Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.mft
File:                     00DB56825404ABC47D0B868AF4C0C886C672ADE9.mft (raw, json)
Hash identifier:          17z0SIm5zy2T+jsYnrrw5+ixndm4QjTwNeO13DtR3Ug=
Subject key identifier:   7F:7F:59:74:FB:B1:0A:3B:21:B4:5D:D4:0D:84:FC:44:93:C9:9A:90
Authority key identifier: 00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9
Certificate issuer:       /CN=00DB56825404ABC47D0B868AF4C0C886C672ADE9
Certificate serial:       164BFDE3E335B9FC8DCFFDC4307A7B9312A544B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.mft
Manifest number:          0173
Signing time:             Sun 14 Apr 2024 22:14:24 +0000
Manifest this update:     Sun 14 Apr 2024 22:09:24 +0000
Manifest next update:     Tue 16 Apr 2024 01:34:24 +0000
Files and hashes:         1: 00DB56825404ABC47D0B868AF4C0C886C672ADE9.crl (hash: xIk8bMjyVDGUqEhwyjbL4UB3z2rdAmYoQ90FJUYKG+Q=)
                          2: 3133312e37322e33392e302f32342d3234203d3e203631373232.roa (hash: EgWaEsm0uVNB5GmC3KbxJd6Z8fy8jNIVEfSAMcZjOGc=)
                          3: 323830343a316235343a343030303a3a2f33342d3334203d3e203631373232.roa (hash: 8oMhxj4qsQyWkoyskY8q+ax9qAjatSR7UPeVtw47XG0=)
                          4: 3133312e37322e33382e302f32342d3234203d3e203631373232.roa (hash: L99MJi+HUBelT8Jxo5rRNW1KNU+5ARQ0YIOIMnvha+0=)
                          5: 3133312e37322e33362e302f32342d3234203d3e203631373232.roa (hash: LijbC4KPMBsYbT07/gUyeTt3elllf6/cqNVsV0rRrPU=)
                          6: 3133312e37322e33372e302f32342d3234203d3e203631373232.roa (hash: yhLHa6FRIq1KW73VrdZXVlmtMtVliKQ/Hnu6W8CNHZA=)
                          7: 323830343a316235343a3a2f33342d3334203d3e203631373232.roa (hash: /zu8khzjrQ1f8LHqy+03P4I1DYPzOlIKSnzCf1Pf888=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4b:fd:e3:e3:35:b9:fc:8d:cf:fd:c4:30:7a:7b:93:12:a5:44:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DB56825404ABC47D0B868AF4C0C886C672ADE9
        Validity
            Not Before: Apr 14 22:09:24 2024 GMT
            Not After : Apr 16 01:34:24 2024 GMT
        Subject: CN=7F7F5974FBB10A3B21B45DD40D84FC4493C99A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:8f:7b:0f:0a:03:14:81:9a:1d:5f:c6:da:
                    6f:d5:1e:5a:a5:08:c8:5a:d2:03:66:0a:49:13:6e:
                    11:ea:d1:0b:92:bb:6b:ed:b1:24:67:dc:2c:3f:a8:
                    dc:ce:05:73:72:e2:db:3a:c6:ee:c4:f0:99:23:b5:
                    82:86:46:f6:19:e6:b7:a1:68:b0:25:52:ef:6f:a7:
                    76:50:61:e5:da:06:d1:8e:1c:6a:48:d9:67:3c:53:
                    8f:14:a6:08:c0:5b:2e:4a:c4:77:3d:36:4f:ae:73:
                    c8:e6:73:40:8b:b0:74:c0:0c:af:d1:c1:e7:1e:fc:
                    09:e3:26:f7:b4:d8:ea:d8:6c:fe:5d:dc:c8:8b:9b:
                    95:5a:b8:52:05:e4:f7:46:9f:4d:24:b5:72:0b:5e:
                    31:a6:2b:02:9d:53:47:19:ae:06:ec:36:bb:6f:e7:
                    20:e4:57:44:b3:43:ae:0d:9a:b5:94:9e:55:7d:a4:
                    0b:d1:71:5b:51:63:e2:29:cd:09:96:3e:bb:0d:fd:
                    a9:69:4c:ff:b4:1c:1c:79:74:c7:04:5c:a7:f6:a9:
                    e2:24:1a:46:29:6e:82:4b:ef:69:c9:4e:db:ba:99:
                    d6:e4:8d:55:86:db:f8:26:2f:48:30:fa:af:b7:21:
                    f3:dd:4f:85:18:ce:71:61:7e:42:8c:da:83:f4:46:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7F:59:74:FB:B1:0A:3B:21:B4:5D:D4:0D:84:FC:44:93:C9:9A:90
            X509v3 Authority Key Identifier:
                keyid:00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:d6:d1:68:51:cb:42:3f:05:f8:07:91:15:ce:37:3c:ca:
         c6:cd:99:98:a0:29:28:25:54:35:51:b4:13:4a:ea:25:e0:29:
         b3:90:be:22:6e:5c:9d:97:96:70:f7:5a:82:c8:f0:61:8d:9f:
         6b:9c:8b:da:a6:0d:98:4e:90:42:89:f0:ba:10:22:63:88:8d:
         79:24:fa:fd:91:9a:e0:7b:b8:26:18:2b:d5:4f:64:f3:5a:c5:
         83:84:91:ff:c0:1f:0f:f7:9a:dd:25:61:d3:7a:6d:25:fa:57:
         20:7e:00:7c:c8:30:64:1e:0c:8c:f5:47:07:0f:bd:b5:50:47:
         03:48:8e:62:45:9e:1e:a8:b5:f4:bb:a2:94:1a:bf:54:9d:e4:
         a1:00:3f:24:45:3a:ea:34:7f:25:7f:da:6f:d2:c7:76:97:0b:
         d5:3e:58:3f:65:fe:39:a1:ed:50:d9:80:cb:78:b2:82:d2:3a:
         fd:fc:48:7b:f9:bf:7d:91:06:42:8b:9a:37:9a:55:fe:79:a4:
         f9:53:0a:ca:e6:58:bc:16:94:85:6e:52:34:61:35:0c:46:7f:
         07:a2:b3:9a:ce:ed:fc:ea:14:2a:b1:e9:ac:49:b0:59:1a:42:
         1f:ef:14:5c:08:86:95:a6:82:e6:0d:16:01:86:6a:a1:e9:43:
         e0:c6:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org