Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft
File:                     BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft (raw, json)
Hash identifier:          XJaX2isqVr2xCspeUXPkOGxj/fBTUfXhu1m2MAESveI=
Subject key identifier:   BD:89:61:A5:6F:37:8E:02:CD:D7:5C:F4:12:0A:F0:98:E5:DE:87:54
Authority key identifier: BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20
Certificate issuer:       /CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
Certificate serial:       3E0AA8790410A0E8C7B627E4D102389F7C421322
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft
Manifest number:          12
Signing time:             Wed 17 Jan 2024 02:11:13 +0000
Manifest this update:     Wed 17 Jan 2024 02:06:13 +0000
Manifest next update:     Thu 18 Jan 2024 04:28:13 +0000
Files and hashes:         1: 323830343a323164383a383030303a3a2f33332d3333203d3e20323634353737.roa (hash: G2FyoRpZzNrWxRjOjy8Nyldnhkd0a4zmqANpVK8onps=)
                          2: 3133382e33362e3131362e302f32322d3232203d3e20323634353737.roa (hash: lku70VGp2C4bAPNZQe4f338Kq9wyWDVONpgJmlKT1hA=)
                          3: BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl (hash: 0TDxyl6grSJQQD/3XsqXTZYaohFdJppN4ZRhBF7kEuc=)
                          4: 323830343a323164383a3a2f33332d3333203d3e20323634353737.roa (hash: OKAT26pje8F+WI7WQCnUdZ4udMPn7c9T3zuTrAx0K4g=)
                          5: 3133382e33362e3131362e302f32332d3233203d3e20323634353737.roa (hash: KegOYdjE4NXe94eKsC70somWXNY4x2MKtaG5UtoK4zs=)
                          6: 323830343a323164383a3a2f33322d3332203d3e20323634353737.roa (hash: Q2/ZAt4Vn1M3g1IEepJ+MwFztPZAHl3mDMuxmhZLfTg=)
                          7: 3133382e33362e3131382e302f32332d3233203d3e20323634353737.roa (hash: DDLcc1D9hgsGBG+BgaPWORp3C6r1GrUwbpxwn/Udc9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0a:a8:79:04:10:a0:e8:c7:b6:27:e4:d1:02:38:9f:7c:42:13:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
        Validity
            Not Before: Jan 17 02:06:13 2024 GMT
            Not After : Jan 18 04:28:13 2024 GMT
        Subject: CN=BD8961A56F378E02CDD75CF4120AF098E5DE8754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:99:50:36:b8:3f:5b:92:a1:70:2f:b0:29:58:
                    69:3d:54:12:8f:af:3f:ee:cb:5e:aa:00:68:c0:cf:
                    ae:a5:9c:dd:4f:3a:eb:bb:ac:3b:e5:79:fc:7f:0d:
                    a3:3e:fd:3b:59:fe:b7:0d:c7:d6:52:67:30:cc:82:
                    91:80:5f:86:ce:9b:c2:18:dc:f9:a1:53:0b:05:6b:
                    06:64:4a:59:9b:c3:bb:d1:06:57:69:07:ea:d1:a2:
                    83:7c:8b:96:85:06:75:44:7d:d2:89:9e:7e:de:5c:
                    07:59:12:63:bc:0a:51:ab:b5:1a:ce:5d:a8:cd:d6:
                    62:c2:6a:8d:fb:c8:3d:1c:ab:e9:0f:cd:4e:2c:20:
                    b9:13:2b:91:cd:dd:43:a8:95:51:f5:de:8c:1b:3e:
                    d7:49:e8:bd:a2:0f:89:2a:0c:b2:db:5c:74:00:be:
                    fc:1a:02:8a:5b:77:ff:d2:22:58:bc:5a:59:1d:b5:
                    30:69:22:b9:2a:0d:14:c0:ac:51:cb:37:b0:be:7b:
                    c9:1a:65:26:e5:85:af:8c:3f:d7:cb:c2:7f:29:95:
                    5b:d9:84:95:29:40:50:a1:56:33:db:81:1f:40:09:
                    c8:a0:c2:5b:a5:f0:b2:7b:01:dc:d4:64:c2:a9:be:
                    27:4c:cb:12:7a:f8:51:d3:67:bd:f5:e2:fa:f1:55:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:89:61:A5:6F:37:8E:02:CD:D7:5C:F4:12:0A:F0:98:E5:DE:87:54
            X509v3 Authority Key Identifier:
                keyid:BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:14:db:dc:77:4a:85:05:3f:b8:13:a7:5a:af:c3:63:cf:a6:
         22:6a:9d:7e:48:a8:9b:c8:76:91:ee:27:2c:d1:b4:b9:55:91:
         47:01:b6:bf:f2:ef:88:50:27:45:54:e6:0c:12:8c:43:8a:e3:
         0f:d3:76:2b:2b:20:ef:68:5f:78:4a:1b:fa:82:5e:3c:27:83:
         5c:41:6e:06:47:2e:bf:fc:df:8c:5b:c8:db:96:06:b0:b5:2a:
         bc:07:06:3d:41:7c:c7:3b:9b:77:b9:18:5d:8e:f0:75:b5:05:
         82:4b:03:1c:64:31:5b:ef:73:81:b8:bf:eb:47:08:08:08:e7:
         d5:98:0e:4b:82:57:f6:e7:26:35:68:c4:d3:02:df:09:d6:17:
         a0:34:1e:7e:11:ff:fa:e9:d8:65:1d:15:fa:80:e5:04:1c:1e:
         49:25:42:67:86:05:dd:34:f0:ff:05:2a:ef:09:b8:74:01:fc:
         81:d6:97:35:44:79:6a:8f:c0:79:bb:ba:b6:7f:3a:0c:4c:5b:
         37:7a:56:e4:8f:31:4b:86:10:cb:56:4f:16:9f:7a:25:a4:85:
         95:73:d5:a7:99:50:18:3a:23:b8:ad:cd:fa:da:ba:d1:b3:b7:
         7c:0d:05:be:4b:b9:04:8c:07:59:eb:16:09:19:b0:a1:c7:6e:
         ba:75:a5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org