Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.mft
File:                     AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.mft (raw, json)
Hash identifier:          UbhQ4bJ6Ya+xe0BTQrNfC6vkv8ETC8GN5o2+OCnHK40=
Subject key identifier:   34:8F:EB:0A:B6:40:0D:E5:C1:D6:32:08:D6:8A:20:29:13:6E:64:07
Authority key identifier: AB:2A:F0:8A:29:08:F4:D9:C4:EF:E8:80:2C:52:45:AA:B1:17:3C:1B
Certificate issuer:       /CN=AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B
Certificate serial:       3C728C38D4ADF1F77F6D0897216041DCB2F4A2EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.mft
Manifest number:          2E
Signing time:             Sun 07 Apr 2024 00:29:19 +0000
Manifest this update:     Sun 07 Apr 2024 00:24:19 +0000
Manifest next update:     Mon 08 Apr 2024 03:28:19 +0000
Files and hashes:         1: 3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa (hash: C1VPFbvPceKpG9xnKNVtYTaeMHMikIuI4JTPRBJW0nA=)
                          2: 323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (hash: dq6UPFIrIlG3tdX+qRGBq+SanfzjRq44vE7/JqDlnTI=)
                          3: AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.crl (hash: UIsUhKvAKfRGkgAahWuxNFkWWVzTn6w92gKzBxMlMkg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:72:8c:38:d4:ad:f1:f7:7f:6d:08:97:21:60:41:dc:b2:f4:a2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B
        Validity
            Not Before: Apr  7 00:24:19 2024 GMT
            Not After : Apr  8 03:28:19 2024 GMT
        Subject: CN=348FEB0AB6400DE5C1D63208D68A2029136E6407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:39:a6:72:73:98:6b:f5:2b:fc:02:94:33:3c:
                    e7:15:e7:c3:29:1d:84:d4:3e:a3:3e:70:47:9a:36:
                    c7:92:79:a7:90:7f:58:14:94:36:ba:fc:82:8a:00:
                    d0:4a:a6:6d:4b:63:8b:96:e2:13:de:81:bb:c7:70:
                    5f:cf:dd:e2:ec:e4:f2:25:cb:70:4f:ae:46:66:7e:
                    1c:e4:9d:f8:3a:a5:49:1f:fb:42:2c:cc:76:a3:db:
                    43:03:80:4b:3c:d2:af:59:d7:81:7e:21:4d:d3:74:
                    94:7b:b0:f5:d9:cc:a2:5d:b2:03:28:97:de:34:75:
                    f3:ce:9c:e2:76:38:eb:5d:46:33:f9:48:72:1c:4c:
                    2f:16:da:6a:ae:0b:d3:e5:5a:b1:ec:a9:15:25:5a:
                    5f:71:fc:e7:10:5e:9a:a9:24:4a:f6:5d:65:c4:c4:
                    e5:55:77:7e:aa:39:19:c0:36:0a:7e:f3:f5:c8:53:
                    80:93:4b:a4:a9:98:cd:d7:cb:47:44:0e:12:87:36:
                    46:83:d5:f9:02:af:3b:51:fd:e5:eb:d0:bc:85:f8:
                    e9:9c:13:80:83:e7:64:bb:58:76:6a:96:dc:7b:8d:
                    ba:87:ce:89:e2:15:d0:36:3b:30:31:1c:39:e6:5c:
                    fb:7c:cf:c0:4b:9c:7a:83:28:4f:a3:12:af:2e:2e:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8F:EB:0A:B6:40:0D:E5:C1:D6:32:08:D6:8A:20:29:13:6E:64:07
            X509v3 Authority Key Identifier:
                keyid:AB:2A:F0:8A:29:08:F4:D9:C4:EF:E8:80:2C:52:45:AA:B1:17:3C:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:5c:cc:7c:85:55:72:84:ec:7c:17:90:4d:1a:6e:b4:04:
         2c:9b:25:77:a2:2f:34:d5:5a:3c:03:c4:a9:7d:c2:1e:db:ee:
         ae:ae:69:ca:46:79:06:fb:20:b4:35:4f:a1:f9:6c:57:fc:35:
         0e:01:00:8f:c1:be:38:82:3f:30:23:9f:5c:f9:c1:99:93:b4:
         12:b2:17:61:60:b2:73:2d:10:45:74:c7:ee:28:10:32:11:04:
         ff:7a:b5:64:8a:36:37:0a:94:7f:a5:bd:19:77:19:ca:ce:b1:
         f6:f2:da:90:9c:c1:1b:bf:06:a7:98:4e:f9:bb:ce:cb:af:e2:
         12:83:a3:a1:12:43:ae:e2:c0:0a:d5:93:0c:05:40:6c:33:b9:
         70:0c:bf:64:c3:6c:f5:2c:29:09:b9:06:5d:ed:ac:53:d4:d2:
         78:d8:be:a1:67:5b:4d:3b:8e:50:fe:e4:6e:f8:26:2e:bd:c7:
         ef:e3:84:a6:f6:92:b2:4d:dc:d1:6f:8f:a7:47:8e:0c:a2:e2:
         37:64:7a:8d:c5:e7:19:81:12:60:31:27:bc:56:85:1a:bb:0a:
         ba:2b:03:66:36:31:5c:98:41:a6:6f:6d:60:7d:cd:9b:fd:84:
         ff:ed:bd:25:9b:e3:3b:66:5f:c4:b0:d6:10:d6:24:41:d7:4e:
         2c:c3:9d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org