Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.mft
File:                     A2B53975CAA9F37EBEDF5A91D478B7210E52844B.mft (raw, json)
Hash identifier:          o2SJx3P7uhq3sPFSDBf2Zfcn8IJ9VEl+RBRoUsUmdDI=
Subject key identifier:   86:4D:29:07:C4:8A:2A:99:9E:7A:30:EA:4A:36:C7:AA:1E:4D:71:35
Authority key identifier: A2:B5:39:75:CA:A9:F3:7E:BE:DF:5A:91:D4:78:B7:21:0E:52:84:4B
Certificate issuer:       /CN=A2B53975CAA9F37EBEDF5A91D478B7210E52844B
Certificate serial:       33AC09DB704406B73F24325C8463125D27FC98E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.mft
Manifest number:          28
Signing time:             Wed 31 Jan 2024 13:54:26 +0000
Manifest this update:     Wed 31 Jan 2024 13:49:26 +0000
Manifest next update:     Thu 01 Feb 2024 14:02:26 +0000
Files and hashes:         1: 323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (hash: ktiWAQiy1oduTOIo1sln8jHNuHVMFNxkMWD7bIC6XdA=)
                          2: 3230302e3132342e38342e302f32322d3332203d3e20323730323734.roa (hash: 3s/nYMW4BFdSVc46WOZAOjQPTz07EPAAYVzW/LgDM88=)
                          3: A2B53975CAA9F37EBEDF5A91D478B7210E52844B.crl (hash: sdz272FCOYZeZCvFkCQB0J5emPgP2huv+jJD6/Wdq0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ac:09:db:70:44:06:b7:3f:24:32:5c:84:63:12:5d:27:fc:98:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B53975CAA9F37EBEDF5A91D478B7210E52844B
        Validity
            Not Before: Jan 31 13:49:26 2024 GMT
            Not After : Feb  1 14:02:26 2024 GMT
        Subject: CN=864D2907C48A2A999E7A30EA4A36C7AA1E4D7135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:d8:bf:e2:81:af:dd:80:1a:81:33:69:7d:
                    54:5f:a3:52:95:1e:d0:27:51:14:9d:87:17:88:c5:
                    c0:26:0e:f4:5e:ba:3d:54:d6:fb:56:aa:fd:bb:63:
                    b3:5b:87:3d:e9:c1:6b:cf:40:06:9f:eb:03:d5:53:
                    65:36:80:1d:6b:67:33:c8:8a:6f:f0:39:1a:e7:f8:
                    7c:b2:73:d3:11:0a:ee:c4:ee:9f:b6:87:d9:81:6d:
                    29:a8:6f:c0:3c:79:c6:07:00:78:92:e5:78:ac:81:
                    fa:2c:66:07:de:b9:d1:40:a7:5c:d0:84:9f:e6:57:
                    63:e7:da:58:86:58:88:b9:64:cf:51:60:93:97:e8:
                    38:b2:57:f4:d8:8c:39:e1:68:e9:88:32:e6:81:d0:
                    71:19:34:74:70:b4:f6:c9:76:8a:ef:9f:0d:17:7d:
                    1a:48:33:4f:bb:54:fb:4c:2a:07:5f:e2:ff:1d:2c:
                    5b:a6:a3:83:90:82:01:1f:07:c5:4b:d8:b6:f1:3b:
                    f6:38:13:84:3a:fc:10:55:62:9e:74:c1:ee:1f:75:
                    95:e4:64:7c:02:38:72:57:47:5f:42:61:1b:50:90:
                    d2:a1:c2:d2:67:18:ca:ee:aa:e1:a9:39:36:f2:72:
                    7c:18:9e:04:dc:ab:8f:e7:f0:8c:3f:80:b0:18:af:
                    58:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4D:29:07:C4:8A:2A:99:9E:7A:30:EA:4A:36:C7:AA:1E:4D:71:35
            X509v3 Authority Key Identifier:
                keyid:A2:B5:39:75:CA:A9:F3:7E:BE:DF:5A:91:D4:78:B7:21:0E:52:84:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:03:08:96:18:35:ad:11:29:d9:8e:bf:4d:cb:5a:f6:bc:bf:
         98:08:04:db:68:8e:d7:60:92:b2:64:9f:d7:2f:0f:2b:2f:d6:
         5d:66:f9:78:b5:1d:e9:91:31:62:ca:bf:34:49:17:3b:d3:d7:
         2c:a7:21:bb:83:83:36:70:89:c7:83:9e:34:06:ea:2f:6b:60:
         fb:82:01:88:a0:d3:bf:3d:84:6d:4d:ac:dd:44:43:8a:f7:d2:
         40:84:b2:97:18:9b:8a:38:56:15:68:0f:0f:b7:92:ac:0b:16:
         70:99:25:8c:43:45:c6:ea:ec:df:43:06:70:83:5f:c6:2d:e7:
         89:ce:62:fd:3d:2d:2f:67:61:44:b6:c6:51:2e:d2:8e:e4:a2:
         5b:ff:82:27:94:42:c1:16:bc:6e:78:f0:c6:ac:35:36:f2:b2:
         7f:3e:55:e8:90:1d:08:4e:7a:fb:80:22:2b:f3:2b:6c:c1:d5:
         11:47:3b:15:ee:db:84:27:2e:60:de:e8:7a:5d:71:25:af:e4:
         61:1e:7b:00:9c:9f:a3:d4:30:20:fd:03:9f:b4:95:60:4e:f6:
         d4:c9:88:10:da:04:77:8b:11:37:93:32:c7:73:4b:ee:32:0b:
         05:b2:73:a0:57:08:f3:46:88:64:57:41:15:49:e0:08:36:f6:
         8c:4c:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org