Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.mft
File:                     3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.mft (raw, json)
Hash identifier:          kIw00mDNMbqFoedoy+dvCcEYtR1UVuJLOcLTA3TV/q8=
Subject key identifier:   BF:0A:DA:3D:B4:15:AB:BF:EE:FA:A7:D2:46:81:60:4D:0B:A6:8E:8F
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       0A3EA3E60763E2B28F0E07A45E89FE10F492E334
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.mft
Manifest number:          23
Signing time:             Mon 27 Mar 2023 15:35:02 +0000
Manifest this update:     Mon 27 Mar 2023 15:30:02 +0000
Manifest next update:     Tue 28 Mar 2023 18:31:02 +0000
Files and hashes:         1: 3139302e35322e37322e302f32322d3234203d3e20323731323935.roa (hash: hAvxZrfj1ySPXy2LwfpCfGWDosp1pLjXL6y+pA3qxTI=)
                          2: 3230312e37372e3136302e302f32302d3332203d3e203238363536.roa (hash: RuXNhSu3OEN23lIU4U28QBDpH9OtdZEA4+RdRdHKbO0=)
                          3: 323830343a333363633a3a2f33322d3430203d3e203238363536.roa (hash: ookEq7GpAB5aZ/4Q14MW5WUklpx8TTwuWMNS5bOjhw4=)
                          4: 3137392e302e37322e302f32322d3234203d3e20323731343433.roa (hash: Rd7t1gp6BqepL9cAVBzDu0i2/CmSuGoPoGDrZ1qze1E=)
                          5: 3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa (hash: ksvdYdpLtd9vuSN1D6zHg/y1C2LIm63ZjjKkhgLWGoc=)
                          6: 3137302e38302e36342e302f32322d3332203d3e20323632353134.roa (hash: XwuxlGo+IRpsQayPlNIwjq+GBt+6be9ASBKdnLx3BVo=)
                          7: 3137372e35352e3137362e302f32302d3332203d3e20323632353134.roa (hash: v9iAJk9gddX1KUxBeBltIOvx0jhfian+JeVJSG1UZpw=)
                          8: 323830343a373934343a3a2f33322d3438203d3e20323731323935.roa (hash: ItFnlOkOiTSkoBjO9Ff6V1w6NpRFPcT+fvLgzr6bwLo=)
                          9: 323830343a3536383a3a2f33322d313238203d3e20323632353134.roa (hash: PHdUh9NvwQWlbhXX7ZsZNK/WEFA+11MmoWIjDs3XSPs=)
                          10: 3136382e3139352e3130302e302f32322d3332203d3e20323634323238.roa (hash: 1sv7OIlF2OGuAGiAqt59yg38PZy7iHAAskkI/2xZrFg=)
                          11: 3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl (hash: zqXr6Ev0N4r1A/+o04C0DGXumPrjpbFKohfNrmuFzpY=)
                          12: 323830343a323438383a3a2f33322d3438203d3e20323634323238.roa (hash: C70BSHlR5e/SxIAuYhCHr3wi9CLWpDJtFu6kBpJDjwk=)
                          13: 3137372e35352e3232342e302f32302d3332203d3e203238363536.roa (hash: J8eSkivSM5PK94yuxDw4TWFsOh7yLXFl78T/3rEGpX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3e:a3:e6:07:63:e2:b2:8f:0e:07:a4:5e:89:fe:10:f4:92:e3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 27 15:30:02 2023 GMT
            Not After : Mar 28 18:31:02 2023 GMT
        Subject: CN=BF0ADA3DB415ABBFEEFAA7D24681604D0BA68E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:4f:67:4e:0f:6b:5e:88:7f:06:f4:d2:08:
                    7b:3a:7e:82:86:07:09:ba:98:ba:af:d9:0b:1a:2b:
                    ba:b7:39:f7:6a:24:06:ef:4f:c3:67:40:de:89:9a:
                    04:05:8a:a1:8f:08:1c:1e:b7:f8:c9:37:3b:1f:2b:
                    42:e7:5a:05:0a:19:62:6b:1c:de:f3:e1:b4:e3:e3:
                    80:85:d6:cb:81:68:8c:06:a1:88:a4:06:b3:eb:c9:
                    df:2e:67:83:e0:71:a9:95:58:42:85:ce:0a:88:aa:
                    ea:d5:9c:0e:aa:b9:0c:e6:1f:fb:6e:68:2f:f2:d4:
                    54:fc:10:47:69:e3:a8:8d:4b:4c:46:b5:1f:c4:fd:
                    43:a6:15:a1:6b:6a:5a:09:88:5d:12:4a:2d:14:df:
                    52:98:07:37:b0:aa:ae:3f:ac:83:f4:0a:89:be:1b:
                    39:f4:23:00:79:28:46:ae:64:97:a9:41:89:9c:b6:
                    f4:73:bc:2d:74:be:09:65:c4:00:1a:a9:39:30:9c:
                    93:0a:23:6c:c7:af:bd:a0:2c:a3:7d:8d:ce:06:43:
                    d5:1f:fa:20:6b:93:4c:b0:8d:f6:2b:48:c8:c3:a7:
                    80:72:b6:7c:f5:4a:72:f5:1a:55:38:31:fb:d5:6c:
                    6b:d8:78:ea:c1:1c:47:e3:d2:e2:72:e4:72:f6:c0:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0A:DA:3D:B4:15:AB:BF:EE:FA:A7:D2:46:81:60:4D:0B:A6:8E:8F
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b2:14:8f:17:91:11:03:f3:bc:55:f9:38:00:42:34:5e:bd:
         09:0d:8b:4f:fe:c3:3f:65:aa:b6:87:f9:18:ce:87:0e:e9:b9:
         3b:64:6a:d8:2c:9b:2c:62:28:fd:56:c1:d8:a8:b8:59:ca:51:
         8e:3f:52:da:cb:5c:9c:8d:39:fa:c3:54:55:fc:a4:4d:cc:ea:
         76:40:b1:e2:c6:78:66:5b:1a:21:7f:95:c4:16:89:af:8d:33:
         89:68:36:c0:cd:a4:e4:bf:5b:fe:1b:d4:f3:78:0f:ed:2a:99:
         be:88:bf:c1:89:38:47:0d:bc:db:90:45:51:60:ea:18:ff:dc:
         5a:19:1b:0e:17:14:52:03:d0:37:22:91:62:8a:49:35:17:78:
         1a:13:fc:37:f5:38:25:aa:99:4c:fb:ef:12:d2:06:dc:63:ae:
         a3:d4:de:27:ea:7a:1c:a5:08:3d:59:d4:e0:6a:8d:17:be:eb:
         d0:85:ac:53:db:8b:cf:6e:33:73:64:98:f6:20:ba:a1:33:8a:
         ff:26:c4:3b:6a:b9:98:21:80:54:ec:44:39:2a:52:21:41:7f:
         91:54:7f:17:ac:36:e1:1e:39:ab:b2:6f:15:cb:c2:ff:fa:0b:
         b9:c5:62:5b:8e:58:43:fd:e1:98:0b:58:8f:b4:dc:a7:2c:b5:
         f8:31:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org