Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.mft
File:                     2ED4A75C3B268064A6DAF31B405A577C5C320F23.mft (raw, json)
Hash identifier:          Q//1QbrxkyD14QnWqzQcTmEF8iz38XRzzLkAp7ImIaY=
Subject key identifier:   F0:D9:BA:26:E9:0F:88:A3:17:1C:D4:73:0C:FA:19:5E:FC:12:9D:93
Authority key identifier: 2E:D4:A7:5C:3B:26:80:64:A6:DA:F3:1B:40:5A:57:7C:5C:32:0F:23
Certificate issuer:       /CN=2ED4A75C3B268064A6DAF31B405A577C5C320F23
Certificate serial:       11C682C03EC2090167B4014B63734697EAA3FC4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.mft
Manifest number:          4C
Signing time:             Mon 15 Apr 2024 03:25:12 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:12 +0000
Manifest next update:     Tue 16 Apr 2024 06:52:12 +0000
Files and hashes:         1: 3138312e3139312e3138332e302f32342d3234203d3e20323637343334.roa (hash: oGLI3TwdF1omfzyDuB5iQEvOnP0re9ey+UdqBZ/OkO0=)
                          2: 3138312e3139312e3138312e302f32342d3234203d3e20323637343334.roa (hash: k0lH0GKNcCd6qSjeLGakTagMJ3nLCIqfntnDh0LHeZA=)
                          3: 3138312e3139312e3138302e302f32322d3232203d3e20323637343334.roa (hash: wMJwTNvpqlOed8ClhMsU60eI5Gn4RPmxhINqCLd06wI=)
                          4: 323830343a343137343a3a2f33322d3332203d3e20323637343334.roa (hash: 4Hz5nMMKmwwzPElqz/7BR6P2CXtQVcEU+i/hxu2RhMQ=)
                          5: 2ED4A75C3B268064A6DAF31B405A577C5C320F23.crl (hash: PQQa3vj3wYwjajxH6+T1oCbf1Sie+iameB3vAaCU7Rc=)
                          6: 3138312e3139312e3138322e302f32342d3234203d3e20323637343334.roa (hash: P1HVMRbGDyDUu+pxtFIoswh8jKm4cly+m2C3szDUFnQ=)
                          7: 3138312e3139312e3138302e302f32342d3234203d3e20323637343334.roa (hash: 4z7RisGNDrqxd6Dc7CmOnYt/4+gwFnYFUf+ArSDAWDU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c6:82:c0:3e:c2:09:01:67:b4:01:4b:63:73:46:97:ea:a3:fc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED4A75C3B268064A6DAF31B405A577C5C320F23
        Validity
            Not Before: Apr 15 03:20:12 2024 GMT
            Not After : Apr 16 06:52:12 2024 GMT
        Subject: CN=F0D9BA26E90F88A3171CD4730CFA195EFC129D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:1e:bb:8b:c5:58:26:93:2f:c4:90:e6:0d:
                    76:b9:09:f1:97:c1:d4:0d:b0:47:05:03:58:ab:72:
                    41:5f:c8:e7:43:c2:d7:25:d3:ba:09:8f:37:66:17:
                    57:87:13:1d:2e:35:57:b4:af:f4:a8:ec:dd:e4:43:
                    9a:7d:c5:15:dd:17:0b:5b:82:45:af:93:67:9d:c9:
                    75:b9:67:87:2d:3d:11:ec:3d:fc:72:9b:3c:dc:be:
                    fc:b0:8f:5c:95:fe:8e:15:11:9f:82:0f:ce:40:d2:
                    2a:45:69:bd:a3:8e:e1:87:7c:67:d0:57:fd:7f:8a:
                    4f:cc:6c:35:c2:6f:7b:15:a2:64:90:73:da:f0:74:
                    74:b0:4c:da:14:e8:b8:b0:c6:b6:3e:91:ef:76:58:
                    4c:50:90:de:d2:79:e3:18:4a:a4:c1:86:63:3d:ac:
                    67:61:5b:5b:88:e3:a2:da:d2:05:5a:53:b4:49:d9:
                    4d:ad:ba:79:b9:30:c3:8d:7b:8e:5b:f0:fa:61:3d:
                    a7:dc:9a:13:59:db:f8:56:c5:1b:0e:a6:39:1e:aa:
                    b8:b8:13:37:65:18:f8:39:30:ad:d6:1b:c3:65:71:
                    0c:55:a9:41:f4:1e:74:da:a6:f5:a4:ac:8e:1a:d7:
                    99:5d:0d:bc:7a:08:eb:f6:15:2e:47:f4:03:19:a8:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D9:BA:26:E9:0F:88:A3:17:1C:D4:73:0C:FA:19:5E:FC:12:9D:93
            X509v3 Authority Key Identifier:
                keyid:2E:D4:A7:5C:3B:26:80:64:A6:DA:F3:1B:40:5A:57:7C:5C:32:0F:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:e0:7a:0d:c9:48:0b:b8:58:f0:ff:9d:8f:3c:0d:57:3b:
         8a:5c:d7:bf:60:bd:49:e7:92:f5:2a:d3:6e:fa:d4:91:43:06:
         12:fe:24:3c:0a:d7:36:8a:9f:ad:69:ac:0d:9d:85:20:2a:84:
         09:a3:19:17:ce:f8:27:64:f9:cd:e9:46:d0:5f:e5:4f:7e:2c:
         6d:91:33:f6:e6:dd:c5:37:98:f6:f3:68:e0:4c:bb:12:fe:a5:
         fa:ea:21:95:ae:0f:80:d9:e0:38:78:0e:f3:94:a2:a5:78:a5:
         6b:d2:a0:be:0c:c3:7e:00:d4:b4:e5:32:7f:e8:5f:8e:43:d0:
         94:31:0d:bf:93:5c:a1:d3:f3:06:ae:c6:fc:54:c4:ef:ac:dc:
         5c:fa:3f:60:fe:b2:1a:0e:4f:8c:dd:23:90:a2:56:13:a9:d0:
         74:4a:b6:01:96:1b:44:15:a3:87:17:01:a0:e0:e0:8f:c6:4e:
         8d:dc:f0:40:0b:ca:eb:e6:bb:d2:a1:ca:cc:9d:20:21:06:d3:
         f5:28:72:dd:fd:31:92:a7:e7:7f:b0:df:34:a7:c9:f3:21:6d:
         90:e1:56:06:cc:fb:73:da:fb:58:67:53:5c:7d:d4:83:61:4c:
         cc:07:a1:63:e2:32:9c:4f:20:50:32:9e:00:64:01:78:ec:14:
         42:94:1c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org