Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/1/8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.mft
File:                     8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.mft (raw, json)
Hash identifier:          /99Ep4rB0deofb3waum7IlCJY+bJLbAZR2gGPsBxNO8=
Subject key identifier:   3C:77:01:7E:77:86:F5:FD:3C:81:6F:CE:61:68:99:09:85:5E:2D:32
Authority key identifier: 8D:97:3A:12:CA:B9:23:FD:AF:D9:F9:FB:AE:3D:58:25:E9:E1:63:55
Certificate issuer:       /CN=8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355
Certificate serial:       59E493332B3987028B5B07AB06DA4C50CCC808AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/1/8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.mft
Manifest number:          0125
Signing time:             Sat 09 Nov 2024 22:57:38 +0000
Manifest this update:     Sat 09 Nov 2024 22:52:38 +0000
Manifest next update:     Mon 11 Nov 2024 02:04:38 +0000
Files and hashes:         1: 34352e3233392e3137322e302f32342d3234203d3e20323638333733.roa (hash: xtq1uZAfLXQs+ZzxhgmFhaDcU+/uiikwvwXYTOOnmgg=)
                          2: 8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.crl (hash: alfw3hTr2qeKFimyhYnQTPaMibMJT3Q7BXZi2ttdg+0=)
                          3: 34352e3233392e3137332e302f32342d3234203d3e20323638333733.roa (hash: T4hZ8E1NsslGANg0Tiq+6NiACHm5V4hP7/8MAymLGDM=)
                          4: 34352e3233392e3137342e302f32342d3234203d3e20323638333733.roa (hash: lnlR8Yhf8Il17bkZVCdgu1RtDIjE2AFRgCSBOMlTqOk=)
                          5: 34352e3233392e3137322e302f32322d3232203d3e20323638333733.roa (hash: L1GL1PRIE/i/m8H6nMmMw6+yTcxkdqO9qirj4bJcmH8=)
                          6: 34352e3233392e3137352e302f32342d3234203d3e20323638333733.roa (hash: iR1IqOif60NnZym+ED/dOy9AkHdYbiU7lJPc+bgTkLc=)
                          7: 323830343a353032633a3a2f33322d3332203d3e20323638333733.roa (hash: /wQnbCmjLOFY9Gu0pI5bAWjdLx8iYwJUgC8wAKajzFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e4:93:33:2b:39:87:02:8b:5b:07:ab:06:da:4c:50:cc:c8:08:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355
        Validity
            Not Before: Nov  9 22:52:38 2024 GMT
            Not After : Nov 11 02:04:38 2024 GMT
        Subject: CN=3C77017E7786F5FD3C816FCE61689909855E2D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:88:13:19:2c:f2:15:10:6b:b7:71:b5:79:
                    33:67:7a:d7:90:bb:9c:a6:31:56:a6:02:95:29:ec:
                    00:87:3b:ef:9b:f0:2f:0e:89:71:f5:e1:27:5d:7a:
                    56:dd:8e:48:9d:1d:53:1b:72:45:9d:bd:a1:77:80:
                    85:48:4d:bf:a4:d9:b9:5c:e0:2f:18:f4:9a:dd:54:
                    a7:0f:2f:6a:c7:fd:30:98:88:a5:f5:41:dd:b3:63:
                    0c:ba:19:39:aa:3c:4d:ef:ca:d2:dc:48:80:bb:74:
                    ea:d6:bf:b0:d3:a4:50:d2:80:b6:42:ed:8a:17:cf:
                    52:54:ba:85:4d:fe:87:67:c4:ca:1e:33:b4:fe:eb:
                    0b:98:72:de:47:b2:f2:68:0b:77:b2:a8:99:d7:82:
                    ed:95:cf:35:73:06:5a:10:71:cf:44:38:95:1f:3f:
                    df:7c:bc:a4:05:43:47:25:3d:c4:48:79:0f:9a:75:
                    ab:89:1d:01:41:fe:0c:5a:88:47:09:55:8d:c0:17:
                    0d:d3:8e:08:27:8e:ad:fc:11:6b:fd:ac:78:0f:5d:
                    a9:4a:ef:f6:ee:1d:3d:4e:8d:76:ea:58:53:03:f7:
                    28:f7:18:8c:5c:88:dc:6a:f1:f8:a9:73:86:e8:ec:
                    4f:8d:fa:b7:18:a8:2a:29:d1:27:c4:ce:73:86:82:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:77:01:7E:77:86:F5:FD:3C:81:6F:CE:61:68:99:09:85:5E:2D:32
            X509v3 Authority Key Identifier:
                keyid:8D:97:3A:12:CA:B9:23:FD:AF:D9:F9:FB:AE:3D:58:25:E9:E1:63:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/1/8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/1/8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2f:29:83:9d:45:dc:97:60:96:3e:d6:0a:29:3d:0f:04:06:
         bd:cf:b4:08:9f:95:2f:80:59:db:8d:27:0e:79:d0:d9:e7:aa:
         ed:56:89:0b:da:39:6b:9c:40:bf:80:e6:c7:8c:fc:72:16:2b:
         f1:74:2f:43:f6:68:34:15:1f:38:31:21:09:e2:51:c3:7a:e1:
         69:39:92:cf:37:2c:bc:68:99:29:44:bf:51:a6:a8:c8:03:02:
         36:81:a9:51:cc:33:b7:bb:a0:2e:89:59:d2:e0:5d:d7:43:e3:
         b3:10:d9:28:6b:8d:4d:87:1e:90:ef:f8:21:35:99:7e:3d:a4:
         30:52:77:ab:8f:8c:4f:c3:58:4d:45:79:0d:a7:b1:fa:53:ec:
         96:39:6d:c3:66:a8:e6:f5:bf:5a:49:6e:ee:e4:39:46:02:27:
         3d:c4:eb:62:df:0f:6d:b7:82:4f:35:9d:7e:f2:9d:55:25:1d:
         f2:50:c7:9f:35:a7:d8:18:b9:e7:60:76:33:9f:c5:0e:53:d3:
         72:d4:04:d1:c8:39:54:e1:b1:dc:c6:41:cf:ba:99:bf:4d:be:
         53:95:c5:09:d7:bb:be:f8:76:61:41:f9:8a:7f:bd:62:9f:98:
         d7:d8:0a:aa:e6:5d:ec:f7:c3:61:09:eb:b1:12:88:e0:bd:8c:
         a3:6a:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 22:18:37 2024 by rpki-client on console-ams.rpki-client.org