Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.mft
File:                     C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.mft (raw, json)
Hash identifier:          3KYL66vx38tDw0/judUvJvtvg7orgxPm4McS6uEgacg=
Subject key identifier:   43:F5:1B:3A:A0:C7:04:19:14:0A:26:18:B3:56:9E:12:49:50:14:DE
Authority key identifier: C4:0C:41:47:DE:8D:F9:7F:F7:B3:DB:93:6A:2C:19:BC:5F:95:2F:DF
Certificate issuer:       /CN=C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF
Certificate serial:       6699BF60B8560D524E3CCA6A24D61E4B8C67BCF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.mft
Manifest number:          22
Signing time:             Sun 28 Apr 2024 08:58:08 +0000
Manifest this update:     Sun 28 Apr 2024 08:53:08 +0000
Manifest next update:     Mon 29 Apr 2024 12:07:08 +0000
Files and hashes:         1: 323830343a386232303a3a2f33322d3332203d3e20323733373133.roa (hash: uAExVfOaK+NpnqMHIQaSMFT+pnvaKes9mJpuymiMd9M=)
                          2: 323830343a386232303a383030303a3a2f33332d3333203d3e20323733373133.roa (hash: 7vzzF5NIfNrfkmAeWuk43u4TNIg/Cql7Kzl+84/oBmU=)
                          3: C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.crl (hash: qXOM9wW2SnYltkC7x8idIUotEoI442ic36k5MKgDfjI=)
                          4: 323830343a386232303a3a2f33332d3333203d3e20323733373133.roa (hash: +1krdd9wb0OfjB16PtCtDNIZK4iSXD1o7QURbFNkdoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:99:bf:60:b8:56:0d:52:4e:3c:ca:6a:24:d6:1e:4b:8c:67:bc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF
        Validity
            Not Before: Apr 28 08:53:08 2024 GMT
            Not After : Apr 29 12:07:08 2024 GMT
        Subject: CN=43F51B3AA0C70419140A2618B3569E12495014DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:6f:e9:f1:61:ae:ed:ef:2a:af:51:3b:e6:
                    77:3a:8a:15:f4:5a:22:05:5e:dc:6a:b0:26:20:84:
                    67:e6:dc:92:bb:24:12:b7:62:a2:87:2c:c3:08:01:
                    c5:3a:67:57:3b:e4:0e:30:af:b7:b4:5f:c3:21:41:
                    52:c0:25:fd:49:04:fc:f5:68:8c:0b:29:e8:5e:1c:
                    fd:09:68:00:32:f6:2c:7e:9e:3b:11:46:bc:40:8c:
                    f0:de:d9:67:9e:cb:0e:84:88:2e:ac:2a:11:a0:ad:
                    df:25:9e:fe:e3:83:b1:eb:e2:6c:9b:be:2d:20:6e:
                    1b:e1:4d:b5:67:9f:c7:32:f5:3c:ac:33:99:8b:88:
                    31:80:b9:b3:4d:1a:5c:8b:42:71:f2:dc:db:c3:4a:
                    bb:17:e5:af:4e:cb:ac:9e:c9:18:8e:dc:47:4c:39:
                    21:c9:9c:e9:1d:24:74:38:52:28:f7:b4:d3:96:3e:
                    e7:30:e6:d6:ab:29:95:66:bc:cb:29:88:58:c8:14:
                    09:9f:eb:9f:e2:05:c8:3c:ab:ef:da:2f:ac:4f:87:
                    4b:54:4e:21:57:4f:12:14:8d:48:b9:1c:98:5c:24:
                    a0:65:d9:c0:fc:ff:16:03:cc:78:f2:ef:99:a4:ce:
                    39:d3:28:2b:5a:4a:8e:0c:a8:8d:f9:87:41:a4:28:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F5:1B:3A:A0:C7:04:19:14:0A:26:18:B3:56:9E:12:49:50:14:DE
            X509v3 Authority Key Identifier:
                keyid:C4:0C:41:47:DE:8D:F9:7F:F7:B3:DB:93:6A:2C:19:BC:5F:95:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/1/C40C4147DE8DF97FF7B3DB936A2C19BC5F952FDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fa:eb:4f:ef:b7:e9:d8:14:fc:d4:08:c3:8c:77:a3:6a:33:
         33:56:ae:8e:2d:90:ee:c8:7b:78:e1:f3:ba:27:3f:b6:22:87:
         ea:b4:e9:6f:44:8d:89:07:6a:87:ff:39:af:15:c5:b8:64:62:
         34:ee:4d:b1:6b:42:f3:9d:eb:ff:3c:a8:3f:5d:cb:49:8b:33:
         c2:23:0b:08:6b:94:a0:04:72:8d:e5:69:df:69:25:3a:89:76:
         65:03:5c:ae:d8:1f:87:e3:10:8d:e6:5d:a4:b9:3d:05:c8:d3:
         95:6d:e1:50:6f:92:48:eb:d7:bc:83:83:b7:60:4e:bc:2d:d9:
         c6:98:a0:58:15:1c:11:e5:55:ab:d6:ee:45:87:6a:bf:ab:a4:
         e6:c5:ab:a4:8d:e1:7a:5c:de:55:94:20:82:3a:c3:ef:79:69:
         61:2d:bc:5a:c6:a0:39:26:49:e8:dd:2e:08:92:37:eb:62:54:
         9b:80:e2:d2:cd:67:d1:a6:55:ec:9d:ff:11:79:f8:a0:98:37:
         0c:89:76:03:18:df:eb:ea:00:1e:0c:89:a8:18:96:7f:57:43:
         d2:33:19:e2:40:08:b0:0b:d0:0f:6a:cf:4d:df:9e:0d:1d:95:
         d1:37:f4:1d:5a:a2:81:ca:0b:bd:e9:4f:95:f2:43:a8:47:d4:
         9f:c0:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org