Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/1/D663E901D9F4314652B68FBE4CA06A328BD9BEEC.mft
File:                     D663E901D9F4314652B68FBE4CA06A328BD9BEEC.mft (raw, json)
Hash identifier:          HiYBrnCiaALlkFuXMeCyZyrc/rzX59yJVIyM35h4cOY=
Subject key identifier:   16:0F:3E:26:FB:D1:2C:71:78:58:A5:FE:A4:27:9C:D8:FD:8B:0B:97
Authority key identifier: D6:63:E9:01:D9:F4:31:46:52:B6:8F:BE:4C:A0:6A:32:8B:D9:BE:EC
Certificate issuer:       /CN=D663E901D9F4314652B68FBE4CA06A328BD9BEEC
Certificate serial:       6E2426D74C60BEE5EFE61539AFC87680A53C0A3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D663E901D9F4314652B68FBE4CA06A328BD9BEEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/1/D663E901D9F4314652B68FBE4CA06A328BD9BEEC.mft
Manifest number:          33
Signing time:             Thu 09 May 2024 15:06:01 +0000
Manifest this update:     Thu 09 May 2024 15:01:01 +0000
Manifest next update:     Fri 10 May 2024 15:06:01 +0000
Files and hashes:         1: D663E901D9F4314652B68FBE4CA06A328BD9BEEC.crl (hash: Tr7jnWCokBQ6cskjxpP/UNUIpg53im4pomTtohbsuQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:24:26:d7:4c:60:be:e5:ef:e6:15:39:af:c8:76:80:a5:3c:0a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D663E901D9F4314652B68FBE4CA06A328BD9BEEC
        Validity
            Not Before: May  9 15:01:01 2024 GMT
            Not After : May 16 15:06:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:f6:c3:83:5f:0b:ab:1a:8f:3e:5b:4f:50:
                    de:01:fb:d0:8c:ea:cb:1a:b1:f7:aa:d8:40:bd:0e:
                    59:b9:cb:5b:a0:1f:2b:ba:17:60:41:32:f6:b1:b6:
                    67:15:01:02:9d:e1:81:80:35:ba:49:8f:62:16:d8:
                    ef:f5:37:16:06:8d:e5:c1:50:09:bb:7a:a1:95:61:
                    ee:e6:a1:4b:d5:dc:d8:c8:25:16:08:70:85:22:4c:
                    8a:13:85:05:8c:80:32:85:aa:33:68:cf:ea:20:d3:
                    76:52:c1:4f:f2:4d:e5:77:f4:78:99:63:9a:7c:4e:
                    4e:25:16:38:b8:29:ff:1e:25:b9:97:b8:26:5c:44:
                    13:87:9a:d9:c3:27:95:62:95:bc:91:17:81:33:a4:
                    a1:91:6b:39:00:7d:84:d9:be:79:3a:c1:9f:13:bf:
                    65:23:f7:dc:a5:26:8a:09:0a:3b:06:ec:5b:58:aa:
                    30:f8:0e:e6:54:52:2f:66:16:65:b7:ae:16:8c:33:
                    1a:49:2e:8d:8b:38:2d:00:fe:16:4d:60:ce:97:ae:
                    6f:c4:11:82:c8:93:f4:3c:00:48:ff:1c:be:b2:64:
                    b6:5c:5c:7c:b1:42:e4:6a:c5:0a:dd:8d:fb:9c:49:
                    ec:26:2f:e1:25:bd:54:4c:b0:03:63:72:d9:8f:da:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0F:3E:26:FB:D1:2C:71:78:58:A5:FE:A4:27:9C:D8:FD:8B:0B:97
            X509v3 Authority Key Identifier:
                keyid:D6:63:E9:01:D9:F4:31:46:52:B6:8F:BE:4C:A0:6A:32:8B:D9:BE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/1/D663E901D9F4314652B68FBE4CA06A328BD9BEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D663E901D9F4314652B68FBE4CA06A328BD9BEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/1/D663E901D9F4314652B68FBE4CA06A328BD9BEEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:66:af:8b:61:05:42:9b:98:91:c4:65:2b:e8:85:0c:8b:0f:
         f1:41:b5:21:ec:1e:93:bd:47:48:6c:68:d6:79:ac:92:52:a2:
         74:4a:82:72:b7:60:37:21:2e:c8:ad:31:75:87:ed:eb:be:64:
         b9:c1:a0:24:97:af:cf:4c:07:37:cc:42:8a:d1:8b:c5:14:7a:
         b4:9c:78:74:26:35:eb:2e:df:62:48:7b:87:93:ad:82:e1:ee:
         28:e1:6d:2b:eb:3b:2e:e5:91:57:0e:b1:13:23:8b:42:08:b4:
         2e:0f:a9:05:3d:c8:4b:9d:43:c2:82:c7:07:91:45:93:b5:1b:
         b7:21:d7:a5:6c:4e:f6:04:a1:98:8f:b0:bd:b1:98:4e:b5:b8:
         d2:c1:52:ff:30:db:c5:3b:fe:38:e2:95:35:48:55:01:9e:fd:
         68:ec:46:f6:9b:13:10:9b:1b:b7:79:7c:85:ea:eb:43:a9:25:
         e4:85:52:2e:c5:de:e4:e2:80:65:eb:ee:4e:3c:3e:db:7a:7e:
         f8:5b:d1:3e:6c:cd:79:8e:74:e2:62:b0:ac:c5:5e:e0:83:a3:
         ef:58:2d:57:bb:87:40:dd:10:5d:b6:9f:7f:2f:c4:0c:76:c6:
         f8:8b:5f:6e:c0:26:2b:c6:3b:f2:e8:4a:64:1a:17:5b:7b:07:
         58:d0:7b:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org