Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/8AC5C649D01398B5479311750B9D73E55000F0CA.mft
File:                     8AC5C649D01398B5479311750B9D73E55000F0CA.mft (raw, json)
Hash identifier:          D9Kh2ZUyBjb5TS73+oiXP8P3Bvn3mnreH1q2WrYRfNU=
Subject key identifier:   BD:BC:47:04:E0:28:36:22:3F:D6:C2:99:D9:D5:67:CB:A9:C8:50:07
Authority key identifier: 8A:C5:C6:49:D0:13:98:B5:47:93:11:75:0B:9D:73:E5:50:00:F0:CA
Certificate issuer:       /CN=8AC5C649D01398B5479311750B9D73E55000F0CA
Certificate serial:       789E0FE51A6A05EBBA79A6E015E03AD3D7AECB27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC5C649D01398B5479311750B9D73E55000F0CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/8AC5C649D01398B5479311750B9D73E55000F0CA.mft
Manifest number:          3E
Signing time:             Mon 15 Apr 2024 07:08:30 +0000
Manifest this update:     Mon 15 Apr 2024 07:03:30 +0000
Manifest next update:     Tue 16 Apr 2024 10:25:30 +0000
Files and hashes:         1: 3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa (hash: hsQFu85HTD/rDMbFLlzNCruZAxE5p1BtzAcqPgLDSiE=)
                          2: 3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa (hash: 8B3qhfZrw3jhVPHgpWjZMWxyUE7XQZFtIxPkqcGnf7Y=)
                          3: 8AC5C649D01398B5479311750B9D73E55000F0CA.crl (hash: IyBhgxlhJWQa0cdD6jJS16y8XJUVg0zacp6deKIP/XI=)
                          4: 3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa (hash: JlKeLKRgQt1yhQKaHLnKMPwb1cKydNbvRrS8ijtlpTc=)
                          5: 3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa (hash: P/LATsNdGv7PDkqACJEJZSJl0ACiDTAf1NK+smYwJG4=)
                          6: 3137302e3234342e31342e302f32332d3332203d3e20323634323831.roa (hash: 6bq90Hvb18wpixCiYFXcyWO+AUc+3eOA5PflaD1wCmg=)
                          7: 323830343a323537303a3a2f33322d313238203d3e20323634323831.roa (hash: pGiKJG2hiRERtrcoRaH8xei2RBXJ3pDlkLDCj8bcW60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9e:0f:e5:1a:6a:05:eb:ba:79:a6:e0:15:e0:3a:d3:d7:ae:cb:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC5C649D01398B5479311750B9D73E55000F0CA
        Validity
            Not Before: Apr 15 07:03:30 2024 GMT
            Not After : Apr 16 10:25:30 2024 GMT
        Subject: CN=BDBC4704E02836223FD6C299D9D567CBA9C85007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:6d:7f:91:26:85:47:35:a3:03:09:7d:4e:
                    40:2c:0a:76:d5:85:79:1f:79:7a:49:83:c1:2e:4a:
                    28:54:46:3d:d3:df:f6:c0:05:8c:08:fc:bf:9d:94:
                    de:bf:de:e3:1d:8b:27:43:b1:22:7a:28:ca:5b:31:
                    8b:c7:9d:d5:b1:f2:e2:7d:43:3f:6f:a1:ef:c9:30:
                    ab:24:d0:89:96:87:84:01:b7:e6:4e:f6:0f:4c:29:
                    f0:a5:1c:14:1d:d4:ca:9d:3a:33:22:40:eb:42:09:
                    89:ae:7a:3d:5a:5b:ab:00:3d:42:52:17:54:e3:12:
                    d2:2b:e0:e9:8b:5b:77:e4:e2:cd:3c:cd:8d:85:25:
                    9d:37:fb:6a:46:b7:13:0b:db:64:62:49:50:f2:25:
                    d8:b1:f2:96:a8:4d:8d:2a:8d:f4:f9:d5:68:cc:d9:
                    7b:71:a7:7c:3f:3d:9f:14:1f:16:6b:98:fd:83:98:
                    86:ee:5b:c4:c8:d5:17:a6:37:ef:1f:7e:64:78:a2:
                    31:84:80:86:9d:3d:09:e2:16:0c:97:a1:89:6d:d9:
                    9e:8a:63:70:f7:14:0a:99:1a:f2:e7:36:44:cc:eb:
                    7d:5c:ff:29:07:90:d1:83:89:db:58:a9:69:a8:10:
                    72:8f:a1:04:15:19:73:b1:82:fd:a9:23:2f:e0:3d:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BC:47:04:E0:28:36:22:3F:D6:C2:99:D9:D5:67:CB:A9:C8:50:07
            X509v3 Authority Key Identifier:
                keyid:8A:C5:C6:49:D0:13:98:B5:47:93:11:75:0B:9D:73:E5:50:00:F0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/8AC5C649D01398B5479311750B9D73E55000F0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC5C649D01398B5479311750B9D73E55000F0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/8AC5C649D01398B5479311750B9D73E55000F0CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0a:6d:2d:6a:45:4d:c9:79:0a:cb:8f:8e:59:11:b1:c0:a9:
         89:79:bd:4c:8c:c9:f8:e9:fb:8d:48:7b:b1:ce:13:63:e8:cd:
         df:47:d7:8e:41:81:33:19:36:63:a5:88:5f:af:28:ee:76:a1:
         d0:10:6e:78:e1:c1:45:74:95:24:cb:20:4c:b5:c6:86:f7:a1:
         21:f9:d4:b6:9a:3f:0c:cd:60:78:b1:c5:de:16:d4:b0:8e:0d:
         69:cc:8f:0e:42:2b:74:d4:d9:4d:71:60:72:3a:3f:d9:e5:a1:
         fc:38:13:04:bb:d8:36:24:15:0f:da:41:5e:8b:da:49:61:31:
         af:09:8c:2e:8c:61:e5:dd:72:7f:c3:2d:60:ca:a6:6b:61:ff:
         dd:2b:7c:bc:17:e3:67:f0:46:f2:33:f4:c2:f7:b7:5d:5a:b8:
         5c:49:91:fb:ed:e4:02:24:08:58:d6:51:60:7b:80:92:4f:38:
         8e:a0:04:9c:15:06:a1:9a:4d:0e:d0:de:54:38:31:cd:70:b2:
         ef:1b:60:6a:a9:d9:2c:ab:f9:4c:ef:ac:f3:de:5b:75:fa:fc:
         67:5c:fb:98:92:4c:4f:d0:ec:e5:6f:c4:d0:07:23:95:67:da:
         db:c1:47:bf:1a:32:27:44:37:3d:d0:79:32:2d:8e:71:99:ae:
         25:b4:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org