Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/68B79D737297088228371E4509382F36484FD924.mft
File:                     68B79D737297088228371E4509382F36484FD924.mft (raw, json)
Hash identifier:          ATpSSJHL5G6YBCL3bT1w9LykTpHId98o/BK7mZ171XM=
Subject key identifier:   93:07:52:74:59:71:D3:95:D2:A7:CE:B2:42:12:58:FB:08:B9:FB:BE
Authority key identifier: 68:B7:9D:73:72:97:08:82:28:37:1E:45:09:38:2F:36:48:4F:D9:24
Certificate issuer:       /CN=68B79D737297088228371E4509382F36484FD924
Certificate serial:       0F06C16452CFA2232548FE2728F72E4670F2D878
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B79D737297088228371E4509382F36484FD924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/68B79D737297088228371E4509382F36484FD924.mft
Manifest number:          40
Signing time:             Sun 17 Sep 2023 06:50:42 +0000
Manifest this update:     Sun 17 Sep 2023 06:45:42 +0000
Manifest next update:     Mon 18 Sep 2023 09:39:42 +0000
Files and hashes:         1: 3133382e3138352e3130382e302f32322d3234203d3e203532373231.roa (hash: hYcHL2sBs+kQOcJX6Ar/t0ubBKLW9hfUTn8XiSqh2nU=)
                          2: 3137302e3234362e39362e302f32322d3234203d3e203532373231.roa (hash: cn4wV0LIcGLQYLhHus0cgSUPxBLJjnhAdyqDqt/MJFo=)
                          3: 3137372e38342e3130382e302f32322d3234203d3e203532373231.roa (hash: 6VtBWqXO5HpqWgFfhAzN58oBbW1iNsfP7lQZ98waZcg=)
                          4: 68B79D737297088228371E4509382F36484FD924.crl (hash: rOqg/59kIJK/tDXlb7446ViX9lknCfJicnfWmtxqHk8=)
                          5: 323830343a323636343a3a2f33322d3438203d3e203532373231.roa (hash: lZu9VG7LwrMFII9obt26cacMAsYi4Jig7uPUIszG6xU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:06:c1:64:52:cf:a2:23:25:48:fe:27:28:f7:2e:46:70:f2:d8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B79D737297088228371E4509382F36484FD924
        Validity
            Not Before: Sep 17 06:45:42 2023 GMT
            Not After : Sep 18 09:39:42 2023 GMT
        Subject: CN=930752745971D395D2A7CEB2421258FB08B9FBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:02:ab:cc:a5:67:44:b3:dc:3a:bc:51:93:74:
                    7c:d3:d4:f6:eb:df:78:1d:ab:17:5c:29:a2:0c:ea:
                    31:55:c9:57:f7:30:94:92:34:ba:d4:51:e2:c4:df:
                    f8:18:48:c1:ae:16:f6:3c:cb:44:88:42:6c:de:13:
                    fe:a3:a9:a2:0f:61:6b:50:02:c4:ac:66:16:cc:8c:
                    8e:55:83:06:ea:37:13:4d:fb:61:67:b1:7d:9e:a6:
                    6e:e2:80:d4:a2:6d:00:31:5f:17:a0:6f:c1:18:79:
                    5a:b9:29:cc:45:eb:52:cc:59:31:64:62:6e:67:b0:
                    ac:03:0b:e4:cf:a5:2c:68:0b:af:20:f5:35:c7:db:
                    de:77:05:75:9a:f5:f3:c2:69:eb:74:f6:16:80:85:
                    1c:fe:0c:3d:33:04:aa:b3:b8:0c:36:f5:aa:0f:7e:
                    56:b5:77:40:16:77:0d:12:f2:d8:2f:f3:48:85:81:
                    6d:67:4e:9b:b4:5f:f7:1f:b2:7f:94:5d:90:2f:82:
                    ca:bc:09:a2:4f:ed:31:a2:78:81:d6:8f:eb:ab:a3:
                    5b:17:76:51:d8:c0:e2:c1:aa:b7:27:97:29:9f:80:
                    b8:e5:11:bc:17:b0:6c:f9:bb:1b:57:7a:bd:f1:9a:
                    65:60:c8:b1:5f:87:0d:41:48:50:d0:c0:28:a5:d2:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:07:52:74:59:71:D3:95:D2:A7:CE:B2:42:12:58:FB:08:B9:FB:BE
            X509v3 Authority Key Identifier:
                keyid:68:B7:9D:73:72:97:08:82:28:37:1E:45:09:38:2F:36:48:4F:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/68B79D737297088228371E4509382F36484FD924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B79D737297088228371E4509382F36484FD924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/68B79D737297088228371E4509382F36484FD924.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:72:12:54:72:f4:5f:aa:14:e5:17:1c:9d:e5:93:54:8d:36:
         2b:c2:69:de:2e:2b:97:a9:f8:bb:3d:50:40:29:0a:b1:0e:46:
         e7:14:7c:9d:ab:01:ea:06:2d:97:72:42:2d:a5:8f:d0:f5:f4:
         f8:4a:86:13:51:ff:8a:00:0c:65:60:ac:86:3c:e4:cd:01:2c:
         32:69:2f:bf:56:c4:d3:c1:28:d6:fa:9f:4f:bf:7a:58:01:54:
         4e:4b:af:d2:bb:5a:7a:92:50:63:5a:55:5f:7d:f6:53:28:a9:
         3e:13:5f:b0:42:cc:6f:8a:85:74:f9:21:65:c7:fe:ba:7e:c7:
         e7:0a:f1:2a:96:2e:e5:b1:08:c9:f8:3b:70:12:cd:32:2c:ee:
         a4:87:78:06:d0:c8:8f:7f:b3:94:89:27:31:e5:0d:ec:3b:c5:
         53:d0:82:3d:51:e1:64:00:ba:3d:92:f2:75:a3:de:90:a3:9a:
         8c:70:ca:da:5e:d0:8b:fa:ca:10:ac:b1:4d:7c:76:cd:c4:b8:
         e7:ae:46:26:9c:46:c1:28:aa:65:cc:75:1b:c1:4d:95:45:75:
         7c:bc:18:13:5a:ee:99:02:90:1e:24:4e:99:a1:14:55:1a:99:
         15:44:32:3a:6b:95:57:0a:45:ef:86:fc:5c:cf:73:cb:04:54:
         24:31:64:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org