Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.mft
File:                     2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.mft (raw, json)
Hash identifier:          sIQyitGid/1AJdJm1xfQsCkPyL6rvDs57fkHCGS3TsQ=
Subject key identifier:   8D:91:B4:7D:6F:3B:99:8C:5C:87:D9:31:58:C7:97:E6:CC:52:18:AD
Authority key identifier: 2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
Certificate issuer:       /CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Certificate serial:       6973522332E8F051E8527B9B981B0CF3AB65E536
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.mft
Manifest number:          04B5
Signing time:             Thu 08 Feb 2024 19:27:34 +0000
Manifest this update:     Thu 08 Feb 2024 19:22:34 +0000
Manifest next update:     Fri 09 Feb 2024 21:46:34 +0000
Files and hashes:         1: 3137372e35342e3232342e302f32302d3230203d3e20323632343632.roa (hash: LlYqWSKM2HVuWe5zEjDxdEiPv19DYr4ulUSpdWp1Seo=)
                          2: 323830343a3462633a3a2f33322d3332203d3e20323632343632.roa (hash: NuNKsu2UINYtbx6niejf+E4XCeJViiaIUAdQS5JNImw=)
                          3: 3138312e3232342e38342e302f32322d3232203d3e20323632343632.roa (hash: gx8DrdMbiOyVG84XbcNojZqFmTlREjltcC+Wif6IiK4=)
                          4: 2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.crl (hash: fokQZ3IC9/OBqZz3U4ByVvtSlVFzLDBpaJXxSa5NBAE=)
                          5: 3137372e35342e3232342e302f32342d3234203d3e20323632343632.roa (hash: ldcO9Evg72NK+yo3UZLBmmGQnBynWQeYBqNcWzY5L4Q=)
                          6: 3230302e3139362e3132382e302f32322d3232203d3e20323632343632.roa (hash: YcMxx9ddc08E1K8srolTwRGW4VW2TzGR1Ah8hY8E+0M=)
                          7: 3137372e3130352e3134342e302f32302d3230203d3e20323632343632.roa (hash: lqxHNfZICEh+jQ2bCLWOqkaJR/vr/ajSg9rpqYC0C/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:73:52:23:32:e8:f0:51:e8:52:7b:9b:98:1b:0c:f3:ab:65:e5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
        Validity
            Not Before: Feb  8 19:22:34 2024 GMT
            Not After : Feb  9 21:46:34 2024 GMT
        Subject: CN=8D91B47D6F3B998C5C87D93158C797E6CC5218AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:23:f4:7d:6d:d4:9c:17:9a:5d:18:92:08:
                    b4:62:83:db:ed:db:8d:44:cd:42:74:a9:7e:61:5a:
                    7f:93:30:c3:e1:67:4d:77:ff:2d:6c:9d:31:1d:e0:
                    71:5a:37:bd:cf:c9:3c:ca:c2:9b:fb:d5:eb:d9:ff:
                    2b:e7:ea:92:62:1b:d9:32:f0:e2:ae:e1:29:2e:7b:
                    c4:6d:bc:88:76:65:3a:82:13:46:a9:a0:b5:84:06:
                    58:60:2c:00:c7:02:1d:56:85:a7:af:70:4f:54:04:
                    37:6f:20:de:74:af:ba:8c:48:5c:34:c8:a0:18:af:
                    5c:cb:b8:4e:8d:02:fe:d4:73:f1:40:2c:73:f8:c3:
                    f6:b0:8d:8b:0f:1b:31:00:7e:f9:6f:f6:91:cc:c9:
                    df:92:b5:02:cf:71:d6:1f:a9:9b:10:e8:e0:cd:77:
                    b2:10:b2:17:cd:dd:f8:30:d5:61:5e:8c:9a:2e:2c:
                    70:57:3f:74:3b:51:75:25:7b:25:e7:ac:e0:ef:94:
                    f5:42:60:b8:7a:18:49:22:e4:36:a6:69:9b:e9:10:
                    a2:a6:ff:7b:ad:88:39:8c:10:0c:48:b6:6c:f4:d9:
                    38:a2:a4:54:96:04:c1:b2:c9:ec:03:c9:79:0d:d6:
                    81:43:97:aa:3f:72:1e:66:d5:04:7d:69:04:db:e8:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:91:B4:7D:6F:3B:99:8C:5C:87:D9:31:58:C7:97:E6:CC:52:18:AD
            X509v3 Authority Key Identifier:
                keyid:2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4a:5c:7f:9b:14:09:e0:db:7d:7e:29:58:90:5d:83:02:9a:
         40:3a:3f:c2:c1:9d:b3:41:b4:56:dd:95:08:96:3e:dc:2c:7e:
         c9:a1:c8:9e:f2:6f:25:15:b7:7a:80:93:54:ed:00:6f:b0:96:
         71:bf:ab:3a:45:c2:16:ba:37:cb:06:6a:5b:4c:1e:46:59:ee:
         85:a1:54:d1:44:8b:4a:63:96:73:c6:a1:fd:9a:81:0e:81:4d:
         1c:b5:b9:06:10:cb:eb:14:fd:f8:72:a2:ee:6a:38:c0:f7:63:
         b4:b0:0f:53:56:11:3c:c2:d8:2f:26:3a:31:5e:63:d2:11:c7:
         5e:bd:cf:09:7e:fb:8d:8d:73:56:1d:18:fd:3b:58:80:0f:68:
         da:74:20:f8:99:d6:29:68:a1:7a:66:ed:f9:ce:1c:20:f9:ff:
         e0:1b:56:0f:28:38:d5:6f:ba:92:1f:a4:b3:77:5a:dc:b7:2a:
         77:e3:a1:63:2d:7e:e3:d7:81:5f:b6:9c:f2:56:c3:76:0f:0c:
         31:16:8d:c7:1a:01:da:73:af:f3:e8:25:4f:22:19:96:b8:b1:
         e9:9c:80:cf:f3:92:8b:cf:b5:94:67:ba:d5:5a:45:7d:7a:ef:
         2d:b6:f3:38:a8:26:a8:43:a6:af:71:2b:6c:4f:8e:98:60:b1:
         24:7d:12:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:36 2024 by rpki-client on console-ams.rpki-client.org