Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.mft
File:                     8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.mft (raw, json)
Hash identifier:          gIRhGL7rPtxXDBAsBlPNWPxxX13m/uxwaKllYYCcHAY=
Subject key identifier:   DA:FF:74:63:D6:22:2E:DA:37:66:81:89:F2:05:BB:41:D0:C0:1B:24
Authority key identifier: 8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11
Certificate issuer:       /CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
Certificate serial:       7959773576FE50648FF7EDEE537ED04698CB4A6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.mft
Manifest number:          3F
Signing time:             Mon 15 Apr 2024 06:09:01 +0000
Manifest this update:     Mon 15 Apr 2024 06:04:01 +0000
Manifest next update:     Tue 16 Apr 2024 09:15:01 +0000
Files and hashes:         1: 3230312e3133312e3137362e302f32332d3233203d3e203631383230.roa (hash: ycvVONUNpSrpb0dWb/f4ZxL13918hQIpAqye/eVZlEw=)
                          2: 8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.crl (hash: a5jy8lbC/xD0OuNDYaGQT+d01G3OtLMB6xC9tMYnfRs=)
                          3: 323830343a313964303a3a2f33332d3333203d3e203631383230.roa (hash: z9UAPRR2kI2PSt3q3ze1klBgcb2DuHy0sAcLXkeBFPo=)
                          4: 3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa (hash: e0ywz34r/3K582QU15j5mzIyf4LVAAlgCTsS9PcvO6o=)
                          5: 323830343a313964303a383030303a3a2f33332d3333203d3e203631383230.roa (hash: WwiyL3JhfZl6jTNsELngHwI7Ol/1bjHKbTN8T/4AUhU=)
                          6: 3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa (hash: Bn4n/6ZmMhHWDC7Y1+NfjV97yNF7TBHuZsT4kKAtbu0=)
                          7: 323830343a313964303a3a2f33322d3332203d3e203631383230.roa (hash: cyCxcFkbPfQ0cMXeReL4zheYBK5Kavxhxc/PA818XOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:59:77:35:76:fe:50:64:8f:f7:ed:ee:53:7e:d0:46:98:cb:4a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
        Validity
            Not Before: Apr 15 06:04:01 2024 GMT
            Not After : Apr 16 09:15:01 2024 GMT
        Subject: CN=DAFF7463D6222EDA37668189F205BB41D0C01B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:d5:04:c0:c7:97:0e:a0:e0:9d:89:4c:8c:
                    1a:0c:a0:36:e8:fd:bc:02:cc:49:f8:31:fa:b4:4f:
                    cc:85:26:d4:b4:a2:96:29:49:c9:de:66:e9:a3:3f:
                    45:a7:be:a6:b6:19:06:0e:5b:46:dd:1b:54:73:5b:
                    a1:f8:30:96:65:fa:f5:0e:7b:89:dc:cd:9e:0f:fa:
                    f0:0b:bc:84:ca:53:0d:4a:33:96:95:4a:b7:40:38:
                    59:2d:fd:f1:3f:74:49:35:c7:83:d2:de:55:a0:38:
                    7b:25:bc:b2:09:c9:26:a2:4d:59:e6:a9:fc:03:c7:
                    3f:1e:6f:8b:74:0f:7e:79:2e:71:0d:41:c1:81:3a:
                    23:5a:5f:8e:00:10:18:db:e2:7f:40:5d:02:a3:aa:
                    ec:d0:96:ab:de:33:ac:57:df:d8:0b:c1:11:2a:c6:
                    5d:6b:d2:e9:05:ed:2d:ed:aa:8c:02:d9:3d:79:c6:
                    9c:b9:12:47:0b:38:f6:cd:a0:02:26:dd:ea:0e:dd:
                    7d:78:07:95:75:81:e8:4c:86:79:6e:64:32:56:cb:
                    85:1f:0b:6d:32:95:04:b7:92:d5:b1:d2:6c:77:6b:
                    f2:5f:e7:c3:e2:e5:ae:a1:f4:e3:6e:7d:ec:47:f4:
                    14:69:37:a1:e4:68:1d:15:cc:5c:f2:67:41:81:35:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FF:74:63:D6:22:2E:DA:37:66:81:89:F2:05:BB:41:D0:C0:1B:24
            X509v3 Authority Key Identifier:
                keyid:8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:b1:01:94:10:d7:d7:97:a0:cb:de:33:ed:79:86:57:ed:
         b5:a5:c2:bf:81:e0:2f:cc:78:b1:7f:16:30:f3:46:08:86:20:
         4b:13:cb:5f:0d:57:e7:97:0e:f4:d1:e9:a0:2b:12:14:65:43:
         5e:7e:d7:84:4a:23:eb:1e:99:6c:7a:06:4a:e1:72:0c:f8:0f:
         52:3c:6c:5e:53:fd:ad:42:81:be:ad:0f:20:12:34:f9:32:35:
         69:80:ea:17:f2:84:f1:de:51:5e:79:c9:5c:f8:1e:0b:69:fa:
         fa:a5:4d:91:96:b9:0a:7c:80:10:69:3c:0d:dc:42:34:f3:ee:
         7c:ca:1a:23:a4:5a:1b:d8:99:0d:d6:5d:4f:71:02:46:74:33:
         cb:de:c6:6a:f0:ae:28:d5:8c:f9:eb:86:64:c4:b4:64:0e:21:
         d0:2b:d2:d1:1e:2f:d6:01:6a:a1:8e:45:50:08:50:77:74:b8:
         ca:b6:78:02:d4:11:5a:e6:da:03:c4:2e:9b:4a:8d:92:08:a6:
         16:ba:b7:09:a2:c5:4d:21:fb:48:35:37:aa:c4:1f:ca:05:33:
         0e:68:3c:15:9e:fa:71:0a:d9:fb:48:0f:12:5d:08:b8:da:81:
         b1:f5:4f:9a:a6:08:6b:97:72:7c:61:83:f8:74:8a:2b:44:66:
         aa:90:6f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org