Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.mft
File:                     DB3CA746E597EE92E31AA5AF597CA07291DFB128.mft (raw, json)
Hash identifier:          3APvX3UQu/UxF40KChQKIk/b7ouYf9AmCeTVpCOCCTY=
Subject key identifier:   89:2C:00:97:F2:94:A0:59:C0:88:64:03:0E:3B:36:A4:D9:8E:C9:69
Authority key identifier: DB:3C:A7:46:E5:97:EE:92:E3:1A:A5:AF:59:7C:A0:72:91:DF:B1:28
Certificate issuer:       /CN=DB3CA746E597EE92E31AA5AF597CA07291DFB128
Certificate serial:       16737C1EE340DD96521AB56A721B6579A263868A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.mft
Manifest number:          0271
Signing time:             Mon 15 Apr 2024 06:07:35 +0000
Manifest this update:     Mon 15 Apr 2024 06:02:35 +0000
Manifest next update:     Tue 16 Apr 2024 09:17:35 +0000
Files and hashes:         1: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: /OCfo9Cu3byAQepvE2VTRdrGr6VgE3J9bjP9MLKc35A=)
                          2: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 1HJ+7fxEVYkbf+StGnz+jrP5HFfuDYZ+KnNFq/nzBqY=)
                          3: DB3CA746E597EE92E31AA5AF597CA07291DFB128.crl (hash: HBw927WIIJTVUGgxJfzRTS8rJ7Y1rC8TVO4q94bgoBA=)
                          4: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: ng3QFwd53DvkV7jVMt0nnUzR0LCYkR3GBtqM064wjuM=)
                          5: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: cIYGVIG4YpjTNc871LHWlelBmTlSQhp5VxpmiyYFXAI=)
                          6: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: 2f5ynI27db5IUTKyFh3GeQwCPOPFfWilOHoGoV4fDTw=)
                          7: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: 0Y1HLBgyFjh/LTsHWcZ8hZH78mANK/dKrRu8X8rb82k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:73:7c:1e:e3:40:dd:96:52:1a:b5:6a:72:1b:65:79:a2:63:86:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3CA746E597EE92E31AA5AF597CA07291DFB128
        Validity
            Not Before: Apr 15 06:02:35 2024 GMT
            Not After : Apr 16 09:17:35 2024 GMT
        Subject: CN=892C0097F294A059C08864030E3B36A4D98EC969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:85:29:7f:12:91:2f:07:14:8a:da:1c:69:
                    46:55:32:c7:c6:cc:e1:ea:bb:5f:90:d6:36:67:31:
                    bd:8b:0a:e8:94:42:1c:49:c7:53:f9:16:0d:3e:07:
                    5b:3e:dc:17:ed:33:1b:95:c7:19:3c:d4:e9:66:bd:
                    ce:51:29:03:70:08:f3:b6:49:46:ec:8e:77:41:b1:
                    a9:cb:f3:59:bc:32:a7:9f:c2:06:38:c1:1e:3c:f3:
                    ed:1e:71:8b:31:68:ba:51:e2:6b:de:a8:8f:ba:52:
                    b2:c7:5f:8b:52:df:3b:58:94:a9:13:71:6f:5e:90:
                    a7:aa:e4:b7:7a:ee:61:b1:44:23:be:08:ef:3e:65:
                    44:73:03:d9:36:b3:4d:1d:25:5b:bd:0a:5d:fe:4a:
                    66:89:00:29:a9:86:03:7e:77:8f:19:44:9f:8c:53:
                    39:e9:8f:72:b4:f8:28:ac:ac:9d:df:9e:87:79:31:
                    fc:22:f6:35:53:dd:d8:ca:d3:09:b6:39:ad:08:7f:
                    20:21:fd:8c:8e:4e:41:22:6b:03:2e:9f:f1:c6:31:
                    d0:ce:26:60:60:c0:38:9a:9c:04:43:9e:38:48:cf:
                    83:c2:10:55:0e:49:e5:ca:4c:cb:16:9e:7f:0b:2a:
                    cf:61:1a:6b:57:9a:f9:cf:ef:2f:81:0f:03:b6:5c:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2C:00:97:F2:94:A0:59:C0:88:64:03:0E:3B:36:A4:D9:8E:C9:69
            X509v3 Authority Key Identifier:
                keyid:DB:3C:A7:46:E5:97:EE:92:E3:1A:A5:AF:59:7C:A0:72:91:DF:B1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:62:31:8c:f1:97:99:4a:ed:fa:62:25:8c:20:ed:10:8a:86:
         9a:b3:5c:b7:0b:c8:85:65:41:0c:a7:05:a7:df:ee:a6:41:07:
         ae:bb:bd:7c:01:a9:5a:c9:20:72:8f:91:a9:11:1b:19:8a:4b:
         11:90:09:25:58:94:53:97:01:57:ca:93:a9:68:59:15:27:d9:
         94:87:87:da:60:39:82:a2:62:8e:91:0a:cb:6e:3d:e5:ff:e9:
         81:bd:1f:f5:ce:99:27:26:d1:0e:27:3a:15:45:ca:18:76:72:
         37:f0:18:62:34:2e:63:a0:b5:17:b5:6d:45:61:7d:6a:af:66:
         a3:84:32:bf:b6:74:4a:78:db:77:6b:94:d0:41:75:59:1d:84:
         2e:c9:98:46:54:01:3a:95:10:33:cc:f2:68:bc:af:47:24:da:
         75:c2:cd:13:59:45:5c:7a:75:99:fc:f7:eb:d7:64:6a:a2:9d:
         38:6a:78:93:78:39:d9:87:fe:46:8c:87:78:74:35:49:d9:eb:
         e6:37:f8:c8:bf:5e:fe:3e:f2:fd:39:2b:af:77:e7:d2:3f:97:
         ef:80:52:29:f5:2d:82:5e:10:90:32:69:5f:6d:f3:d1:7c:9c:
         0a:d7:da:bb:d9:dc:d9:98:0d:cb:68:8b:8c:f3:5c:c7:b6:f6:
         39:e1:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org