Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.mft
File:                     314CC58029D80C55F7FCC7D6D34604096BE000E9.mft (raw, json)
Hash identifier:          LIg7qHNPgymw/ndV9jwLsD3Z2NfRcf5YSd+022L/v8g=
Subject key identifier:   E7:D1:78:50:3E:C1:7A:D5:D6:0E:7D:FE:12:F5:B1:83:EC:82:14:A2
Authority key identifier: 31:4C:C5:80:29:D8:0C:55:F7:FC:C7:D6:D3:46:04:09:6B:E0:00:E9
Certificate issuer:       /CN=314CC58029D80C55F7FCC7D6D34604096BE000E9
Certificate serial:       3D2204D120143AD9C622888D590FB97D9693DBC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.mft
Manifest number:          8F
Signing time:             Fri 09 Feb 2024 08:45:11 +0000
Manifest this update:     Fri 09 Feb 2024 08:40:11 +0000
Manifest next update:     Sat 10 Feb 2024 11:52:11 +0000
Files and hashes:         1: 34352e3137332e37382e302f32342d3234203d3e20323638383031.roa (hash: 3PPiLvMasYva2LUYV+AAVHdu5oPf/VqvwNUz8JGGfS8=)
                          2: 34352e3137332e37392e302f32342d3234203d3e20323638383031.roa (hash: rAekEDJgSVmKlY+lZxwUHkHZ4lBMHVdrm2fJ6fGUhVs=)
                          3: 314CC58029D80C55F7FCC7D6D34604096BE000E9.crl (hash: 7RoEk9gRhzYRuf17RRAVkpOQwT/kMdRHm0OgIlje674=)
                          4: 34352e3137332e37362e302f32342d3234203d3e20323638383031.roa (hash: 37Ij7f4rUPgn8qfCWyeQwIW5X+krxzC5G1ArAmabASM=)
                          5: 323830343a356164633a3a2f33322d3332203d3e20323638383031.roa (hash: QKAZwZQYoiu3sGggm74efmmbtCFTazDYgbOgZ4E+qXg=)
                          6: 34352e3137332e37372e302f32342d3234203d3e20323638383031.roa (hash: UG9zmTr9Gxpy8OLZ+RVof5fquyxnH1/u/jHDkjvy5Rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:22:04:d1:20:14:3a:d9:c6:22:88:8d:59:0f:b9:7d:96:93:db:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314CC58029D80C55F7FCC7D6D34604096BE000E9
        Validity
            Not Before: Feb  9 08:40:11 2024 GMT
            Not After : Feb 10 11:52:11 2024 GMT
        Subject: CN=E7D178503EC17AD5D60E7DFE12F5B183EC8214A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:60:48:3b:4d:e7:60:10:9e:38:c1:2e:e5:
                    80:42:1b:b8:13:12:39:dd:16:5a:33:99:d3:a2:2a:
                    aa:65:c4:89:be:2a:da:a0:c3:14:08:2d:85:68:1d:
                    e4:e0:fd:90:e9:d2:7f:2f:d6:54:8c:51:af:06:29:
                    ec:ee:90:2f:f9:45:d7:63:ef:a3:3d:8f:c5:09:b8:
                    09:61:6e:fe:4b:03:f7:86:c8:47:f7:d3:66:c6:74:
                    1c:5b:aa:c5:1c:e6:df:c7:da:d1:45:f6:af:0d:c1:
                    1b:a9:ca:60:a2:11:77:b9:b1:b1:da:03:66:aa:6f:
                    fa:39:70:87:4e:72:eb:d4:ac:6a:72:ce:35:11:38:
                    04:83:db:01:10:7b:d0:cd:e4:87:67:d4:2a:60:3e:
                    3b:a1:93:bb:a2:c7:1c:14:5c:3a:bc:79:66:40:de:
                    ed:92:44:55:0a:72:12:22:3f:af:b8:54:3d:1f:3c:
                    c4:d6:5c:92:a0:b8:a4:17:8b:fe:34:ee:77:e0:db:
                    35:bc:2a:4f:15:7b:79:4a:e7:62:20:ba:2a:73:e1:
                    78:49:f3:bc:65:78:cc:9b:1b:70:ed:b8:8c:18:1d:
                    92:96:e3:2f:13:5a:93:bc:c6:32:13:c5:b7:85:78:
                    02:ff:cd:0c:ab:55:10:1d:05:f0:99:1f:21:f3:21:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D1:78:50:3E:C1:7A:D5:D6:0E:7D:FE:12:F5:B1:83:EC:82:14:A2
            X509v3 Authority Key Identifier:
                keyid:31:4C:C5:80:29:D8:0C:55:F7:FC:C7:D6:D3:46:04:09:6B:E0:00:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d2:53:4c:71:d3:08:89:1f:8d:52:88:6f:71:48:b1:51:fc:
         5e:c2:55:6a:30:22:f0:56:ab:9e:45:43:b1:d1:21:33:0f:c9:
         14:28:df:12:e3:d5:dc:19:8a:6c:3f:f9:7f:f0:31:6e:90:64:
         d2:b2:e0:18:9a:f5:03:fc:40:d7:f2:8c:dd:68:cf:8c:f1:35:
         c9:6b:10:ca:33:fe:6d:97:c8:0d:29:65:b0:e8:49:69:97:71:
         dd:eb:4f:cf:1c:09:e5:fc:62:4d:dc:2f:c1:f9:12:23:0a:1a:
         11:cf:36:54:bd:57:58:72:7d:38:86:7d:8f:10:11:81:5e:3f:
         06:0d:8c:32:d4:f6:90:fd:60:0a:18:2f:fc:f9:0e:e8:c9:b2:
         ae:ed:37:23:8b:18:2a:d6:4d:bc:db:aa:ab:57:3c:07:d9:4d:
         4a:aa:34:70:46:86:70:35:71:3b:69:76:db:0c:7b:63:8a:79:
         b8:8f:8d:b5:1f:f7:d6:06:a0:6a:1f:17:db:7d:e3:f1:6c:e9:
         d3:9c:72:65:fb:2b:57:fd:7b:a1:c7:6d:cc:e2:ea:ab:b7:47:
         bb:69:70:7e:70:fa:6d:6f:02:a7:9a:2b:fc:55:16:5f:d1:9e:
         24:fd:15:34:7b:02:52:0f:22:fb:50:60:c8:66:84:a1:e4:b5:
         b8:13:50:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org