Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/DBD260803EE3B6111A436DB06286FF32E18A2379.mft
File:                     DBD260803EE3B6111A436DB06286FF32E18A2379.mft (raw, json)
Hash identifier:          a16IjsKaiMmyLX0jmMVeQKrp6mnCg1egrrF9qNDBEzI=
Subject key identifier:   73:3C:7C:91:18:D0:52:59:49:51:AC:0A:78:BF:89:BD:66:1F:84:F6
Authority key identifier: DB:D2:60:80:3E:E3:B6:11:1A:43:6D:B0:62:86:FF:32:E1:8A:23:79
Certificate issuer:       /CN=DBD260803EE3B6111A436DB06286FF32E18A2379
Certificate serial:       689F50FB2FAE19CF40FB9F41F69FC36662AF492B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBD260803EE3B6111A436DB06286FF32E18A2379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/DBD260803EE3B6111A436DB06286FF32E18A2379.mft
Manifest number:          0138
Signing time:             Fri 05 Jan 2024 01:45:17 +0000
Manifest this update:     Fri 05 Jan 2024 01:40:17 +0000
Manifest next update:     Sat 06 Jan 2024 04:14:17 +0000
Files and hashes:         1: 323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (hash: YrpXItsfBsuSaSYujXqhaPBnq8P4QaJkP8DiSPybNxE=)
                          2: 3137392e34382e3231362e302f32322d3234203d3e20323731313031.roa (hash: +oVdzPNjj2U6THiNPwWbjV+DyTewERkRY4rY/qIx3+Q=)
                          3: DBD260803EE3B6111A436DB06286FF32E18A2379.crl (hash: qV4TSwdqTDaTSHIsDonsi/ov57XkhMjAYasSdmq2/2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9f:50:fb:2f:ae:19:cf:40:fb:9f:41:f6:9f:c3:66:62:af:49:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBD260803EE3B6111A436DB06286FF32E18A2379
        Validity
            Not Before: Jan  5 01:40:17 2024 GMT
            Not After : Jan  6 04:14:17 2024 GMT
        Subject: CN=733C7C9118D052594951AC0A78BF89BD661F84F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:65:1a:20:91:f9:97:a6:2c:42:10:8e:9e:
                    84:60:ba:5b:3c:8f:5e:ab:ca:81:d5:90:76:a4:15:
                    c2:8e:11:de:35:1b:41:d7:49:f7:04:d5:24:50:e9:
                    71:52:1d:08:93:8c:d4:4b:ee:58:4e:a9:04:25:60:
                    69:9b:b8:fa:63:09:03:a1:dd:9d:a3:e1:6a:41:d2:
                    80:da:ae:67:f8:be:4b:ad:25:42:13:1e:35:08:69:
                    09:ab:b5:cb:7e:ef:c0:d3:45:c6:c3:46:1f:73:da:
                    f8:b0:1f:53:8a:6a:79:8a:81:75:1b:93:92:22:02:
                    00:6f:3c:0e:88:27:3b:ea:6c:8d:d2:7b:df:5c:99:
                    3d:f5:2f:ab:d3:b2:4f:af:a7:d9:1a:61:40:54:8d:
                    e6:86:46:1c:99:25:9c:e0:77:5a:63:4f:b9:af:4f:
                    cb:2b:9c:19:76:e6:56:30:9b:5b:52:b8:0a:a9:8f:
                    74:32:a4:68:ba:a7:19:1c:4c:7d:b3:12:71:3f:d3:
                    3b:a9:93:4f:e0:84:39:3c:dc:c8:dd:e1:46:47:24:
                    b7:89:ab:81:a8:10:58:83:39:46:02:bc:f9:04:33:
                    bf:d1:f4:82:48:61:7b:0f:7e:ab:da:8a:9a:eb:de:
                    83:65:16:8e:83:97:f6:54:6c:f4:f3:72:d2:3b:ae:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:7C:91:18:D0:52:59:49:51:AC:0A:78:BF:89:BD:66:1F:84:F6
            X509v3 Authority Key Identifier:
                keyid:DB:D2:60:80:3E:E3:B6:11:1A:43:6D:B0:62:86:FF:32:E1:8A:23:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/DBD260803EE3B6111A436DB06286FF32E18A2379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBD260803EE3B6111A436DB06286FF32E18A2379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/DBD260803EE3B6111A436DB06286FF32E18A2379.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0e:67:01:22:c0:a9:17:06:f6:c7:73:85:6b:93:36:2b:4e:
         5b:95:cf:67:04:5c:42:01:11:1e:f8:00:9a:db:bd:4e:61:27:
         2f:30:20:4b:75:81:cd:42:51:90:e4:ce:a9:76:f1:3f:34:c1:
         48:2b:0a:bd:5d:d2:67:9b:d3:a7:8a:78:96:c1:a7:b3:ae:93:
         26:83:9c:3e:77:23:e8:02:52:15:fd:82:f6:27:70:73:ba:4e:
         18:59:aa:07:22:b9:64:23:9f:bc:44:81:98:0f:27:ba:eb:03:
         58:fe:1b:d4:a9:c4:a3:1c:bc:88:ef:26:4a:d5:15:2f:0b:64:
         9b:22:6a:42:96:91:8d:2d:2d:9d:1d:08:1b:ba:fe:cb:6a:cb:
         32:8b:f3:f1:e2:22:11:ea:07:c9:1c:90:8e:29:ea:37:8b:20:
         f8:ed:73:98:e7:ee:ce:96:30:42:38:b3:c8:35:c8:a3:27:75:
         2a:3d:8d:83:8c:ea:02:7b:45:40:89:82:b4:47:00:c6:8f:68:
         6f:01:a8:4e:81:5b:92:a8:4c:4c:d1:b2:ba:74:42:70:b6:f7:
         29:bc:a0:f4:3c:5b:24:62:84:62:76:a0:33:7c:e7:3b:37:87:
         90:03:6c:72:f7:a7:e7:19:42:52:46:82:3b:95:ea:f6:56:c5:
         b3:ca:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org