Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.mft
File:                     157D2CD3D2F5A4D86D84698569F7F82D093EDE54.mft (raw, json)
Hash identifier:          EFXmy8LQeGaCkCsA+yc43FyxXof5XQuLhDDU975b4Uo=
Subject key identifier:   82:0C:E5:09:B1:8E:D4:DA:F5:0E:72:D3:47:5F:30:8A:9D:9A:EB:DB
Authority key identifier: 15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54
Certificate issuer:       /CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
Certificate serial:       03765F9C612133D46291A2F7A5AD3386BF7EA52F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.mft
Manifest number:          1A
Signing time:             Wed 17 Apr 2024 12:26:19 +0000
Manifest this update:     Wed 17 Apr 2024 12:21:19 +0000
Manifest next update:     Thu 18 Apr 2024 14:12:19 +0000
Files and hashes:         1: 3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa (hash: i4mzYoDWhuO8Y0tmjU+ADD2WU20pqfXjVMdgMxSefSQ=)
                          2: 3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa (hash: QpimOc9Ur+3am8NzmUbbKUw6wwnaFzFeTc0XHNLRko4=)
                          3: 3137302e3234342e31342e302f32332d3332203d3e20323634323831.roa (hash: lxDlmlGPJPmJmKaKV94YD3b2zS4kZ8HIaQDh6zz0xNE=)
                          4: 3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa (hash: NEocU/pb+1Mh0Cp6rwe5Oj2Angka20vWbq3ht7Ppab8=)
                          5: 323830343a323537303a3a2f33322d313238203d3e20323634323831.roa (hash: cKKHhUFT5/1LUI3u5Gcz29fpibFiFhi0uhNQPhsYDVQ=)
                          6: 3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa (hash: BKbXc9Zf7bvk7p3vlrZesQKmMHWXwGHDmLJfO2Z99a0=)
                          7: 157D2CD3D2F5A4D86D84698569F7F82D093EDE54.crl (hash: loprRZQq9C8+7mQa19LhGfwMVtrN7EDf8SCyo1OT9ak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:76:5f:9c:61:21:33:d4:62:91:a2:f7:a5:ad:33:86:bf:7e:a5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
        Validity
            Not Before: Apr 17 12:21:19 2024 GMT
            Not After : Apr 18 14:12:19 2024 GMT
        Subject: CN=820CE509B18ED4DAF50E72D3475F308A9D9AEBDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:39:be:8b:b5:6a:2e:36:6b:9a:ec:d8:28:
                    e2:13:15:ae:40:42:6a:8d:92:76:97:5a:24:5b:81:
                    a7:b3:c6:b6:0b:d3:38:38:04:2b:d9:b8:2c:1f:50:
                    f8:e2:e0:26:18:1d:56:04:69:e8:d0:12:75:b0:df:
                    e2:e6:b5:94:d2:2e:8d:eb:5c:c9:18:58:08:84:bf:
                    41:97:f4:a6:5c:d7:7d:e5:3f:20:c2:77:e8:ba:9e:
                    2a:50:96:10:d9:50:64:e6:fb:6f:83:9e:43:c3:c1:
                    9a:55:26:16:c1:7f:54:f7:d9:b0:ff:e3:c3:f4:7c:
                    12:27:06:c9:ce:f4:67:27:ce:91:d2:76:f9:1e:af:
                    2f:13:5b:a7:4f:f5:a5:e6:e1:81:2a:60:4d:c4:e0:
                    ec:db:6b:ac:18:1a:89:cf:e2:26:02:75:aa:c9:44:
                    bb:0e:3f:e8:25:c4:ca:6e:b3:f4:04:90:ea:9d:03:
                    b4:bf:b8:26:88:a1:e0:ea:fa:b1:d0:54:5c:de:5a:
                    17:5a:76:2a:51:c4:86:ac:aa:82:43:26:d0:d1:94:
                    3c:38:2e:98:a2:b5:a7:f6:68:92:70:ca:94:d7:2f:
                    ea:3a:03:ff:f7:2f:fa:4b:6d:28:3f:9a:c9:76:ab:
                    f3:bc:08:2f:5e:d0:36:fd:34:a7:77:f4:67:74:92:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0C:E5:09:B1:8E:D4:DA:F5:0E:72:D3:47:5F:30:8A:9D:9A:EB:DB
            X509v3 Authority Key Identifier:
                keyid:15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:a1:cb:21:a5:25:2b:1e:44:8c:f2:1b:57:4e:5c:51:2f:
         7e:34:12:29:c9:34:c6:69:1c:f1:bf:28:26:d1:45:b7:7e:4c:
         65:39:87:7f:bf:1a:0e:37:e4:ec:f3:73:47:05:18:da:ba:65:
         80:13:2d:4b:d1:c1:65:f9:35:7d:80:1a:f0:3a:c2:f9:a5:26:
         f7:12:a4:63:b9:e6:79:9d:92:2a:a1:bd:74:86:3a:11:71:fc:
         2c:34:e0:fd:3c:fc:8a:fd:87:54:4d:74:c1:c8:61:21:95:04:
         be:3d:50:fa:23:c9:9a:e5:da:29:f8:f1:b7:63:ed:5f:be:d3:
         96:29:4d:41:be:68:f9:46:73:81:aa:21:3d:c2:c0:9f:92:3a:
         29:12:19:9f:62:d8:64:ba:76:ce:a4:c2:25:f4:4f:50:1c:a1:
         be:25:1b:46:89:74:0b:d1:aa:9c:50:67:7f:0f:35:c7:d9:be:
         f6:d1:37:f9:20:8a:4c:03:27:dc:b6:60:a0:ed:5e:af:c6:e3:
         57:7a:ce:91:c1:d4:56:16:10:3f:2f:1a:12:cb:59:7e:25:82:
         06:4a:85:85:be:b6:55:bd:4c:de:c9:80:03:27:44:ca:b2:27:
         3b:26:24:4b:1e:6e:1d:78:1e:81:10:97:f0:9b:a7:f5:6d:e5:
         6b:11:9e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org