Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.mft
File:                     0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.mft (raw, json)
Hash identifier:          cb7SCtkcoL9m1q8bBEVMvgZ3p6d/6xUjLmQ+AQ6LJ7Q=
Subject key identifier:   F7:CB:4E:DD:A6:19:89:F2:D3:62:0E:66:9A:4F:CA:D3:AC:5B:F3:86
Authority key identifier: 0B:AC:CC:82:5F:DD:05:ED:BA:63:39:74:4B:99:BF:3D:A9:3B:E7:B2
Certificate issuer:       /CN=0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2
Certificate serial:       7CC6265364B499A9E3302B9B821F648BD47E4360
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.mft
Manifest number:          3F
Signing time:             Sat 02 Dec 2023 09:52:10 +0000
Manifest this update:     Sat 02 Dec 2023 09:47:10 +0000
Manifest next update:     Sun 03 Dec 2023 12:49:10 +0000
Files and hashes:         1: 34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa (hash: 3c9+g9/BkTYfZvdqvY06xSeikbFDenfbR3l87wEGdac=)
                          2: 323830343a356635343a3a2f33322d3634203d3e20323639303932.roa (hash: iwQL1wWYc0593M7JRZ8C2DNwa6sLV18bw1XZ7nvbDeY=)
                          3: 0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.crl (hash: +0sUmZ4XSG8Hqjs9obfk+TMWJofaGXd4R0doYQ4PvgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c6:26:53:64:b4:99:a9:e3:30:2b:9b:82:1f:64:8b:d4:7e:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2
        Validity
            Not Before: Dec  2 09:47:10 2023 GMT
            Not After : Dec  3 12:49:10 2023 GMT
        Subject: CN=F7CB4EDDA61989F2D3620E669A4FCAD3AC5BF386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:2c:df:3c:4f:25:c8:b8:57:b0:e6:0e:cd:
                    42:ea:ce:a1:65:bc:0f:fe:79:86:4d:78:21:2e:63:
                    45:a7:05:86:db:0c:34:ae:68:95:8d:aa:96:fc:38:
                    8c:50:d9:c6:fa:57:53:e2:7f:84:c8:1d:fc:87:e1:
                    73:38:e1:97:32:3c:d6:ac:bb:78:ef:4f:a2:42:00:
                    15:d0:2f:3d:df:0c:22:8b:43:c5:93:a0:a8:76:0d:
                    1b:71:23:e4:44:c8:56:4d:6a:41:85:7f:fb:01:f7:
                    cb:d9:fe:a3:63:58:8d:b4:1d:1f:bb:47:e0:80:44:
                    5b:5c:16:96:97:a9:70:ea:a2:3f:fb:af:b7:3e:90:
                    af:00:2f:1e:d3:62:35:98:a0:1b:1a:1a:cd:27:8e:
                    38:20:5a:e0:04:f5:40:f3:b5:34:cd:29:a7:ec:0c:
                    5d:0f:8a:13:75:88:53:04:30:7a:34:b9:34:57:8c:
                    76:75:29:d5:b5:27:4f:07:51:5f:30:ac:73:6b:a9:
                    c6:71:43:97:90:a6:d8:24:de:df:fe:b1:a2:ab:0d:
                    7c:33:b5:66:d7:2c:79:a0:36:4f:97:77:a7:9c:81:
                    ce:d1:a2:f4:91:b8:5f:ad:d1:ea:ea:3d:d3:18:ee:
                    0d:4a:20:56:66:22:76:68:ae:ca:51:0c:6c:fe:16:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CB:4E:DD:A6:19:89:F2:D3:62:0E:66:9A:4F:CA:D3:AC:5B:F3:86
            X509v3 Authority Key Identifier:
                keyid:0B:AC:CC:82:5F:DD:05:ED:BA:63:39:74:4B:99:BF:3D:A9:3B:E7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/0BACCC825FDD05EDBA6339744B99BF3DA93BE7B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:c9:58:c6:f6:de:1e:bf:e2:ee:7a:7b:b6:85:ba:14:5f:
         0d:50:a9:c6:54:e7:2b:bb:82:e3:e7:c3:cd:a0:ce:93:04:46:
         19:ab:33:9e:ea:18:6e:1f:3a:8b:55:72:79:1f:56:ca:0e:76:
         a0:ac:ca:f2:07:cc:11:e4:39:13:1c:24:d5:24:5f:d2:8b:db:
         64:92:9c:54:67:27:58:e6:ad:8b:00:2e:9b:eb:d2:f0:d4:25:
         97:d5:ae:e6:8d:5f:47:bf:80:a5:f0:54:3d:7a:9a:2d:50:6c:
         4b:4f:27:1f:e5:0c:ce:fc:59:41:61:3a:c7:87:ff:f0:2c:18:
         9b:5d:cc:de:53:ee:d8:7f:cd:f5:07:d9:66:de:3e:d4:a5:2d:
         09:65:df:81:03:85:5b:19:f0:56:d3:84:c8:1a:ea:e4:16:d2:
         89:be:12:55:65:d3:c4:97:b1:0f:92:9a:d9:96:c2:ed:a5:51:
         8a:14:09:7f:40:e5:a5:14:56:d8:97:1d:30:65:f5:6a:13:87:
         f5:94:6f:83:65:fe:98:c9:97:36:49:a6:26:0c:73:44:df:3e:
         df:4e:82:6b:c4:f4:5d:f0:c8:7d:f7:69:8d:04:24:51:fa:24:
         1f:31:6b:d2:24:ad:03:4d:d5:b8:70:52:14:5a:4f:28:27:a1:
         ab:27:e4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org