Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.mft
File:                     8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.mft (raw, json)
Hash identifier:          bEFB/sAYY6U2t77H3TqCueZhGbRiwC2S2tW6J6GBXCA=
Subject key identifier:   28:76:26:E8:F4:4C:55:8F:F5:FD:56:69:92:4E:FF:57:7C:95:69:E9
Authority key identifier: 8D:DB:FF:58:C2:53:E3:91:0A:8A:F8:D2:0D:2B:93:EF:9D:0E:75:4F
Certificate issuer:       /CN=8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F
Certificate serial:       32D71F0C76573E1D007887EDCDF6951A5531CAAE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.mft
Manifest number:          13
Signing time:             Sat 02 Nov 2024 19:04:38 +0000
Manifest this update:     Sat 02 Nov 2024 18:59:38 +0000
Manifest next update:     Sun 03 Nov 2024 20:31:38 +0000
Files and hashes:         1: 323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (hash: nXrCmVdfQouwaZG723KfM+r+xG9wFr2xTuUmQ6qmT7k=)
                          2: 3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa (hash: gdVFSHQOs8WmPzapXEBdaJqPaPp/TGersgHBYLt+HOc=)
                          3: 3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (hash: bdTemvh97h3jku0CaSdRamPUPJpzQEJmuarR+AXaVeY=)
                          4: 8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.crl (hash: huHZJY51wgxi/VzYHlVnQbfVQ+kKBMVDlGzhKXte/28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d7:1f:0c:76:57:3e:1d:00:78:87:ed:cd:f6:95:1a:55:31:ca:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F
        Validity
            Not Before: Nov  2 18:59:38 2024 GMT
            Not After : Nov  3 20:31:38 2024 GMT
        Subject: CN=287626E8F44C558FF5FD5669924EFF577C9569E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:64:4c:6a:6e:a5:eb:8d:d9:a2:84:80:10:
                    e9:95:d1:50:27:96:2a:f8:a0:94:7d:fb:ae:75:c5:
                    de:24:35:7b:92:55:dd:0d:d6:5a:65:e3:2c:27:de:
                    32:19:c1:ba:d3:89:ba:46:b6:91:2a:44:a9:d5:88:
                    86:ca:b5:9a:42:1f:9f:da:3b:97:dd:04:a9:37:bb:
                    ce:91:95:da:d4:b0:37:c6:83:44:c5:e1:85:de:22:
                    66:32:82:a9:c8:f1:07:84:9c:4d:3f:06:8e:4f:4c:
                    8a:0e:38:20:fd:53:a3:9b:57:57:8a:52:44:38:00:
                    49:c5:5e:85:e4:a9:72:44:7a:0a:90:48:17:87:b1:
                    ea:f9:c1:df:cb:e7:f7:5d:4d:6c:9d:69:d1:98:56:
                    f9:88:5f:c1:73:ae:11:f6:88:09:c1:4a:cf:97:e0:
                    2a:fa:ea:8d:34:84:82:6f:03:1b:cf:a4:9d:36:db:
                    e7:d0:d3:02:0d:f3:7a:3e:93:6f:d3:97:24:ef:6b:
                    a6:52:22:de:cc:8b:fd:5a:a5:96:e4:16:74:0c:ab:
                    1a:b6:aa:70:95:6a:06:e0:2e:8f:2a:14:85:3e:40:
                    45:64:16:e7:dc:a4:2e:59:83:e4:41:c1:b8:19:76:
                    6d:17:e5:c3:a2:0f:e9:86:7d:9e:62:37:7b:df:aa:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:76:26:E8:F4:4C:55:8F:F5:FD:56:69:92:4E:FF:57:7C:95:69:E9
            X509v3 Authority Key Identifier:
                keyid:8D:DB:FF:58:C2:53:E3:91:0A:8A:F8:D2:0D:2B:93:EF:9D:0E:75:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/8DDBFF58C253E3910A8AF8D20D2B93EF9D0E754F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:76:29:1a:7a:5f:fd:c2:e9:7a:b1:0b:55:f4:e1:31:8a:
         3d:b4:ee:f8:91:76:e2:71:2c:05:67:30:bd:26:83:eb:01:7f:
         f4:1c:55:df:c3:1b:36:e5:2b:3d:ba:b1:a0:bf:46:f2:cd:3d:
         89:0d:32:61:5f:9b:50:97:bb:56:67:4e:d0:d4:46:ee:53:71:
         69:44:ab:80:db:55:e0:05:fc:2f:16:68:c1:81:f0:38:63:c3:
         5e:aa:f9:38:54:66:94:08:ca:f0:80:57:09:2b:05:ac:d9:86:
         d4:5a:06:24:78:de:f7:1d:07:95:e1:4f:76:f8:e1:11:3a:99:
         a1:88:97:0f:3b:5a:95:cf:6f:7c:b4:8e:3b:19:d1:42:aa:c0:
         31:cb:c8:11:34:83:00:31:2f:71:c3:44:c4:6e:a8:a9:88:65:
         d8:b0:de:17:03:09:a3:1e:a0:55:f9:9d:c0:53:15:ab:04:66:
         1d:2c:9e:bd:7d:2a:39:15:5c:b4:c9:a6:c9:43:00:9a:da:8a:
         49:6a:57:1e:09:e9:52:08:17:15:4f:c8:f0:f9:8e:cf:c6:c3:
         3f:1b:b7:2d:ef:ea:02:18:e9:ec:5d:20:ce:b7:11:2b:be:78:
         f9:ef:06:00:1e:21:8c:80:61:60:d9:5c:39:14:dd:d7:99:a0:
         91:36:c5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:09 2024 by rpki-client on console-ams.rpki-client.org