Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.mft
File:                     A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.mft (raw, json)
Hash identifier:          qOCEz3VGNQ8svd4VBhVoTovdwLgrOoKUG46JemHmK0Q=
Subject key identifier:   99:7F:D4:1B:3C:DE:5B:2A:A3:A6:33:A4:BB:92:16:B6:F3:C3:25:96
Authority key identifier: A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC
Certificate issuer:       /CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
Certificate serial:       548F13A0E8B9997F3F279412E61231417791CBB7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.mft
Manifest number:          C8
Signing time:             Mon 15 Apr 2024 10:13:00 +0000
Manifest this update:     Mon 15 Apr 2024 10:08:00 +0000
Manifest next update:     Tue 16 Apr 2024 11:57:00 +0000
Files and hashes:         1: 3230312e34392e3133382e302f32342d3234203d3e20323730353730.roa (hash: 9meBsTj53BlIlGKwlHnIIFYy3eoErspQm7I3Z8wqL7M=)
                          2: 323830343a366530343a313030303a3a2f33362d3336203d3e20323730353730.roa (hash: t53dy9z3uC0nNI4SeSqjL6UkZ4ipLV06JwZbTq8xPC4=)
                          3: 323830343a366530343a3a2f33322d3332203d3e20323730353730.roa (hash: F2/LvCOW8Zd84u+v5I87nIvPGLnRZKN9g2A+YJzrfiM=)
                          4: 3230312e34392e3133372e302f32342d3234203d3e20323730353730.roa (hash: ZBHbv3DfbhCzyPOw46Q+XEVh0sm2qmORXjtSd0QptPM=)
                          5: 3230312e34392e3133362e302f32342d3234203d3e20323730353730.roa (hash: JnL4OGHV9r4dGYNsSMOjnoO9rvTdtNVXbC7Ll5uQPVg=)
                          6: 3230312e34392e3133392e302f32342d3234203d3e20323730353730.roa (hash: xkeir6+90FcBh/WYPK654+0X1bO8kdgdBgy4K6favaY=)
                          7: 3230312e34392e3133362e302f32332d3233203d3e20323730353730.roa (hash: QFzM8+D4Jsuf2R3j28krK480vTHCcv9p0TpLCXEvh9k=)
                          8: 323830343a366530343a3a2f33362d3336203d3e20323730353730.roa (hash: I30KET3jFKRRlO4Yicv+wd9zg+iEkYSki2Y0mrqrN7g=)
                          9: A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.crl (hash: +6EpL6GkVh1u15q7p/Jky8yLv91/gpceE/XFXP8fIfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8f:13:a0:e8:b9:99:7f:3f:27:94:12:e6:12:31:41:77:91:cb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
        Validity
            Not Before: Apr 15 10:08:00 2024 GMT
            Not After : Apr 16 11:57:00 2024 GMT
        Subject: CN=997FD41B3CDE5B2AA3A633A4BB9216B6F3C32596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:1e:af:9f:63:1d:ea:7c:2d:2f:f2:c1:77:
                    52:8d:80:1e:c4:b9:e8:db:06:fa:53:dc:6e:94:84:
                    5f:c4:5c:e3:13:a2:19:5c:6d:9e:44:6d:5c:eb:af:
                    7d:8a:33:b9:33:9d:1a:b4:f0:cf:df:3f:86:61:db:
                    18:77:86:28:6e:0a:cf:da:1b:04:50:35:ee:37:78:
                    82:8d:ce:dc:73:ae:28:b0:dc:7e:e4:22:75:a2:a5:
                    eb:4b:73:c9:82:eb:fc:87:b8:16:45:52:b2:00:91:
                    7f:47:83:3c:af:f8:16:c1:4b:20:ea:24:bc:d7:5c:
                    4f:5b:e8:70:35:21:1b:97:7f:d1:65:6b:ce:80:49:
                    b9:45:89:80:56:9e:fa:a4:52:36:76:0b:7c:ea:14:
                    88:3a:10:de:9f:2e:97:12:12:88:c6:28:6d:c3:1f:
                    c5:3d:11:6f:6e:94:e7:6b:8c:2e:41:05:6a:6d:f4:
                    17:45:c6:7a:04:63:de:40:d9:11:4f:07:8c:61:5d:
                    bd:68:a3:3e:1a:f9:9e:54:3f:ae:6c:3b:c5:49:9a:
                    ca:99:85:22:e0:f2:e2:be:41:53:95:80:43:f9:89:
                    ad:2f:8c:24:b9:63:ac:6c:24:ae:a0:1b:5b:78:52:
                    4b:72:bf:df:4d:38:79:01:58:33:fc:f6:92:66:10:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7F:D4:1B:3C:DE:5B:2A:A3:A6:33:A4:BB:92:16:B6:F3:C3:25:96
            X509v3 Authority Key Identifier:
                keyid:A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4b:fa:e5:9f:10:b9:ef:ea:97:e2:0f:09:ff:d9:1d:b2:d8:
         2c:e1:e5:de:54:b9:ee:85:11:c0:c8:5c:59:80:5f:7c:cd:c6:
         97:5c:8a:76:d2:9a:f7:5c:46:60:a5:40:3b:2e:4f:32:43:f6:
         4a:6a:bf:b8:12:61:45:fc:c7:4f:2e:80:60:6a:d5:cd:21:b9:
         26:17:37:18:cc:d1:33:c2:b7:32:02:9c:06:9b:f1:05:5f:fa:
         42:92:15:77:39:c0:a4:c7:1c:ba:5a:42:ac:6b:19:0a:f0:7e:
         11:56:1b:29:40:91:4a:85:f1:fe:3f:79:4c:3f:3b:79:ba:9c:
         94:fe:07:d7:43:77:f4:c8:86:8d:da:51:24:be:5e:1a:64:ac:
         61:48:34:8c:0e:25:48:71:f2:8f:91:43:86:e3:11:d3:dd:27:
         a0:cc:9f:b6:fc:f5:d8:80:e5:9c:61:29:64:68:c8:b9:a2:c2:
         18:08:80:2d:c2:34:fc:bd:14:59:2e:ab:ca:5b:9f:9a:8c:83:
         67:a1:3c:b5:b3:85:61:95:d0:50:97:30:00:a1:35:dd:57:6a:
         d3:43:6a:05:78:70:19:cc:89:40:41:2a:c9:f1:c5:cb:5b:6c:
         47:69:a1:52:54:50:0b:65:67:ec:3a:9b:d0:1d:2d:02:1d:e1:
         b1:fe:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org