Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/DEEE3D28D5A12448565CED39037051D4B533893D.mft
File:                     DEEE3D28D5A12448565CED39037051D4B533893D.mft (raw, json)
Hash identifier:          +NrbvjQl0rcinUcFsyBuadn3fzyYTxMnFvYC8m3i0BM=
Subject key identifier:   70:14:62:25:FE:DE:E5:68:B2:17:F7:0B:A5:67:96:A6:B3:E1:95:1C
Authority key identifier: DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D
Certificate issuer:       /CN=DEEE3D28D5A12448565CED39037051D4B533893D
Certificate serial:       3A822821F9B2678E0694B3E163AD127D5EC44D71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/DEEE3D28D5A12448565CED39037051D4B533893D.mft
Manifest number:          04A0
Signing time:             Mon 15 Apr 2024 04:09:09 +0000
Manifest this update:     Mon 15 Apr 2024 04:04:09 +0000
Manifest next update:     Tue 16 Apr 2024 16:36:09 +0000
Files and hashes:         1: 323830343a3137343a3a2f33322d3438203d3e203533313532.roa (hash: vx5Nf1I7M3ikq8F0KY64hAHfKD0g1yKrhvVS118WFIM=)
                          2: DEEE3D28D5A12448565CED39037051D4B533893D.crl (hash: 97wvbW0zKEmsYrOaeWJG/GkFUhzi3XMGvR26W1wUHY8=)
                          3: 3138362e3230392e302e302f32302d3234203d3e203533313532.roa (hash: Z1OTAIRG8aFNYdfgSGQyOskmZFdFuW61mGzsuJwvIvc=)
                          4: 3137302e3233312e32302e302f32322d3234203d3e203533313532.roa (hash: vRCHFMcnZ0e2F/gkb0TGIIo7NDzTMY3uKZSh+W6eRwc=)
                          5: 3137302e38322e3136302e302f32322d3234203d3e203533313532.roa (hash: hIliZUKLPRb+yOHCJ4R2WrcV4vGl/RZhKAlVww82SJY=)
                          6: 3137372e3232332e3234302e302f32302d3234203d3e203533313532.roa (hash: sNXYXEIauWo11w9MXYEMwR6oQbvGlWbtJ9KlBSoTTN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:82:28:21:f9:b2:67:8e:06:94:b3:e1:63:ad:12:7d:5e:c4:4d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEE3D28D5A12448565CED39037051D4B533893D
        Validity
            Not Before: Apr 15 04:04:09 2024 GMT
            Not After : Apr 16 16:36:09 2024 GMT
        Subject: CN=70146225FEDEE568B217F70BA56796A6B3E1951C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:47:b3:fe:d6:d1:82:20:b2:67:0f:02:cc:
                    f9:2d:b9:a2:42:bc:65:58:2b:78:8e:84:06:13:8c:
                    52:42:c1:03:15:6a:2c:13:b9:4d:ab:e5:cd:e2:ea:
                    13:cb:86:5a:6e:7c:3e:2c:8d:9a:44:a6:ad:a9:5e:
                    37:6b:c4:63:2a:92:40:22:f6:ea:e5:1d:9c:7c:eb:
                    1e:5e:57:af:05:c5:f0:ba:e8:a1:0d:56:bf:ac:47:
                    25:9a:b3:17:a2:f2:c6:90:fa:3f:42:39:21:72:30:
                    cf:06:be:85:5d:0f:eb:4d:7b:cc:38:fa:f3:21:a8:
                    b7:4d:f1:ce:ec:cb:6a:4e:0d:f0:4d:c6:c0:92:46:
                    c2:6d:87:dc:89:87:a1:d6:71:b4:ce:15:dc:29:30:
                    a9:f3:59:d3:ac:57:8a:02:8a:d2:6f:00:af:25:07:
                    8d:b7:e2:ad:49:15:e0:7b:ca:fb:9c:e0:43:9c:5b:
                    c4:c6:2a:bd:27:29:4e:45:d9:64:26:97:c8:e8:f9:
                    d8:08:02:1e:9e:77:ef:da:24:30:c0:79:75:fb:a6:
                    c0:03:bd:09:d1:a2:63:b0:96:af:44:48:ae:af:6a:
                    f7:02:6b:49:24:3e:fa:df:a2:29:27:31:af:7c:b5:
                    59:cc:fa:d7:78:0d:03:86:2a:6d:eb:95:04:00:0b:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:14:62:25:FE:DE:E5:68:B2:17:F7:0B:A5:67:96:A6:B3:E1:95:1C
            X509v3 Authority Key Identifier:
                keyid:DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/DEEE3D28D5A12448565CED39037051D4B533893D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/DEEE3D28D5A12448565CED39037051D4B533893D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:64:f6:ef:c0:e9:8f:8d:2f:38:dd:e7:97:32:c0:8a:98:20:
         6a:8d:71:f5:c4:03:31:ee:35:c9:5f:04:04:64:6a:b5:96:6f:
         13:a9:1a:56:a6:19:b2:7b:68:d8:46:b3:e9:56:28:b4:6c:26:
         76:80:71:91:72:10:1f:e7:c9:6d:13:82:54:92:1a:9d:06:e1:
         b7:90:41:71:62:ea:c5:2f:11:94:94:59:cf:e7:92:1b:0e:b5:
         fa:15:db:bd:d8:ff:f1:0a:3b:22:eb:89:cc:29:4d:eb:51:72:
         ca:8c:a4:6f:e1:0e:3f:d4:14:ab:dc:4a:61:89:4b:2d:73:e7:
         55:54:f0:78:04:ac:e4:6f:35:53:d0:c9:50:45:f1:57:41:20:
         c7:1a:da:1a:42:15:4d:f9:53:2a:88:e9:bf:60:5c:71:f0:3a:
         74:e3:13:97:28:83:a7:f0:9b:4b:f2:fe:e4:6f:18:33:d6:55:
         13:4a:b9:5d:7b:78:12:96:32:05:6d:14:37:c7:9a:e6:6f:eb:
         16:16:1c:6c:41:79:fd:1a:ba:d4:6b:64:05:ed:8c:46:d5:5e:
         50:8f:25:db:c8:a9:7f:94:d2:a3:18:4f:ad:b8:8e:55:85:27:
         85:d7:1b:d4:c6:ad:fa:06:84:b2:15:16:76:98:70:d0:4e:0d:
         90:ee:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org