Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.mft
File:                     76BC8672B6C71CBFC423D1106E72877D60284FD6.mft (raw, json)
Hash identifier:          1OWaTl0pf/D3sPZOGk7OsL3gidMRzta+SZSCCuBmG/U=
Subject key identifier:   38:ED:86:48:99:F3:BB:72:F2:33:85:D7:06:73:D5:81:23:53:72:8A
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       04D53865289527471B794610C3B11C9794FBD214
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.mft
Manifest number:          25
Signing time:             Sun 07 Jul 2024 10:02:36 +0000
Manifest this update:     Sun 07 Jul 2024 09:57:36 +0000
Manifest next update:     Mon 08 Jul 2024 12:02:36 +0000
Files and hashes:         1: 3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa (hash: WsTtMt0X/SJD6CTdaFGhTvY4/kj2XHQQKpNsWc7807o=)
                          2: 76BC8672B6C71CBFC423D1106E72877D60284FD6.crl (hash: 6recvMswef3JO+y5In1HcW3paotXTJDZCU0C9lEAC5s=)
                          3: 323830343a333736633a3a2f33322d3336203d3e20323636343133.roa (hash: +7l4HFk4XuOPLO2qbs6Vy2q/uZFeBKNhmY4IvR5+9fE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d5:38:65:28:95:27:47:1b:79:46:10:c3:b1:1c:97:94:fb:d2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  7 09:57:36 2024 GMT
            Not After : Jul  8 12:02:36 2024 GMT
        Subject: CN=38ED864899F3BB72F23385D70673D5812353728A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:98:3f:72:70:75:23:46:d8:9d:56:48:b9:
                    2d:0b:8f:25:3b:be:d0:b0:03:b1:b7:6c:ee:b0:a7:
                    0d:ac:5a:df:30:a6:d3:74:f3:51:4f:0c:f8:e2:c3:
                    3c:3b:70:e0:01:f6:5f:8a:17:ec:37:9d:51:da:33:
                    53:b6:67:24:d3:25:0b:0b:0a:7c:ab:30:ac:42:57:
                    a7:a2:ea:79:bb:e9:3f:c3:c1:84:a6:2f:61:12:c8:
                    96:cf:49:6e:3f:dc:56:6f:a5:eb:2d:8b:a0:6b:b7:
                    e0:40:e5:3d:f1:7c:fb:68:4c:b6:32:e1:53:0b:81:
                    29:a9:6e:8e:a4:64:28:6a:ef:cf:58:d1:d0:c4:b4:
                    ea:79:6b:c5:cb:87:e0:39:d2:40:de:5d:33:98:df:
                    64:e9:78:c7:e1:1e:0e:e5:e3:de:83:85:c2:5c:5c:
                    52:41:80:5f:e8:45:40:4f:27:0e:74:8b:dd:66:d4:
                    34:44:85:bd:87:e4:59:34:ce:ca:e5:d2:ab:24:58:
                    af:37:e4:50:46:9a:31:67:ca:94:b2:98:27:d4:1c:
                    f2:a1:a8:18:33:66:a2:98:8e:98:28:b3:c4:ab:fe:
                    6e:83:d3:f4:8a:f9:32:40:3e:b0:fd:e1:19:17:09:
                    78:d2:b0:fa:f6:52:c6:9a:42:0a:7f:46:03:e7:ea:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:ED:86:48:99:F3:BB:72:F2:33:85:D7:06:73:D5:81:23:53:72:8A
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f5:ff:8e:a8:44:28:42:ef:c0:11:1d:74:49:63:28:0e:8f:
         29:de:6d:f3:88:b9:cd:6f:7b:85:a4:55:ca:46:7e:03:e2:24:
         27:12:c2:df:39:59:57:60:e9:a4:d6:d6:8d:69:ae:bc:d1:48:
         71:2e:a2:be:8a:90:01:fe:68:5c:e1:2f:f1:fb:57:8e:58:f7:
         d1:46:dc:fd:c1:f2:51:48:e8:3e:2e:47:f7:e8:2e:33:f6:95:
         94:82:89:71:0c:a6:62:86:b7:71:fe:e5:14:3e:1e:35:9c:54:
         31:1f:f6:2e:9a:e3:32:50:dd:11:bd:6a:09:bf:60:ef:ee:1b:
         3d:29:71:ae:c4:fd:09:1c:08:c0:42:d3:45:57:12:72:68:f2:
         72:64:4c:7c:e2:a4:e2:a4:6d:c2:cc:c0:1b:f2:98:02:4c:33:
         52:29:61:1e:72:04:54:91:08:3d:be:7e:25:15:89:4f:01:44:
         33:8f:af:16:4b:0a:fb:92:28:93:94:ff:6e:49:ca:e8:5d:05:
         a2:bf:5e:b7:ca:73:04:2a:af:7c:d9:32:eb:f2:3a:7f:94:7b:
         e8:6b:b0:4a:1b:69:b5:8e:16:e1:fa:96:9d:41:8b:43:2b:54:
         68:3f:d9:9d:82:52:86:ac:34:26:71:20:36:b1:e6:2b:f9:13:
         2e:a6:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 01:37:21 2024 by rpki-client on console-fra.rpki-client.org