Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.mft
File:                     8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.mft (raw, json)
Hash identifier:          rLkKJTrm1fjBu9fygTTH/MWRakX+eJikdPzxDASU8wI=
Subject key identifier:   52:BC:DC:B2:00:A4:FB:49:FF:19:ED:FB:56:7B:C6:20:BB:94:D2:A2
Authority key identifier: 83:34:E7:8E:CC:B2:CE:B0:77:4D:54:C5:E6:1F:D4:F8:CC:1A:93:88
Certificate issuer:       /CN=8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388
Certificate serial:       2E5D8E0AE212427A2B70179A077F73A733C3DBD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.mft
Manifest number:          3B
Signing time:             Sat 06 May 2023 17:05:35 +0000
Manifest this update:     Sat 06 May 2023 17:00:35 +0000
Manifest next update:     Sun 07 May 2023 19:41:35 +0000
Files and hashes:         1: 323830343a376133633a663030303a3a2f33362d3336203d3e20323731333537.roa (hash: zfr/jKFmmN1VvM4ki1qRo9cDm3h29CaDrSJ72CDyCPg=)
                          2: 3137372e3132342e3130392e302f32342d3234203d3e20323731333537.roa (hash: fGLlWGVLNZc3moGUpTji5jPbk5Zq1gY2JQFuQfDPtSI=)
                          3: 323830343a376133633a653030303a3a2f33362d3336203d3e20323731333537.roa (hash: zIWq0LXDgwVnM0IIIbjFyGiCSf9CvaKfmGfY72paN8I=)
                          4: 323830343a376133633a3a2f33362d3336203d3e20323731333537.roa (hash: Ba3ItbGnmKjO48PD1QHmF2WVHa8z7zLH0KLRKIuHzmw=)
                          5: 323830343a376133633a3a2f33322d3334203d3e20323731333537.roa (hash: RwxJPoj5fuyW0AdSeTe83VN/VEQS9z3zbyUOGtTNdPs=)
                          6: 3137372e3132342e3130382e302f32332d3233203d3e20323731333537.roa (hash: hSR2mPqBJolWzpbYbe0WReTJynLE+0i4FDMBqvziguQ=)
                          7: 8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.crl (hash: zRCJgh1EC8T2bbZ//x1JdC1qeyrACZK46N6dPkfsaXw=)
                          8: 3137372e3132342e3130382e302f32342d3234203d3e20323731333537.roa (hash: SL3sS2GwlSpfclZ/YR795gUGN18LNWF7lVHHpnW6VvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5d:8e:0a:e2:12:42:7a:2b:70:17:9a:07:7f:73:a7:33:c3:db:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388
        Validity
            Not Before: May  6 17:00:35 2023 GMT
            Not After : May  7 19:41:35 2023 GMT
        Subject: CN=52BCDCB200A4FB49FF19EDFB567BC620BB94D2A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:74:42:0f:d9:d7:6a:d2:57:c7:36:01:ed:
                    3d:e5:0f:3a:e7:62:72:80:b4:3f:4e:e2:ed:01:1f:
                    7f:2c:22:49:78:18:88:f8:30:90:df:dc:e7:d8:1f:
                    b4:ee:7d:e8:17:75:a0:05:8a:65:46:c0:3a:2f:b6:
                    8e:f9:00:37:1c:64:0b:a6:6f:c3:19:6e:c1:ac:81:
                    1b:d4:19:f4:ed:9b:98:ef:3f:66:7a:4f:35:45:3b:
                    e3:fc:cc:7c:45:7e:f3:b5:0b:3e:a9:89:d1:5c:13:
                    0b:b9:22:a4:5a:07:44:e0:15:75:5e:26:db:de:0c:
                    32:9c:79:9f:93:dd:4d:7e:0d:62:15:76:92:84:34:
                    60:8f:1d:43:2d:d3:e8:ad:8b:08:80:a5:b5:1b:d0:
                    35:58:fb:b5:20:68:4a:73:0c:d3:5d:3a:ad:98:3f:
                    5c:cd:11:20:05:9a:66:9f:b9:00:71:99:02:44:d4:
                    81:9e:26:e8:96:9a:2e:09:04:45:7d:f3:49:50:ea:
                    3f:1e:b5:e6:75:d9:b2:18:69:05:49:20:a7:4a:c5:
                    65:47:3f:3c:28:57:5c:61:18:f3:90:17:2d:56:72:
                    15:95:de:47:5c:18:e6:a6:9c:cb:8d:4d:06:b3:9b:
                    9c:db:d7:68:cb:25:e7:e9:8f:92:f7:17:ef:fd:4b:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:DC:B2:00:A4:FB:49:FF:19:ED:FB:56:7B:C6:20:BB:94:D2:A2
            X509v3 Authority Key Identifier:
                keyid:83:34:E7:8E:CC:B2:CE:B0:77:4D:54:C5:E6:1F:D4:F8:CC:1A:93:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/8334E78ECCB2CEB0774D54C5E61FD4F8CC1A9388.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:32:90:e0:ec:14:8d:4f:08:e5:c4:89:aa:d6:12:06:76:35:
         cd:95:93:3a:81:c0:c0:14:c9:6a:e1:e1:17:01:d1:3f:33:23:
         c9:6f:2e:a2:52:51:c4:d3:e4:0d:e2:7b:be:ec:a5:db:d1:17:
         ee:67:dd:9a:1e:49:a1:5c:53:67:27:c0:02:d1:bd:ae:d1:9d:
         ee:45:c0:f7:78:7e:72:ba:c3:44:e5:a3:40:e4:b9:81:d1:28:
         d1:c8:f5:1f:17:92:32:59:28:15:13:78:c6:ca:60:47:0a:92:
         0a:aa:c6:c5:b4:7c:a7:bd:e8:6c:74:d1:05:f9:40:5b:5d:76:
         3c:d3:0f:35:35:42:65:39:2a:d8:1e:97:06:88:f7:02:ec:8c:
         c4:06:af:fc:dd:a1:66:cc:50:38:0c:eb:57:e2:df:f4:88:7b:
         2a:58:07:64:ba:0c:d8:2a:37:15:22:7c:43:d6:99:16:b6:00:
         50:1f:67:a0:b4:f7:4c:bb:bb:4a:de:90:31:0d:44:d8:99:61:
         17:12:c7:28:97:2f:df:75:7d:e3:d9:ee:35:ef:cf:f9:3a:58:
         88:cb:14:69:57:2f:d5:c6:7b:92:29:91:1d:1b:3d:89:cf:bb:
         19:bf:b8:76:dd:29:fd:4e:a5:2b:fa:cd:8f:06:dd:15:12:a8:
         51:25:f8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org