Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.mft
File:                     4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.mft (raw, json)
Hash identifier:          NsDy1/v4QpZH/sfedDZa0Xswv9wiFlJCVLaiLRIwSRA=
Subject key identifier:   85:8D:BC:22:10:9A:31:EE:B0:55:7E:9D:9B:20:BD:DD:C1:0B:78:9D
Authority key identifier: 4D:C5:06:9A:42:7A:CA:65:A4:BB:B5:F9:F9:0E:FB:8D:9C:34:72:0E
Certificate issuer:       /CN=4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E
Certificate serial:       3489FA798599AA4DEA2D02FFD8012DD1E4AAC27A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.mft
Manifest number:          0D
Signing time:             Sat 24 Feb 2024 12:57:36 +0000
Manifest this update:     Sat 24 Feb 2024 12:52:35 +0000
Manifest next update:     Sun 25 Feb 2024 15:48:35 +0000
Files and hashes:         1: 34352e3138352e33362e302f32322d3232203d3e20323639343431.roa (hash: h3KLyVpYgdAQ5A5/SBBLTDfpF+rMeNQzK4/2VMkM+wo=)
                          2: 4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.crl (hash: aiKe/M5PKFmT3V5lVzNVaaAzTtVjN5gW1hVnmaFm2Ac=)
                          3: 323830343a363461633a3a2f33322d3332203d3e20323639343431.roa (hash: v9F7eGVuCMPfTCv4ZO8SuOE6h/wfTZxo1PXeU8X5ZLo=)
                          4: 34352e3138352e33382e302f32342d3234203d3e20323639343431.roa (hash: 5JXjHeMZNULxC4oaKSZzDlzVZnpENUbL+jxV6GyW+yI=)
                          5: 34352e3138352e33392e302f32342d3234203d3e20323639343431.roa (hash: /q+Iu/NLWgNu6GDh8oeCgFPAyNLCjBaXCztzOye/yuY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:89:fa:79:85:99:aa:4d:ea:2d:02:ff:d8:01:2d:d1:e4:aa:c2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E
        Validity
            Not Before: Feb 24 12:52:35 2024 GMT
            Not After : Feb 25 15:48:35 2024 GMT
        Subject: CN=858DBC22109A31EEB0557E9D9B20BDDDC10B789D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:61:a8:41:d1:4d:71:ab:f6:5d:75:63:d5:
                    61:f1:bb:60:fc:97:0d:cc:3d:08:7f:3c:60:f7:2d:
                    b5:05:f3:45:4e:b6:b9:a1:e2:56:61:55:80:b4:f5:
                    ab:90:0d:f3:05:cf:89:7a:fc:16:51:19:ab:ff:e0:
                    a4:81:5f:be:ac:33:05:a0:d9:cc:34:bd:bb:a8:50:
                    db:aa:d8:27:5c:bc:40:5d:c6:74:6e:89:95:df:02:
                    6c:d3:b8:31:58:19:47:6f:d8:c6:74:d0:16:1d:f9:
                    bc:e6:2b:97:fa:c8:5d:e0:e6:62:97:e8:7e:b9:42:
                    23:42:3e:7f:1f:88:fe:1a:67:e1:1b:25:0f:64:8a:
                    62:37:4c:09:d5:8a:ed:7f:74:cd:8d:bd:36:c5:f5:
                    0f:54:33:64:ee:20:33:1b:84:8a:bb:cf:e1:28:26:
                    57:6f:90:92:d8:eb:89:de:87:43:e5:f5:9a:6e:a7:
                    54:85:46:a0:2b:f9:f6:7a:52:c8:77:fa:3a:1f:07:
                    15:58:b5:86:1f:00:b9:e5:fe:86:89:43:66:55:4a:
                    bf:5c:ea:d8:fb:8f:2d:8a:01:f2:64:7e:bb:bb:2b:
                    69:e7:d7:51:aa:c3:91:93:e8:dd:e2:28:d2:86:e2:
                    81:d7:a5:0d:78:91:7f:da:ae:0c:96:1e:81:26:c9:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8D:BC:22:10:9A:31:EE:B0:55:7E:9D:9B:20:BD:DD:C1:0B:78:9D
            X509v3 Authority Key Identifier:
                keyid:4D:C5:06:9A:42:7A:CA:65:A4:BB:B5:F9:F9:0E:FB:8D:9C:34:72:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/4DC5069A427ACA65A4BBB5F9F90EFB8D9C34720E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:64:e0:9f:0e:dc:2d:a2:75:9d:7c:8d:02:97:cb:ed:6e:40:
         53:da:f7:9b:8b:5c:d1:17:d4:bf:a6:35:bf:b9:0d:fc:04:25:
         a3:02:28:97:3b:95:6b:7f:34:7c:dc:78:d0:6c:60:d3:a1:47:
         73:ac:94:7d:cb:e2:02:d1:39:20:6b:fe:99:76:0b:41:73:83:
         f5:24:8a:d8:9b:a4:46:26:fc:1c:c0:eb:bf:e7:a6:de:53:aa:
         b0:62:14:41:5a:23:af:2f:61:fc:a9:b4:87:79:b4:05:91:cf:
         44:6b:03:1f:8e:eb:3f:b4:13:bb:e4:a9:24:7c:2f:ed:b6:8b:
         49:32:52:b5:09:06:dc:58:b6:0c:ea:74:12:d7:db:f9:be:de:
         ae:47:a4:d2:f7:79:95:41:52:3a:3e:a8:a5:e8:cf:46:71:46:
         7e:20:13:14:38:d5:00:20:f9:4a:fd:9d:68:19:0e:53:d5:30:
         f1:df:cd:d8:f2:44:27:56:7b:9e:f2:ad:50:54:89:27:8b:ef:
         ca:14:4a:d4:23:72:28:a9:1e:36:43:a7:e2:5c:79:2a:54:f2:
         54:55:27:9d:ff:c1:6c:86:a2:37:80:fe:f8:22:11:64:88:9b:
         62:48:f3:43:1f:04:65:d4:73:7d:8e:8e:fe:e6:0d:de:af:0e:
         90:f1:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org