Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/60E921DA704678B7895C0AE504490F34BD5AB662.mft
File:                     60E921DA704678B7895C0AE504490F34BD5AB662.mft (raw, json)
Hash identifier:          PslLLXgvaCxYpojChhNuEg8fo6oBriJUaxqQ30dcKAA=
Subject key identifier:   3F:F0:B4:4D:93:58:09:5B:4C:56:DB:4B:FB:41:12:9E:E1:DA:CA:2D
Authority key identifier: 60:E9:21:DA:70:46:78:B7:89:5C:0A:E5:04:49:0F:34:BD:5A:B6:62
Certificate issuer:       /CN=60E921DA704678B7895C0AE504490F34BD5AB662
Certificate serial:       5BDCC726666DCDD6BAA70544A740851D10275FCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E921DA704678B7895C0AE504490F34BD5AB662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/60E921DA704678B7895C0AE504490F34BD5AB662.mft
Manifest number:          0333
Signing time:             Sun 14 Apr 2024 21:20:12 +0000
Manifest this update:     Sun 14 Apr 2024 21:15:12 +0000
Manifest next update:     Tue 16 Apr 2024 00:06:12 +0000
Files and hashes:         1: 3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa (hash: OkaCwvtci/Z5nIYfaXHzpygdbRtndxBwe2vfvgtS+2U=)
                          2: 323830343a313134383a3a2f33322d3438203d3e20323633363638.roa (hash: +U/hK4AJEeTUUc54rMOWuV0pffKoLWmhwnKhh3zRGxk=)
                          3: 3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa (hash: 9bNFA2zlOOBhbSQKs25T/gA50TbvnpC5llx85Eohtu4=)
                          4: 3134332e3133372e37362e302f32322d3234203d3e20323633363638.roa (hash: 3kI759afyhPnh77ugOZTSw1puBtp/cNfzfeIsZutMdk=)
                          5: 60E921DA704678B7895C0AE504490F34BD5AB662.crl (hash: UjWugZ7pn7zSEBx3vJmf3He6RKtW3fmnKDRlkBjK5vg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:dc:c7:26:66:6d:cd:d6:ba:a7:05:44:a7:40:85:1d:10:27:5f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E921DA704678B7895C0AE504490F34BD5AB662
        Validity
            Not Before: Apr 14 21:15:12 2024 GMT
            Not After : Apr 16 00:06:12 2024 GMT
        Subject: CN=3FF0B44D9358095B4C56DB4BFB41129EE1DACA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:12:b4:7b:d6:42:c8:ce:8e:5f:81:13:86:
                    43:82:8a:77:b5:c6:6c:eb:73:ce:0c:09:72:52:27:
                    fe:5f:19:5b:84:54:9f:80:e9:53:07:90:5f:76:c2:
                    a1:56:d8:00:68:e8:74:6d:7e:e1:3e:56:a7:e7:30:
                    98:74:2a:70:c3:29:74:d0:d9:59:dc:ed:dc:36:dd:
                    29:d5:66:28:a7:66:63:f8:aa:3c:c2:f0:68:cd:8a:
                    4b:09:e5:32:9c:60:ce:90:a0:0f:35:8f:80:31:69:
                    2f:a2:f0:f3:82:16:54:da:fc:f1:7d:e8:45:1d:42:
                    11:00:38:6b:55:ca:4d:73:3e:35:af:00:a2:ad:ba:
                    49:16:5f:48:2d:d3:3e:bb:da:67:b3:9f:4e:83:3a:
                    be:17:b6:e2:8d:fb:2d:fb:32:c5:8d:6a:11:38:3a:
                    84:80:10:e7:a7:36:c3:a9:b9:08:3d:74:c3:e8:da:
                    69:49:09:56:71:eb:31:f6:b4:3d:41:2e:8a:34:51:
                    c7:56:31:78:67:cc:07:b4:6d:1c:78:6f:b5:e9:0f:
                    20:51:70:e9:82:b1:56:be:81:97:58:4b:f7:c6:39:
                    40:3a:62:c8:a4:f9:56:0c:64:34:b9:14:21:58:ee:
                    a2:8f:cd:a2:16:f6:9d:4b:93:a5:09:51:32:40:19:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:B4:4D:93:58:09:5B:4C:56:DB:4B:FB:41:12:9E:E1:DA:CA:2D
            X509v3 Authority Key Identifier:
                keyid:60:E9:21:DA:70:46:78:B7:89:5C:0A:E5:04:49:0F:34:BD:5A:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/60E921DA704678B7895C0AE504490F34BD5AB662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E921DA704678B7895C0AE504490F34BD5AB662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/60E921DA704678B7895C0AE504490F34BD5AB662.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c3:58:92:70:02:07:47:c0:da:eb:9a:bf:73:84:94:9d:a0:
         a2:28:bd:01:c9:2d:93:fc:bb:2b:77:b4:80:8a:fb:05:21:db:
         57:33:9e:9c:7e:3c:c4:1d:32:39:ae:49:7c:33:98:99:42:61:
         c4:6b:2d:4c:48:6a:65:40:49:b6:6c:f0:87:3e:29:ce:70:4d:
         5e:71:37:bd:99:c1:ab:0c:d0:5b:71:d9:03:6b:a4:f0:8c:0b:
         b9:b1:c1:cc:d5:69:a8:3f:1e:33:cc:83:ba:46:9a:55:17:3a:
         0f:9a:30:6b:f5:b4:3a:87:e7:33:09:55:8a:01:26:80:68:81:
         d6:25:27:59:8b:9e:e5:f0:4c:af:49:0a:b5:da:38:50:00:ec:
         3d:e9:a2:ec:32:bb:0b:93:bf:d4:8f:36:96:c9:79:2b:89:8b:
         2e:42:4d:1a:23:e4:63:2f:c7:cd:18:6d:9b:49:f5:c8:37:c2:
         a1:a2:02:de:ae:d2:5b:5a:ff:d5:8c:fc:f9:b6:ab:96:50:db:
         a6:0c:24:87:69:a1:94:13:71:af:74:d3:c5:b0:7f:ac:26:b9:
         b8:0e:f1:07:58:72:df:53:90:f8:d7:42:b1:b5:73:05:3c:74:
         ef:16:e5:0b:31:02:1a:b3:68:61:d0:a0:f5:62:83:8d:f6:7c:
         a0:0a:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org