Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.mft
File:                     70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.mft (raw, json)
Hash identifier:          Bo85lcuqAuex39MQiEat5VRCxf6dAhUlyccdSWGoAgk=
Subject key identifier:   78:0E:AC:9F:6B:B7:2F:F3:7F:C8:AC:FC:F3:EF:1E:C4:69:BC:73:D5
Authority key identifier: 70:BA:E0:2C:A9:CA:43:A4:2E:B5:00:4D:76:20:B0:E4:D0:1E:21:47
Certificate issuer:       /CN=70BAE02CA9CA43A42EB5004D7620B0E4D01E2147
Certificate serial:       0E6CAEEFD8AACAE5073E96D87AF3308BFFE5E0E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.mft
Manifest number:          011A
Signing time:             Fri 01 Nov 2024 05:26:39 +0000
Manifest this update:     Fri 01 Nov 2024 05:21:39 +0000
Manifest next update:     Sat 02 Nov 2024 08:05:39 +0000
Files and hashes:         1: 3137372e3135352e38302e302f32322d3234203d3e20323633353833.roa (hash: 6LvBDOmRvbcdJ5OzuVaBHUl2wo43Pw0tEqp4IEyYnYA=)
                          2: 323830343a6636343a3a2f33322d3438203d3e20323633353833.roa (hash: 0WsAWxECdMbW0PnpAfTQo4UC+cJ9BXRoT6jDY+o066E=)
                          3: 70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.crl (hash: 4tAX1Fi4Q2GZcEahdsfTgr1kiddAnZsrfqi2vQ5eJCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6c:ae:ef:d8:aa:ca:e5:07:3e:96:d8:7a:f3:30:8b:ff:e5:e0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BAE02CA9CA43A42EB5004D7620B0E4D01E2147
        Validity
            Not Before: Nov  1 05:21:39 2024 GMT
            Not After : Nov  2 08:05:39 2024 GMT
        Subject: CN=780EAC9F6BB72FF37FC8ACFCF3EF1EC469BC73D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:29:98:6a:55:41:a4:71:98:6a:b3:c4:62:
                    47:81:f7:ac:bc:92:6d:60:8c:ee:74:3c:34:a4:62:
                    20:46:b3:a4:3d:95:ad:cf:c5:77:9c:16:ef:2c:15:
                    4a:db:33:51:cb:53:96:41:3c:b5:85:a5:c4:47:6e:
                    af:50:ea:3a:96:83:43:32:bb:47:d6:7a:58:24:ec:
                    36:26:85:1c:be:71:9e:86:70:4f:e3:24:e9:39:10:
                    0e:21:a7:3f:4d:6c:72:87:38:a2:2f:b6:49:f0:74:
                    c8:f9:44:2f:bf:52:d3:7d:9a:04:79:de:38:17:f8:
                    df:73:97:15:f5:26:7e:d1:f1:ac:73:4c:4b:c3:fe:
                    e2:e5:10:18:3a:ee:d8:22:5e:54:5d:91:2f:d5:6a:
                    29:81:ba:61:c5:a7:bf:5b:d3:ee:62:a6:50:8e:d4:
                    0f:fa:97:05:2c:3f:b9:ce:f9:2b:7e:90:23:82:06:
                    a0:6e:ce:68:26:13:41:67:40:72:d4:f1:24:ff:ec:
                    6c:48:84:aa:27:47:0b:bf:bf:c3:5e:e6:7c:56:ec:
                    bf:ca:f2:a4:21:08:86:c3:0b:6e:cf:06:c9:c8:91:
                    37:dd:5a:a4:62:1c:f1:79:eb:9e:26:70:0b:61:8f:
                    3c:89:82:bc:1d:1c:32:e6:d9:11:d5:44:00:96:56:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0E:AC:9F:6B:B7:2F:F3:7F:C8:AC:FC:F3:EF:1E:C4:69:BC:73:D5
            X509v3 Authority Key Identifier:
                keyid:70:BA:E0:2C:A9:CA:43:A4:2E:B5:00:4D:76:20:B0:E4:D0:1E:21:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/1/70BAE02CA9CA43A42EB5004D7620B0E4D01E2147.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:52:7e:12:d0:2a:1f:fc:ae:c3:7e:2f:a8:fd:9e:60:fc:
         b6:f7:f7:eb:ac:00:54:b8:87:f8:b7:48:07:2a:6e:e4:6b:55:
         9b:27:8d:1b:e4:c4:4c:df:2b:99:ac:6c:39:6e:27:86:c7:13:
         34:4c:49:81:0e:ea:a5:ed:b9:c1:1c:16:55:12:0c:6d:5b:cf:
         d3:23:80:02:07:7f:17:b9:33:71:98:9f:e0:e7:d6:40:73:49:
         f9:a7:df:bd:4b:8b:9f:a5:70:0f:bb:d4:dc:0e:e6:fa:63:75:
         cc:c2:26:76:b4:15:e8:27:76:50:5c:d3:67:12:5a:71:47:43:
         63:80:ae:d0:fb:48:aa:57:f9:dc:36:e6:59:40:dd:ee:38:fa:
         fa:a4:12:19:c5:e6:5e:94:59:7a:30:a3:f3:6e:d5:75:7d:8a:
         94:32:04:c4:9f:25:d5:83:10:57:c6:0e:f1:12:f8:be:f6:93:
         ec:d6:a1:3a:02:72:38:7c:fc:17:6f:4d:9d:cc:24:f0:2c:ba:
         d3:d6:af:5e:21:cc:b4:c8:4b:04:4e:cb:94:f0:06:96:25:2e:
         13:bd:7a:48:7a:c2:3d:da:e7:21:37:fe:58:98:d3:e2:8a:96:
         90:9f:68:1d:30:c1:91:7c:6f:2d:ff:9e:6e:1a:29:d7:33:df:
         00:a2:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 22:33:00 2024 by rpki-client on console-ams.rpki-client.org