Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/436016A0B214C301781FF24FB74AF911760B0926.mft
File:                     436016A0B214C301781FF24FB74AF911760B0926.mft (raw, json)
Hash identifier:          sHBNIZMpRD4fXEMvt77bCZaN9XrcOqKtxJyC6Vwlsd8=
Subject key identifier:   D8:63:FD:F5:48:CC:71:33:D9:ED:0D:B9:48:34:CD:E3:BA:D9:FB:4E
Authority key identifier: 43:60:16:A0:B2:14:C3:01:78:1F:F2:4F:B7:4A:F9:11:76:0B:09:26
Certificate issuer:       /CN=436016A0B214C301781FF24FB74AF911760B0926
Certificate serial:       1ED91AE7D21EE2C58BF91E300E4B9A11E6B0F0A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436016A0B214C301781FF24FB74AF911760B0926.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/436016A0B214C301781FF24FB74AF911760B0926.mft
Manifest number:          28
Signing time:             Thu 06 Apr 2023 09:18:42 +0000
Manifest this update:     Thu 06 Apr 2023 09:13:42 +0000
Manifest next update:     Fri 07 Apr 2023 09:47:42 +0000
Files and hashes:         1: 323830343a363534343a3a2f33322d313238203d3e20323639343739.roa (hash: rIMaet3de3B110tlYJa4A5CI41MgIUPs8JzAzwtBdOE=)
                          2: 436016A0B214C301781FF24FB74AF911760B0926.crl (hash: c9wqXR6flHdYkxLpwp8g0c7yVmk/hPwk7sNh5E76iDM=)
                          3: 34352e3138372e3133362e302f32322d3332203d3e20323639343739.roa (hash: OFX/X0+DHF3DKVzKZoxRISJoY+S5CT7PPZ8ifmR6rBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d9:1a:e7:d2:1e:e2:c5:8b:f9:1e:30:0e:4b:9a:11:e6:b0:f0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436016A0B214C301781FF24FB74AF911760B0926
        Validity
            Not Before: Apr  6 09:13:42 2023 GMT
            Not After : Apr  7 09:47:42 2023 GMT
        Subject: CN=D863FDF548CC7133D9ED0DB94834CDE3BAD9FB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:a4:27:69:94:c3:69:82:ec:f3:f4:f7:c9:
                    c4:43:4f:d1:d2:e4:b0:a7:07:05:26:dd:07:53:cd:
                    01:79:20:97:eb:08:16:a2:35:97:72:53:20:5f:66:
                    58:4e:77:52:73:3b:7b:6c:aa:88:fa:f0:ae:f5:f1:
                    51:25:63:ff:fd:b0:01:cc:fc:2a:6f:72:ba:e1:3b:
                    04:86:ab:e3:c0:8d:b5:4d:a0:89:7f:af:80:43:32:
                    c6:99:8d:a2:f9:47:b0:f2:d7:7e:82:69:cf:ca:ac:
                    a4:fd:19:d2:e0:bf:3f:97:a2:ac:96:d8:7d:1b:b2:
                    46:c6:27:51:22:db:23:68:d7:b8:0c:71:e4:54:79:
                    33:6a:5e:28:c6:a2:3c:97:94:87:9f:55:ae:8f:78:
                    3a:bb:7d:42:ab:f6:5a:68:ce:cb:6c:41:e0:a7:d3:
                    7b:d7:91:30:79:92:8b:0b:cd:66:f4:59:9e:b8:83:
                    51:31:c5:77:1d:7c:9c:e1:0f:57:43:1e:59:20:59:
                    09:2b:72:4c:41:0c:1c:f9:43:8c:51:72:e7:7a:6f:
                    68:62:29:35:ae:7f:1d:e7:5a:d3:24:2d:53:85:3d:
                    94:44:5a:03:ea:29:d4:40:94:b6:29:6f:93:75:bd:
                    02:ed:d4:48:0c:7b:42:6a:44:8a:e4:51:36:6a:e1:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:63:FD:F5:48:CC:71:33:D9:ED:0D:B9:48:34:CD:E3:BA:D9:FB:4E
            X509v3 Authority Key Identifier:
                keyid:43:60:16:A0:B2:14:C3:01:78:1F:F2:4F:B7:4A:F9:11:76:0B:09:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/436016A0B214C301781FF24FB74AF911760B0926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436016A0B214C301781FF24FB74AF911760B0926.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/436016A0B214C301781FF24FB74AF911760B0926.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:67:ab:3d:05:f5:09:ab:b0:b4:b6:12:9d:00:73:4f:a5:
         e4:77:9a:99:b5:11:95:c8:79:3e:ea:7f:d9:c3:bf:83:d6:9b:
         93:f8:b7:68:ea:d9:5e:35:d1:48:1d:86:22:1d:eb:38:ff:38:
         36:e6:c4:e3:62:33:95:4f:d8:2b:ee:9a:f9:bf:77:df:9c:8f:
         26:00:61:53:fb:ba:85:2c:b9:3b:e5:53:7b:99:33:53:e1:61:
         24:2c:8f:11:bf:1e:61:32:e9:70:d9:10:34:ae:b7:32:cd:07:
         5e:90:54:09:97:eb:44:8c:88:1d:fe:37:aa:9a:21:31:ee:3b:
         d5:c4:7b:a7:de:e2:20:88:91:b0:d3:80:ff:22:6f:d0:c3:8a:
         e8:93:b1:e3:34:a9:a8:fc:8a:d0:e9:35:b7:94:d4:73:82:da:
         44:61:c9:4b:44:72:01:05:f4:f2:9e:c5:74:0a:06:c4:97:6a:
         cc:fe:be:09:bb:42:ff:d6:64:f1:e9:50:78:c1:b6:ec:61:f1:
         b4:34:f3:b2:03:68:b0:1f:5a:f5:53:17:aa:a4:10:5c:c1:b7:
         0b:19:29:95:f4:db:e3:19:ad:26:a9:ad:33:3d:28:a0:14:16:
         2a:51:ab:e4:e4:4c:fd:04:3e:71:b2:81:95:da:a1:40:31:95:
         43:c3:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org