Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/41D0D64FFDDC0733573B1140AC857D7A19957697.mft
File:                     41D0D64FFDDC0733573B1140AC857D7A19957697.mft (raw, json)
Hash identifier:          bJUuKmuabsoLPN0ODVkwCAU6knAjQSwow8NENkCm4QE=
Subject key identifier:   72:1E:94:59:82:4E:7F:8B:FA:CB:A5:B9:20:71:6C:CC:76:A9:65:AC
Authority key identifier: 41:D0:D6:4F:FD:DC:07:33:57:3B:11:40:AC:85:7D:7A:19:95:76:97
Certificate issuer:       /CN=41D0D64FFDDC0733573B1140AC857D7A19957697
Certificate serial:       747A66A8709266FB580BEF915909E32BBF1096DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D0D64FFDDC0733573B1140AC857D7A19957697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/41D0D64FFDDC0733573B1140AC857D7A19957697.mft
Manifest number:          08
Signing time:             Tue 22 Feb 2022 02:32:53 +0000
Manifest this update:     Tue 22 Feb 2022 02:27:53 +0000
Manifest next update:     Wed 23 Feb 2022 02:39:53 +0000
Files and hashes:         1: 3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa (hash: ql1MdRl09KxhsO8LWpqsCpFEIoaQNNALbGXJOXJYbH0=)
                          2: 323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa (hash: Kf+QnohQTVqEjZR2vSQRC3q1twuD4qFOjzBBxiJ5MrQ=)
                          3: 3137372e31312e3235322e302f32342d3234203d3e203532373536.roa (hash: y/DUXIHg2FaZn+l8yF/pifpBuBQSfsIFpYcKfMEbzIA=)
                          4: 41D0D64FFDDC0733573B1140AC857D7A19957697.crl (hash: W0cCOzAk0+Hk5hyhLB2tVsHj7/KfF4VxTzfEIWMMI0k=)
                          5: 3137302e3234352e3133342e302f32332d3234203d3e203532373536.roa (hash: S0bVpMTA5fdETIOGiBZrY0m+HJ3ofYNXgVd1vih9iTc=)
                          6: 3137302e3234352e3133352e302f32342d3234203d3e203532373536.roa (hash: czp92In/opwRI6NlEEusFrCW/shSFv/aw59oFGQo9oM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7a:66:a8:70:92:66:fb:58:0b:ef:91:59:09:e3:2b:bf:10:96:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D0D64FFDDC0733573B1140AC857D7A19957697
        Validity
            Not Before: Feb 22 02:27:53 2022 GMT
            Not After : Feb 23 02:39:53 2022 GMT
        Subject: CN=721E9459824E7F8BFACBA5B920716CCC76A965AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:bf:44:06:64:65:50:b9:70:a2:69:f7:dc:
                    ae:70:bb:e8:44:a7:52:2e:6b:34:fb:c8:b3:11:1c:
                    4a:af:62:c9:08:e0:85:80:c2:f5:8d:a8:41:da:1f:
                    ed:99:61:31:69:06:94:0d:8a:60:d4:1b:3e:82:f0:
                    d0:22:17:62:03:34:60:df:16:64:b4:29:3f:0c:0f:
                    5b:3e:da:ae:3f:d1:cf:e6:d7:21:20:19:74:52:d2:
                    d0:31:39:1f:b9:55:ad:f0:52:61:b8:bf:b1:23:5c:
                    14:8e:f8:75:5f:46:8e:b4:92:2d:7c:f8:6d:31:32:
                    fa:3d:89:8b:4f:80:78:f4:1c:9f:99:f7:a7:6b:dc:
                    6b:bd:20:66:fb:63:da:ca:d9:4a:49:a7:82:f1:46:
                    b0:c2:40:b6:bb:bd:65:96:b8:ab:74:35:5d:6f:ce:
                    cd:5a:8f:bb:d9:74:32:e3:b7:80:13:ce:4d:1d:32:
                    7d:95:7b:4d:01:b7:8a:60:f3:a3:70:b3:6a:e4:2b:
                    1b:cc:21:42:a3:ab:a3:89:d9:9d:11:98:74:95:ec:
                    f3:df:52:e8:a8:2e:7c:0c:61:f2:07:e0:8f:76:dc:
                    3c:63:77:3f:db:b3:db:71:67:17:ef:57:b8:e7:96:
                    b9:bb:46:92:4c:fb:29:2f:fe:7b:2b:02:3e:5c:9a:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1E:94:59:82:4E:7F:8B:FA:CB:A5:B9:20:71:6C:CC:76:A9:65:AC
            X509v3 Authority Key Identifier:
                keyid:41:D0:D6:4F:FD:DC:07:33:57:3B:11:40:AC:85:7D:7A:19:95:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/41D0D64FFDDC0733573B1140AC857D7A19957697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D0D64FFDDC0733573B1140AC857D7A19957697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/41D0D64FFDDC0733573B1140AC857D7A19957697.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:96:74:38:00:e1:8f:6d:e4:0f:1a:45:0a:0a:48:62:3b:
         b3:89:e9:28:b7:59:e5:fd:14:f4:b7:ad:bc:c1:3b:dd:10:13:
         b1:45:2e:92:50:67:d8:b8:fd:dc:a7:ca:1f:14:2c:50:e1:ec:
         c3:c6:14:67:d2:41:4e:9d:d3:0a:75:f1:c2:bd:c7:07:11:87:
         8f:58:e2:af:40:d9:c2:78:38:a8:ac:ae:a1:c6:e1:0f:16:a3:
         31:ce:d5:71:32:3f:c2:ff:6d:af:cd:1a:8c:df:88:2e:56:56:
         fe:53:2f:b1:8e:7e:ff:e2:06:4a:e0:dc:36:f2:6d:2e:43:ee:
         0a:8f:77:4f:e7:f1:2b:32:da:9f:dc:6c:a1:5a:bf:d9:a8:c3:
         32:f4:67:0c:b1:22:94:71:a8:7c:69:63:1c:3d:7d:68:9f:25:
         04:6a:25:00:41:b2:10:a3:2e:f2:1c:bd:e1:f5:94:b4:3f:4b:
         61:34:ac:d7:31:21:cf:30:48:9d:25:34:66:fd:f5:a3:f2:6c:
         0d:95:c3:c7:69:16:09:42:51:a9:45:30:e7:72:c7:be:de:8e:
         86:92:6f:26:19:79:dc:65:32:c9:83:ce:f3:c3:99:ce:0a:7e:
         f4:22:0c:a3:c7:b0:2b:ed:98:4e:65:22:cb:86:40:47:57:eb:
         c6:18:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org