Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.mft
File:                     CFB94B3528DB4AA42655F32491EFCB3F404B31CD.mft (raw, json)
Hash identifier:          szwT2TLfWbqfA7E9Mhwi5MxVL1P650ZMl1c3g/TCwLE=
Subject key identifier:   E0:2C:BC:05:7E:4F:64:0E:65:E7:DA:EB:88:C4:30:DA:EA:F0:05:37
Authority key identifier: CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD
Certificate issuer:       /CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
Certificate serial:       681889D459082DC8650C40C41518134A3EB4AA65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.mft
Manifest number:          54
Signing time:             Sat 12 Aug 2023 20:42:24 +0000
Manifest this update:     Sat 12 Aug 2023 20:37:24 +0000
Manifest next update:     Mon 14 Aug 2023 00:12:24 +0000
Files and hashes:         1: 323830343a336534343a3a2f33362d3336203d3e20323636353834.roa (hash: +FiNfN4aHKR8gXrTqxt0HUxryG2h7rjmI1pSzqXRlp4=)
                          2: 34352e372e3131362e302f32342d3234203d3e20323636353834.roa (hash: 8PBgwwrv078nZk1yamgDGe02Tm90kdjGw4DvvV6NySg=)
                          3: 34352e372e3131392e302f32342d3234203d3e20323636353834.roa (hash: M/RNBgxplTz1n7gIcJi/uzP5Nmv6oR8HQadF7RfKcRc=)
                          4: CFB94B3528DB4AA42655F32491EFCB3F404B31CD.crl (hash: FjKzzW8zU/hNQy9nQD+usGNB2DI2pWu3dZIhf+5jho4=)
                          5: 323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa (hash: bbMcfqWEu9tmvoOehpbQ+OFlbPN6TqyXRrLc3IBZ5m8=)
                          6: 34352e372e3131382e302f32342d3234203d3e20323636353834.roa (hash: kEKrTkI+cEx6k4BmdwmBO4FsqKFabvy1agliKsEy/ww=)
                          7: 34352e372e3131382e302f32332d3233203d3e20323636353834.roa (hash: Lq1IdLz11cvC4dVokOI0V9IviV6R0YumPddNAkOj2OE=)
                          8: 323830343a336534343a383030303a3a2f33342d3334203d3e20323636353834.roa (hash: fhClcuJGR/5kR7AoSuFJ6qLDwBAFonCggzbPIQA14Gc=)
                          9: 323830343a336534343a3a2f33322d3332203d3e20323636353834.roa (hash: B8X61s4BCOjslBFV/mqTg/MlxokZ8CJ68SghFoRCR54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:18:89:d4:59:08:2d:c8:65:0c:40:c4:15:18:13:4a:3e:b4:aa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
        Validity
            Not Before: Aug 12 20:37:24 2023 GMT
            Not After : Aug 14 00:12:24 2023 GMT
        Subject: CN=E02CBC057E4F640E65E7DAEB88C430DAEAF00537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:c1:b6:e9:98:01:6e:d6:15:a7:25:46:a7:
                    2e:03:95:e1:52:a9:56:89:12:34:ad:60:ca:e0:d7:
                    f8:b6:81:c8:e5:24:1b:b3:22:db:9a:0e:43:bf:b5:
                    25:a1:39:ca:43:a9:e1:78:15:6d:fa:7b:48:7b:f9:
                    53:d7:79:b6:dd:9c:9c:f6:24:f9:e0:21:40:ca:55:
                    72:0c:13:32:f7:4d:77:13:d9:34:f8:e4:c3:75:e3:
                    f2:48:a0:42:85:f9:21:36:0c:2d:d0:b9:6b:f8:d3:
                    19:46:e4:a6:e4:72:08:20:b1:de:ab:72:81:09:31:
                    9f:db:b5:9a:82:98:a3:25:3f:67:5c:45:31:c7:8b:
                    1b:c8:93:c7:09:4c:c0:f5:5a:bc:f3:c7:33:b9:04:
                    bd:df:3a:14:dc:0c:14:10:98:5b:3f:53:b8:ae:1c:
                    e2:dc:c0:a4:38:5a:ca:63:20:ed:70:13:95:f9:f9:
                    68:d1:0e:c7:3c:b6:c6:50:8a:dc:c4:a7:6a:0e:ab:
                    ba:40:a1:6b:d1:8c:5a:0e:d9:6c:6a:b6:30:94:ec:
                    69:41:dc:42:93:2d:b2:71:9c:39:00:1d:4f:4e:67:
                    95:a1:cb:2d:51:cf:df:77:e4:0d:63:7d:a5:9a:e6:
                    71:f8:09:83:a9:c5:10:36:0c:22:c0:83:52:fa:5c:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:BC:05:7E:4F:64:0E:65:E7:DA:EB:88:C4:30:DA:EA:F0:05:37
            X509v3 Authority Key Identifier:
                keyid:CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:32:89:45:6d:d6:0b:1a:39:34:57:ed:f3:1c:ea:2b:fa:d2:
         93:0d:65:97:4d:fc:17:fe:07:a9:b5:ac:2a:c1:7c:99:38:28:
         98:22:8e:a1:ca:61:07:a7:6e:75:b1:2c:5d:57:41:72:bb:9a:
         be:68:fe:45:eb:14:c3:01:dc:1f:55:7a:0e:d4:74:d1:7a:79:
         f3:73:84:4f:6b:64:ca:6b:56:42:ec:25:41:07:06:e0:3d:18:
         70:59:40:b9:6f:1e:31:53:fe:f6:20:60:a7:f7:09:54:67:31:
         80:6a:4a:d8:2f:59:33:19:e5:49:5e:87:af:06:b1:4a:d4:9b:
         be:e3:9d:d5:80:52:76:6c:e8:1a:26:96:4c:a4:99:99:ed:71:
         a3:28:58:38:97:fe:a2:a5:a8:f4:af:9b:d7:a0:a2:b3:0d:32:
         a9:69:6e:43:9c:9e:ae:04:13:5f:5b:e9:33:f1:a7:f7:31:26:
         ec:4e:95:78:98:a6:96:37:31:33:92:af:4e:56:3c:b6:0a:cc:
         b2:cb:f5:17:69:04:4a:5b:8b:06:8e:a7:c4:92:b5:cc:58:51:
         57:0e:5b:14:95:0f:81:41:4b:99:b9:e2:fe:94:b9:73:6a:88:
         12:b9:02:99:4e:70:28:2f:57:f1:1d:d1:db:16:e5:0e:60:95:
         86:c3:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org