Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.mft
File:                     854D67A53888C5C7A27581422DBB6973EF4A1FC0.mft (raw, json)
Hash identifier:          KWPrduwFaMqvlnkHZkKqZo7NSEfvliaM9nvKzyXua0k=
Subject key identifier:   18:E7:68:09:A4:92:7F:3E:51:79:26:09:DF:CB:42:C5:C0:2A:96:02
Authority key identifier: 85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0
Certificate issuer:       /CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
Certificate serial:       14BEAA755B6373036CCF243615F5F42E15986596
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.mft
Manifest number:          22
Signing time:             Mon 15 Apr 2024 07:30:20 +0000
Manifest this update:     Mon 15 Apr 2024 07:25:20 +0000
Manifest next update:     Tue 16 Apr 2024 09:29:20 +0000
Files and hashes:         1: 3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa (hash: eMbC22NZlyFoog+EtHbOk1pHH8aSg9J+gW40qg0OYYI=)
                          2: 323830343a373963343a383032303a3a2f34342d3434203d3e20323731333236.roa (hash: hxfLDomZOGWgTCWXY1LUl6SNwuwKUIulGMZJjCmkFrc=)
                          3: 854D67A53888C5C7A27581422DBB6973EF4A1FC0.crl (hash: 324fSqaWgoDEXzJ4/77ioVxcPDhWtr9PcZeL7SZQ/2E=)
                          4: 323830343a373963343a383030303a3a2f34342d3434203d3e20323731333236.roa (hash: R4NP1h79Xi7fNkhBJOWZ47gVJFr5frD9+zM44y2i6/o=)
                          5: 3139302e3132332e37342e302f32342d3234203d3e20323731333236.roa (hash: 0DwH8hZAcrZCAPyowIgkLn6WY6GYXLQVRGtwSwKb7QI=)
                          6: 3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa (hash: O8Qhu0ZyGVmwHNuhMHZjcuDQuzaZtt04pvNa7Iz2Qe8=)
                          7: 323830343a373963343a383031303a3a2f34342d3434203d3e20323731333236.roa (hash: SwAZRuChgmp6Evlk/zaE5AbO7il3pxh5VaCFnp9bo9I=)
                          8: 3139302e3132332e37332e302f32342d3234203d3e20323731333236.roa (hash: bekz4rw99zf/XjRyjcmGBs359+ZLxqwnTOX1n3rL9Xw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:be:aa:75:5b:63:73:03:6c:cf:24:36:15:f5:f4:2e:15:98:65:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
        Validity
            Not Before: Apr 15 07:25:20 2024 GMT
            Not After : Apr 16 09:29:20 2024 GMT
        Subject: CN=18E76809A4927F3E51792609DFCB42C5C02A9602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:cb:67:b7:fe:50:49:c3:e4:09:1c:93:b9:
                    09:77:a4:7b:ab:9e:e2:d0:27:be:2d:1c:d3:ea:f6:
                    35:f1:3f:4d:ff:7c:67:df:fd:cd:bc:0f:67:37:d5:
                    c9:5d:20:c2:dd:1b:7b:d7:fe:40:3d:0a:30:9b:71:
                    ce:2a:d0:c2:4c:ae:d2:62:82:d0:ed:57:3a:b7:5a:
                    e2:68:34:c0:1f:02:29:d8:f4:f8:ff:a5:b9:18:b0:
                    56:79:17:3f:bd:2b:e2:31:c4:24:3b:5a:cb:8f:f6:
                    79:a1:44:44:08:d3:15:6b:f6:59:29:48:20:c4:75:
                    6b:d4:12:35:fa:13:df:99:59:4a:c7:8f:ad:e9:f7:
                    19:51:79:7d:17:bf:42:72:b8:d6:da:a9:ce:8b:de:
                    63:e7:11:90:3d:01:d7:34:00:b5:84:e3:97:91:91:
                    15:e6:bd:ec:b3:0e:6b:a0:77:de:ce:c4:c0:e1:24:
                    c3:df:fa:ae:01:c7:50:38:a2:fb:7c:aa:a6:34:55:
                    6e:67:90:87:b3:a0:0e:fd:c2:af:e3:91:eb:9c:04:
                    f4:2d:2f:ae:80:07:41:d7:ec:3d:00:dd:12:b3:1e:
                    87:93:3a:bc:97:23:71:72:24:ff:04:df:bb:56:c6:
                    d8:46:f6:ae:bd:a1:39:b1:3d:b6:5b:75:21:da:09:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:68:09:A4:92:7F:3E:51:79:26:09:DF:CB:42:C5:C0:2A:96:02
            X509v3 Authority Key Identifier:
                keyid:85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fd:d5:c0:6e:ca:b9:1b:52:c0:90:7e:1a:ed:da:7a:d1:d2:
         8f:2a:3c:5f:fd:24:6d:8d:06:3f:82:be:39:83:03:30:bd:ef:
         d4:14:cc:f5:51:40:22:7b:c9:7b:0d:85:8c:20:c3:8a:1d:b1:
         84:7c:d1:80:61:af:bc:dd:32:c3:7f:1f:4c:84:fa:b6:d5:5d:
         10:d4:b9:84:c2:44:0b:3d:00:31:c7:21:60:72:cc:50:f9:f1:
         fb:07:22:39:62:93:f6:8e:9f:2e:f2:06:be:f4:9f:5f:0b:b5:
         d8:67:58:7b:55:b0:fb:6f:56:a1:20:9d:39:59:8a:1a:4f:17:
         d0:48:6d:96:27:55:12:8a:a3:1d:c8:40:7b:87:23:9e:b5:b9:
         95:4a:65:b2:59:f6:1e:32:99:0d:c5:6f:e1:e0:27:a1:18:c0:
         82:f5:01:36:50:1c:13:57:58:bd:89:95:cc:1d:e4:8a:9d:c5:
         d2:cc:a7:d5:79:4f:c4:c1:37:65:e6:af:69:33:3c:de:64:12:
         ce:1e:e3:53:3d:3a:86:58:7c:19:f6:47:e5:de:bc:9d:c2:9e:
         97:6c:f3:77:91:5c:73:d8:bd:90:e2:0c:2f:9b:47:67:6e:e4:
         b1:8f:87:07:0c:ac:ee:71:b0:99:e5:8e:06:61:13:6f:32:38:
         63:60:3a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org