Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.mft
File:                     70D798B697E2DABE76F292588CBE1B2FBEB22C9E.mft (raw, json)
Hash identifier:          PHfRWYAfR6jPm8wPdhE1r0AAFtvGUgAiw9fTesXEwno=
Subject key identifier:   03:DB:1D:53:7F:27:E6:22:3F:5B:99:63:2E:3D:3C:AB:B3:9C:81:79
Authority key identifier: 70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E
Certificate issuer:       /CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
Certificate serial:       5231F20AEA8800F0D6AEADF9A3C571B8A0F96853
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.mft
Manifest number:          48
Signing time:             Sun 14 Apr 2024 19:32:19 +0000
Manifest this update:     Sun 14 Apr 2024 19:27:19 +0000
Manifest next update:     Mon 15 Apr 2024 22:46:19 +0000
Files and hashes:         1: 323830343a353032633a3a2f33322d3332203d3e20323638333733.roa (hash: k1fZ8rwIKQWyV3PFmDBrEvSHgqXqyxnLVR1wesoozvY=)
                          2: 34352e3233392e3137332e302f32342d3234203d3e20323638333733.roa (hash: GJGygJFBsum4msRewpYYoZ7wQSpZ8uenT2SMC7xgLFI=)
                          3: 34352e3233392e3137342e302f32342d3234203d3e20323638333733.roa (hash: gWFE3PA9JLmjbwUWbHhzZSJjkBmOJNO2poLSrvyz6ik=)
                          4: 70D798B697E2DABE76F292588CBE1B2FBEB22C9E.crl (hash: 8UhVYu2Ze5MbDYMbbGRCnCT6tZPnawxiuzvN4mzU5BE=)
                          5: 34352e3233392e3137322e302f32342d3234203d3e20323638333733.roa (hash: D7LijtR2rqEmdsszSZXYbbGHGaffUxIOfN5uUzO4lUw=)
                          6: 34352e3233392e3137352e302f32342d3234203d3e20323638333733.roa (hash: gFUtyQc5mWLn4FUNRfPtWofBaUMxCz7kHMdFyhQHndI=)
                          7: 34352e3233392e3137322e302f32322d3232203d3e20323638333733.roa (hash: cj+Em2iSZB/eSiil+F/QnmPXVg52fY7sJnAuiRR2xtk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:31:f2:0a:ea:88:00:f0:d6:ae:ad:f9:a3:c5:71:b8:a0:f9:68:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
        Validity
            Not Before: Apr 14 19:27:19 2024 GMT
            Not After : Apr 15 22:46:19 2024 GMT
        Subject: CN=03DB1D537F27E6223F5B99632E3D3CABB39C8179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:fc:47:55:95:29:48:8e:95:5f:1e:f2:c5:
                    8a:a8:27:1f:9b:77:2c:e9:5a:7d:85:bf:20:7f:be:
                    38:14:47:c3:4f:25:d9:6d:26:3f:c7:2e:d7:46:2d:
                    49:7d:2c:4d:6a:f8:12:ef:49:71:7e:7a:9c:74:9f:
                    b6:45:d6:5a:f6:d7:a1:1f:47:e5:42:c4:4d:7b:c9:
                    ca:1c:e0:b3:27:11:15:f3:db:29:9f:cd:37:ac:60:
                    2a:34:e7:38:39:7a:91:43:68:cb:db:4b:7a:2c:f5:
                    b5:e9:9c:a4:2f:c8:a3:ab:b6:22:03:ff:b5:8d:66:
                    44:3b:a8:c8:65:08:15:a2:e9:4f:13:a6:fa:47:12:
                    91:07:e5:40:d8:78:56:0c:77:30:a8:60:58:34:c6:
                    eb:2f:08:ba:4e:b8:6c:6e:91:e2:54:5f:5a:a2:5b:
                    79:78:35:d9:68:c6:8f:15:0d:88:f7:81:83:11:7e:
                    12:93:8f:88:c1:32:df:d9:10:41:6c:cb:2e:bf:d0:
                    13:8a:14:8d:38:4b:18:be:81:0c:cb:5a:ea:1d:d8:
                    2c:4b:d6:9b:0d:8d:83:90:31:f1:36:58:4d:27:fe:
                    66:7d:30:14:e8:8d:76:0c:01:14:24:7e:bb:dd:23:
                    3e:7f:3c:97:70:ad:57:40:ee:d8:2d:66:9d:69:9e:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DB:1D:53:7F:27:E6:22:3F:5B:99:63:2E:3D:3C:AB:B3:9C:81:79
            X509v3 Authority Key Identifier:
                keyid:70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:01:c4:93:9b:2f:23:6b:28:d5:1d:b3:42:92:23:0b:64:32:
         97:78:c4:b8:23:dc:d7:a1:a7:b1:e3:3a:9b:05:23:cb:55:f4:
         46:d3:e0:6a:1e:1e:a1:f7:44:83:48:d7:fd:28:39:ee:0e:82:
         a2:8c:44:9d:a7:ac:b5:5e:9c:e3:a0:50:c5:b3:7a:a4:cb:b8:
         3b:30:31:b2:be:03:38:64:c5:4a:1b:5b:55:48:bf:ac:3e:ad:
         9d:b3:78:cb:b2:ec:61:3e:15:dc:f0:b0:14:ca:29:3d:ee:5f:
         19:f9:cc:bf:ec:86:4c:e0:a9:1e:c9:f7:e3:e4:43:51:07:b4:
         48:d8:07:7f:38:26:1e:10:10:04:87:85:89:23:22:05:3a:f3:
         d2:e1:20:cc:33:70:7d:d1:82:6f:51:af:71:04:48:7d:6b:cf:
         cc:40:f1:d2:bb:b2:b1:f0:c0:78:7d:1f:55:56:d4:63:33:b3:
         c8:34:11:e2:7e:49:43:04:b2:3a:e8:8c:58:c0:a4:b2:e2:96:
         9c:0d:e3:ce:60:d7:92:53:61:9d:55:bb:0a:ac:ac:9a:f4:d2:
         e4:24:ff:e5:f3:36:65:8b:0d:a9:c3:43:c9:3c:96:2f:56:c8:
         23:3c:77:24:7a:07:68:70:77:f8:4f:04:25:0f:4e:47:8a:fb:
         a7:e5:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org