Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft
File:                     DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft (raw, json)
Hash identifier:          6VfvNrxc5akaZWBdSt/KtuC2avvQOMDc/VXyBN4Veio=
Subject key identifier:   EC:29:B6:9B:38:94:AF:60:27:A2:84:9F:29:58:00:61:F5:12:A4:FD
Authority key identifier: DF:F9:F1:A0:A4:70:F1:C5:02:BC:C4:A6:AF:3B:F1:C4:86:D8:BB:8B
Certificate issuer:       /CN=DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B
Certificate serial:       01D3D75F551326F75D120B802CA981AD4BE0DEA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft
Manifest number:          75
Signing time:             Tue 21 Mar 2023 19:02:23 +0000
Manifest this update:     Tue 21 Mar 2023 18:57:23 +0000
Manifest next update:     Wed 22 Mar 2023 21:58:23 +0000
Files and hashes:         1: DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.crl (hash: zpohEkjVHN4S2V9JZUPi2X3/hgl/KGI10yUbLe4OrHk=)
                          2: 323830343a346235633a383030303a3a2f33332d3333203d3e20323637333031.roa (hash: m/CjlDG9t7cbO7+IoCdItObiKB38BPNVI+Wgk8Bm+YU=)
                          3: 34352e3233322e32342e302f32322d3232203d3e20323637333031.roa (hash: uaz8EYzsBsnToQMdg5c/O3VTQyXY37iZ6IULacvJvbs=)
                          4: 323830343a346235633a3a2f33322d3332203d3e20323637333031.roa (hash: Oe5n6qqWFLUZZHHzbr3nqZ7l8cR0p7yuP+Jsi/JSjzs=)
                          5: 34352e3233322e32362e302f32332d3233203d3e20323637333031.roa (hash: JLiHo0RpEfixBSZZTCL8gFDBv8+bJvtnHSun9xf9WBQ=)
                          6: 323830343a346235633a313130303a3a2f34302d3430203d3e20323637333031.roa (hash: lDHxW27WSiPEuOW5BtXbMZVhxNxTyBnAAkPmSmoz5Cg=)
                          7: 323830343a346235633a3a2f33332d3333203d3e20323637333031.roa (hash: BBeD1nSHZN0hJfUg3gFDm6JHuZYappxz6eQtJjcURus=)
                          8: 34352e3233322e32342e302f32332d3233203d3e20323637333031.roa (hash: OyC+yCVAZJ3pehFeWfr2DFXJj2eKfwjMW5+q8BI8C7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d3:d7:5f:55:13:26:f7:5d:12:0b:80:2c:a9:81:ad:4b:e0:de:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B
        Validity
            Not Before: Mar 21 18:57:23 2023 GMT
            Not After : Mar 22 21:58:23 2023 GMT
        Subject: CN=EC29B69B3894AF6027A2849F29580061F512A4FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:4d:52:aa:bb:35:55:29:f2:b0:a4:81:34:
                    75:c5:82:50:29:cf:ad:08:65:b6:7f:a0:ec:7e:d3:
                    13:90:29:05:7b:05:a6:1f:99:32:2b:20:66:19:8b:
                    9c:45:62:4f:30:dc:d2:35:c6:29:27:9e:16:51:10:
                    7f:d9:0b:4b:26:65:ae:94:b6:45:eb:d4:e9:1a:2f:
                    f7:75:03:5f:3f:ae:49:f4:9f:f7:97:9c:f5:64:9b:
                    a5:91:66:e6:39:5b:bf:d2:23:f9:fe:b8:f9:a7:e4:
                    85:2a:26:fa:4f:aa:ee:f2:74:dc:99:94:4d:77:e4:
                    a3:ee:c3:6c:63:12:83:8a:53:72:87:e9:e8:3f:c5:
                    fd:a5:e1:4f:00:1b:e6:8d:75:e8:fc:f3:51:20:2b:
                    0c:14:9d:93:df:ac:c1:cb:d9:84:34:24:6f:58:26:
                    37:5b:75:3f:d8:ee:3e:11:54:10:8f:70:f2:9c:36:
                    17:ce:1c:6f:b7:ca:53:07:f2:a0:b9:b7:e6:32:1d:
                    41:08:1c:17:86:cf:51:41:b3:92:de:69:5b:f4:17:
                    ff:ae:8d:89:a1:7e:db:a8:77:5e:63:da:b5:9d:03:
                    13:bf:fa:25:e3:91:6a:42:ec:d5:4c:80:44:66:71:
                    c1:31:25:7c:a8:d9:d1:1d:66:22:0a:be:5e:33:ce:
                    90:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:29:B6:9B:38:94:AF:60:27:A2:84:9F:29:58:00:61:F5:12:A4:FD
            X509v3 Authority Key Identifier:
                keyid:DF:F9:F1:A0:A4:70:F1:C5:02:BC:C4:A6:AF:3B:F1:C4:86:D8:BB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:84:d5:02:67:2c:c9:44:ae:46:1c:a6:ef:69:8f:b6:db:
         b1:e3:be:6e:36:9d:15:70:ba:be:02:e8:38:95:b1:9b:cd:f3:
         fa:b0:8d:d8:f1:f4:95:7c:d8:dc:82:dc:3d:79:f3:c6:16:f5:
         86:71:8f:2e:4f:b7:0f:ab:63:97:56:17:f0:21:98:51:4c:69:
         aa:c8:d4:17:82:8c:bf:1d:fe:80:94:da:fc:a3:81:4f:4e:b6:
         b6:c5:ad:2a:f9:ae:c3:24:fb:83:9b:c1:77:20:a3:86:5e:e0:
         d1:0a:d2:36:86:aa:c8:eb:c9:ed:12:d4:8d:49:e4:b8:0c:81:
         41:4f:9f:f6:ea:0c:5c:49:45:7f:fb:14:4a:13:b0:b6:af:e2:
         6a:1f:30:03:58:69:ff:f4:80:8e:08:9a:9b:68:77:7c:23:38:
         bd:4f:a3:cd:42:a8:a4:35:5b:3f:dd:19:2c:c6:b4:91:a2:0f:
         4b:e1:37:8c:de:0d:b5:35:63:9c:3a:dc:17:04:da:ff:4a:af:
         bc:25:ca:69:9f:eb:e5:96:e6:c9:a3:fd:56:b9:d7:60:53:e3:
         61:76:2a:e2:72:ed:26:52:d3:f2:29:eb:b8:0d:95:84:2c:b3:
         35:02:f9:e0:1c:42:ac:eb:31:80:f7:78:89:6d:24:3b:20:87:
         d0:2d:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org