90:
                    49:9e:aa:62:16:04:fa:83:66:e8:3f:67:5d:74:3b:
                    2a:73:04:aa:05:b1:35:0f:c7:fc:36:eb:7d:d3:3e:
                    4d:bc:71:94:c4:27:96:a7:ba:d5:6d:2a:5d:c7:ef:
                    7d:f1:b7:b2:4c:33:8f:36:ca:6f:cd:8e:93:f5:57:
                    77:ce:85:a7:51:e7:8f:19:ea:c2:9f:fc:3c:5e:d1:
                    60:2f:b9:41:57:68:f3:a6:2a:40:f6:b9:e9:a5:4c:
                    78:5d:5b:08:37:16:cd:4c:5b:7a:82:d5:e8:73:92:
                    57:68:66:68:2d:19:a3:f1:9f:5a:22:10:87:fd:f3:
                    d4:69:c6:af:56:8a:cf:d6:40:a8:52:bb:5d:99:25:
                    40:c7:f0:ba:93:52:94:65:32:51:24:10:ce:a8:1d:
                    d6:02:19:7a:4f:25:a4:bd:a9:92:55:b9:23:a9:df:
                    5d:2f:fd:88:88:4e:8e:bf:9a:dc:6a:f0:79:6a:48:
                    08:fa:e8:7d:c8:19:60:fd:ca:b3:3b:71:40:c2:6a:
                    60:47:36:4c:27:ee:54:ab:6d:51:00:d8:e2:e1:86:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8E:24:2C:3B:D9:ED:61:C4:8A:BA:E3:A8:3D:DB:3E:4B:E0:82:C7
            X509v3 Authority Key Identifier:
                keyid:66:07:13:41:D6:3E:79:CF:FB:28:92:4C:C5:43:9D:02:7A:34:40:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/66071341D63E79CFFB28924CC5439D027A3440BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66071341D63E79CFFB28924CC5439D027A3440BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/66071341D63E79CFFB28924CC5439D027A3440BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:dc:18:34:2d:62:17:1e:e6:00:d9:2b:dd:95:32:0a:79:85:
         56:5b:e5:23:0d:c0:d7:bb:ee:35:33:6d:94:d8:e9:41:5a:5c:
         a4:11:e3:5e:66:c2:6f:79:e4:09:9e:a5:98:29:39:0f:a9:7c:
         6a:42:7d:09:d1:32:7a:d1:16:96:d4:3a:d5:0c:cf:8d:92:97:
         53:da:a1:2c:cd:1b:44:e4:b2:6c:68:21:be:56:af:18:30:e1:
         3c:6a:5e:56:b2:97:83:21:67:a0:e3:a9:b8:c2:c9:b6:cf:31:
         28:95:ba:80:62:da:f8:2a:7c:d6:37:25:5b:21:aa:25:b5:28:
         e2:b7:01:ac:8a:92:3d:f6:1d:92:3c:27:72:c9:08:9a:0f:d8:
         de:45:7a:15:f0:69:ba:67:f7:46:c3:a7:24:35:ed:d9:fe:94:
         b6:59:42:b1:55:ea:b6:34:84:2b:66:61:69:58:eb:af:51:cf:
         bb:f3:76:57:a7:6f:d1:14:e0:0b:7f:3d:aa:e1:fb:6e:06:c1:
         64:f4:34:85:f2:ee:7a:4c:b7:20:fb:1b:85:31:05:3d:0b:f6:
         0d:5f:0c:59:be:02:9a:2e:d5:cc:ce:fb:f3:c8:d4:81:5f:ea:
         6d:34:c9:8b:0f:8f:cc:29:b2:50:28:5d:7c:57:1a:fb:a4:0c:
         a6:5f:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org