Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D220D3BC61867A786DDC56B6E90C2634C43E790D.mft
File:                     D220D3BC61867A786DDC56B6E90C2634C43E790D.mft (raw, json)
Hash identifier:          mqMwtfwDOMl/QFHnvDRQfVLEwj5it5SwZvlHcPIFQLk=
Subject key identifier:   54:74:ED:8E:A3:42:AB:F6:02:48:D5:B5:70:BF:35:C2:FB:0F:C4:4D
Authority key identifier: D2:20:D3:BC:61:86:7A:78:6D:DC:56:B6:E9:0C:26:34:C4:3E:79:0D
Certificate issuer:       /CN=D220D3BC61867A786DDC56B6E90C2634C43E790D
Certificate serial:       51E3F4572DFF50D2EC4CB5AC1358DE90F4B33FD3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D220D3BC61867A786DDC56B6E90C2634C43E790D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D220D3BC61867A786DDC56B6E90C2634C43E790D.mft
Manifest number:          04
Signing time:             Thu 06 Jul 2023 07:56:03 +0000
Manifest this update:     Thu 06 Jul 2023 07:51:03 +0000
Manifest next update:     Fri 07 Jul 2023 09:57:03 +0000
Files and hashes:         1: D220D3BC61867A786DDC56B6E90C2634C43E790D.crl (hash: P5+Q5cviGA6GHW2Y5M2t1nXrXnyw0cCqrI/cBef/UIs=)
                          2: 323830343a346264383a3a2f33322d313238203d3e20323637333332.roa (hash: Ww4qcpvXlO9C+2puhBQm5NMfRHi/gEbPcEFgMS8kOxU=)
                          3: 34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa (hash: NzyaT+GhrhMXJ/mM6+XvhAsnSE9XvftKLgypXPkeLGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e3:f4:57:2d:ff:50:d2:ec:4c:b5:ac:13:58:de:90:f4:b3:3f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D220D3BC61867A786DDC56B6E90C2634C43E790D
        Validity
            Not Before: Jul  6 07:51:03 2023 GMT
            Not After : Jul  7 09:57:03 2023 GMT
        Subject: CN=5474ED8EA342ABF60248D5B570BF35C2FB0FC44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:8b:61:19:29:fe:7e:70:5d:2b:52:fc:37:
                    bb:f9:97:b8:6e:42:f8:d3:9a:85:4d:ad:97:92:88:
                    be:80:38:4a:f1:de:55:5b:1f:57:b8:d2:51:e5:15:
                    55:a0:0a:bd:a6:b3:9f:b5:36:c2:13:ff:a7:c5:5e:
                    af:b2:0d:14:65:8b:b1:ba:5b:4b:ba:bd:fc:64:36:
                    b2:39:8d:7d:fe:57:6e:fe:1c:b7:41:53:65:10:71:
                    eb:aa:d9:fd:43:de:2a:6b:d4:58:b3:0c:4d:42:22:
                    ad:fb:51:30:4f:48:e8:68:09:d2:47:e8:d7:29:d9:
                    e5:05:5a:1e:d1:29:67:4c:81:f7:53:5b:d5:22:3f:
                    bb:0f:11:fa:cb:f6:46:26:02:a9:58:ea:b5:56:be:
                    28:5b:fe:7c:5f:8d:39:73:b2:a0:dc:f6:ab:e2:4f:
                    bc:20:93:22:dd:73:4b:3c:1f:4b:f2:dc:23:29:e5:
                    52:4a:28:f3:ed:ad:96:d6:0b:06:cd:c9:0b:42:89:
                    9b:98:28:3e:a8:e6:04:03:f4:a8:2e:6c:69:78:ec:
                    a2:1d:d6:d9:83:79:de:42:61:22:7a:1c:40:49:ff:
                    60:0c:3a:73:fa:76:c2:4f:d3:83:f3:5f:fa:2c:02:
                    3b:71:da:83:f0:6e:9d:e6:35:38:dd:13:c2:73:77:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:ED:8E:A3:42:AB:F6:02:48:D5:B5:70:BF:35:C2:FB:0F:C4:4D
            X509v3 Authority Key Identifier:
                keyid:D2:20:D3:BC:61:86:7A:78:6D:DC:56:B6:E9:0C:26:34:C4:3E:79:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D220D3BC61867A786DDC56B6E90C2634C43E790D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D220D3BC61867A786DDC56B6E90C2634C43E790D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D220D3BC61867A786DDC56B6E90C2634C43E790D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:da:80:23:23:82:44:06:7e:7c:88:b7:e2:9a:23:76:d5:8c:
         3e:24:cd:4d:c6:44:c6:69:1d:e6:e4:8b:ac:8e:45:ee:f6:63:
         c2:d9:90:11:48:6a:3b:21:67:1e:c0:30:87:93:e4:16:0f:d9:
         1c:26:c3:e2:16:ab:bd:c3:fe:1f:e9:2c:b6:b5:b9:87:72:01:
         66:e6:0a:41:b8:e8:36:d0:fe:6b:a5:40:83:4b:2d:07:b0:d1:
         ab:0a:05:b9:6a:7b:49:8b:bb:eb:fa:d1:7d:e0:b2:58:ed:61:
         93:e9:1a:d7:7d:5b:18:af:1f:df:8d:3c:e2:ce:30:e4:ba:38:
         92:79:98:62:0b:e5:47:4a:11:69:a1:93:46:1c:19:ac:0b:2c:
         9b:f5:70:43:9e:9e:c7:e1:2d:f6:75:6d:9d:e4:0c:59:17:a6:
         aa:af:51:bc:5f:e8:88:f5:b1:e3:06:7d:df:1d:7d:fa:0d:04:
         b0:2b:a7:a5:2f:e5:e9:0b:b0:cf:e1:e2:2b:69:45:21:4d:3e:
         f6:26:75:fa:43:b1:1e:1b:b7:39:33:56:6d:a6:ce:25:14:9b:
         39:7d:be:5f:f5:77:97:86:27:66:a0:93:68:b5:21:5e:b7:87:
         43:8b:d6:2f:e8:d9:2c:ff:ef:fc:3a:9b:15:bb:78:7c:7b:21:
         c2:91:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org