Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.mft
File:                     C105FF99BCA19864676CA5FCFCA53A25516E10F5.mft (raw, json)
Hash identifier:          C2FrRXo137lWw3QuBoG3Jl/Z13GwZ2Nhhv+EUf2YBsY=
Subject key identifier:   1B:4E:F5:17:25:54:32:BF:42:00:3D:6B:58:44:71:CB:C6:EF:67:C3
Authority key identifier: C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5
Certificate issuer:       /CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
Certificate serial:       63A029455F2967022DEF3C7B46FFD1FEB08559BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.mft
Manifest number:          3F
Signing time:             Mon 15 Apr 2024 06:12:24 +0000
Manifest this update:     Mon 15 Apr 2024 06:07:24 +0000
Manifest next update:     Tue 16 Apr 2024 06:18:24 +0000
Files and hashes:         1: 3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa (hash: SwNfwgH/oSRFuwHfGFaE6jS5Xgl7BCj8pw+plkuCRpQ=)
                          2: 3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa (hash: T1O+xKe/c9u+z0tAUGs4DdOsDPcEoBTEH4XJTOmI6QA=)
                          3: 323830343a343163343a3a2f33342d3334203d3e20323637343535.roa (hash: lcSgMR0z9Ushd6EMJ4IohICzAtzQmVJlWmSA+9rf18k=)
                          4: 323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa (hash: Zz40UZ+Sj6bdOK1Xn2SEeUtQ7yIC1HK0BWOXar25FKw=)
                          5: 3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa (hash: LHWvf+99SWLxJNHRAPRl+w1RblDUjsT3CS475jB+MJ0=)
                          6: 3136342e3136332e3232322e302f32342d3234203d3e20323637343535.roa (hash: AIh+pcsvYgjgmOR2n7I9P1zwqv7g+CUXWijx3oqrJ9E=)
                          7: 3136342e3136332e3232302e302f32342d3234203d3e20323637343535.roa (hash: rgXtXA+G9cFd3QWKnvNH2OXOhmB8kjtqhVgwnw+bd6Y=)
                          8: C105FF99BCA19864676CA5FCFCA53A25516E10F5.crl (hash: aZjmFRj+vhO4IFVq8P2YdD0g5ox03Kr3quvt4jLxM2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a0:29:45:5f:29:67:02:2d:ef:3c:7b:46:ff:d1:fe:b0:85:59:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
        Validity
            Not Before: Apr 15 06:07:24 2024 GMT
            Not After : Apr 16 06:18:24 2024 GMT
        Subject: CN=1B4EF517255432BF42003D6B584471CBC6EF67C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:03:b2:2d:04:82:08:3d:aa:ad:ff:eb:22:
                    4a:cd:53:a1:c5:c2:fa:69:87:44:18:ed:9d:92:33:
                    20:96:23:9a:df:12:c4:9e:e2:71:16:2b:a1:cc:c8:
                    a0:8f:e1:22:d2:6e:11:70:8c:c1:ea:5f:68:77:e3:
                    71:a3:c9:7b:51:0e:81:8f:e0:c6:4a:17:27:d8:6a:
                    8c:db:d6:b5:a6:ce:af:ba:cf:7e:a4:2b:38:15:16:
                    f5:e7:9a:8e:3c:6e:48:8c:34:3d:25:7a:ba:54:eb:
                    60:3d:90:38:e6:fc:15:00:bd:4b:b6:12:e5:dc:f5:
                    67:59:3b:80:78:08:21:fb:68:99:bc:5d:06:fe:31:
                    79:61:7a:19:ac:4d:92:c1:0f:44:84:37:62:e9:71:
                    68:58:ab:27:0a:7e:cf:fb:23:57:a9:f4:bb:c9:f1:
                    1d:e8:06:e7:fd:02:52:28:b6:0b:b5:29:7f:d6:cd:
                    35:19:c7:40:9c:ed:cb:30:67:ae:95:d0:b0:ee:63:
                    c3:ca:df:4f:65:0e:bd:fe:d6:32:38:64:7c:43:5f:
                    8a:77:69:5d:ac:5c:3f:2a:ff:11:0e:2a:71:4b:fa:
                    d3:a8:11:c8:19:3b:bc:49:1f:16:b3:6c:a2:f6:3b:
                    a4:63:ba:4f:3a:95:78:39:a0:18:bb:6c:05:d3:27:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4E:F5:17:25:54:32:BF:42:00:3D:6B:58:44:71:CB:C6:EF:67:C3
            X509v3 Authority Key Identifier:
                keyid:C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:03:74:09:a8:bd:30:3d:e1:37:b7:41:1e:19:3a:07:7a:
         9a:b0:ec:8d:57:49:15:f4:91:b3:6f:12:d9:6f:2a:d3:1f:cf:
         57:18:e9:80:91:9b:0e:6b:28:c5:02:94:8e:c1:ca:d5:a6:bf:
         23:3d:8c:fb:82:eb:9f:02:1d:4c:f6:ca:c3:bc:62:c2:ac:53:
         b4:40:ed:ac:83:8e:f1:73:4b:61:fb:23:5e:83:73:29:49:13:
         45:5e:bd:08:ef:ae:05:95:77:9a:30:db:41:a2:ba:5a:e1:bf:
         6a:48:08:3d:6f:b1:27:19:7d:ff:f5:70:a2:13:c3:d9:da:58:
         0b:ab:8e:37:55:02:d5:49:bc:11:b1:92:dc:3e:00:a0:61:4f:
         d3:d7:75:0a:ac:0b:fe:90:e0:58:81:8b:41:2a:0d:60:ad:65:
         e2:e8:ba:8e:4f:d2:aa:70:5a:0e:cf:72:0d:c2:53:0f:2f:94:
         44:c1:a6:03:35:4c:34:67:4e:ed:46:78:8a:90:fe:10:79:a1:
         04:04:ca:3e:f8:d7:b8:a8:d0:9c:53:45:51:d1:51:ac:03:4a:
         1c:81:ed:bd:a5:0b:1c:0c:ce:06:4d:8a:09:4c:05:c3:3d:a1:
         dd:a1:c4:74:ff:ce:8b:12:41:95:89:34:5a:71:4c:77:6e:14:
         af:d2:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org