Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/0FCDA88840404F9072B5DE1E775B8A935355A94D.mft
File:                     0FCDA88840404F9072B5DE1E775B8A935355A94D.mft (raw, json)
Hash identifier:          sj12fkZs4PSFo9PmI4fgtw6TktCfvSZd+LyuM0RdvaU=
Subject key identifier:   58:9E:84:FF:91:8A:5F:8E:21:EF:74:4E:5B:83:66:40:C7:74:EE:49
Authority key identifier: 0F:CD:A8:88:40:40:4F:90:72:B5:DE:1E:77:5B:8A:93:53:55:A9:4D
Certificate issuer:       /CN=0FCDA88840404F9072B5DE1E775B8A935355A94D
Certificate serial:       2D6D8E6E303DE5C7303C32EA64FE680E9C8ECE45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FCDA88840404F9072B5DE1E775B8A935355A94D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/0FCDA88840404F9072B5DE1E775B8A935355A94D.mft
Manifest number:          37
Signing time:             Sat 06 Jan 2024 09:04:04 +0000
Manifest this update:     Sat 06 Jan 2024 08:59:04 +0000
Manifest next update:     Sun 07 Jan 2024 11:16:04 +0000
Files and hashes:         1: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: AVvmPYJIs/q3HVCQZU8gq3CkNxXb6vjo+KkvCtH7mj4=)
                          2: 0FCDA88840404F9072B5DE1E775B8A935355A94D.crl (hash: 28Bcl8P5yxFMNL6CuulaymKssSdxx+zZ7+jAOPgu1D0=)
                          3: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: 7QqZw9nJNiILcr6nF7E/FRl98OupSorDJ6Gm4/VXiK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6d:8e:6e:30:3d:e5:c7:30:3c:32:ea:64:fe:68:0e:9c:8e:ce:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FCDA88840404F9072B5DE1E775B8A935355A94D
        Validity
            Not Before: Jan  6 08:59:04 2024 GMT
            Not After : Jan  7 11:16:04 2024 GMT
        Subject: CN=589E84FF918A5F8E21EF744E5B836640C774EE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:ac:2d:72:4d:c6:df:da:4f:91:b8:9e:45:
                    7e:8f:57:54:42:1b:58:c3:3f:9b:ba:af:ca:fa:83:
                    94:ff:aa:25:fb:97:b7:1a:dc:31:08:3b:c7:24:7e:
                    60:f6:9e:c9:25:a3:77:67:e6:35:4b:3e:ee:8c:67:
                    9e:90:f8:de:80:f9:d8:16:4c:62:b8:94:1c:95:9f:
                    95:5a:ba:ed:5a:03:67:97:37:06:52:28:86:6b:d8:
                    f0:44:b2:7f:f4:62:24:68:21:11:29:35:fc:c7:41:
                    d1:65:69:aa:47:7d:e8:05:cf:74:11:b5:4c:b1:9e:
                    99:b1:c4:af:fb:3a:cf:88:38:48:42:b9:99:50:d9:
                    5b:5f:ff:29:92:6f:73:4c:95:37:12:67:9a:c5:83:
                    b8:7e:fe:9f:f4:c3:a4:bf:40:ae:f0:fa:c4:e1:0b:
                    08:9d:e5:0a:1a:7d:36:00:2b:80:ef:c9:72:51:e8:
                    6e:1a:2f:57:25:7a:8e:10:fc:17:5f:9c:71:72:15:
                    de:64:4f:e9:9c:3b:91:d2:c9:25:b7:b8:55:dd:99:
                    11:e9:0c:b9:8a:20:16:8a:38:d2:1d:90:01:de:60:
                    70:dc:e2:a4:69:95:67:48:b5:0a:78:1f:02:f2:c0:
                    d7:4d:bd:8a:47:f2:8a:5e:9f:92:2c:d8:a1:dc:71:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9E:84:FF:91:8A:5F:8E:21:EF:74:4E:5B:83:66:40:C7:74:EE:49
            X509v3 Authority Key Identifier:
                keyid:0F:CD:A8:88:40:40:4F:90:72:B5:DE:1E:77:5B:8A:93:53:55:A9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/0FCDA88840404F9072B5DE1E775B8A935355A94D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FCDA88840404F9072B5DE1E775B8A935355A94D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/0FCDA88840404F9072B5DE1E775B8A935355A94D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:18:9a:25:13:c0:88:85:da:d9:e5:06:eb:3b:54:e8:4c:84:
         e7:08:a9:a3:11:03:15:86:1b:33:4d:e9:c9:d2:64:ef:09:b1:
         72:63:2a:78:e2:81:9f:29:41:ff:e6:7a:56:a7:fe:bd:cc:7e:
         f8:92:08:f5:c9:a4:88:14:9e:b8:74:8c:6a:c7:4e:88:90:b4:
         bc:70:45:b8:f5:45:ce:bc:3b:91:d3:ac:25:0f:d5:0a:d2:4b:
         b7:ed:6d:80:d1:20:d2:9e:65:ed:56:36:5d:4c:ee:b6:98:7f:
         cb:79:3d:24:8b:a4:f5:40:8d:bf:29:64:4b:69:8e:03:2b:a5:
         03:b1:ef:3e:9d:47:55:76:7f:a5:42:80:cf:ea:33:71:67:ad:
         19:18:53:7c:20:f5:b4:cc:92:98:e9:d5:43:16:6a:38:6d:85:
         45:32:98:da:5d:58:bc:30:c5:1d:9f:29:d5:5d:78:d4:5b:55:
         c1:36:5f:07:3f:e7:c2:cf:fa:d0:dd:05:3d:5c:8f:64:a2:41:
         d6:7b:d2:d7:05:e0:3a:0c:09:14:bf:e5:7f:5d:56:e1:a4:eb:
         a8:01:30:f1:0c:f0:0f:d6:5e:a7:75:67:64:86:b4:75:75:48:
         1a:77:45:e5:2c:fe:7e:7d:bd:f7:60:af:8b:7e:89:80:5e:44:
         68:d4:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org