Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/96105F190DDE9234922D5C3A990E469D1CB41394.mft
File:                     96105F190DDE9234922D5C3A990E469D1CB41394.mft (raw, json)
Hash identifier:          hQ7QbskofFvNgSj93Z8YnmMg6+mj1PxfBrxF3vIwYBs=
Subject key identifier:   65:41:8B:1A:6F:51:08:27:10:FF:23:63:7C:04:B2:DC:8C:0B:F1:5A
Authority key identifier: 96:10:5F:19:0D:DE:92:34:92:2D:5C:3A:99:0E:46:9D:1C:B4:13:94
Certificate issuer:       /CN=96105F190DDE9234922D5C3A990E469D1CB41394
Certificate serial:       678B6AC4E13F3F85CEAED8D6131AF6F459304B54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96105F190DDE9234922D5C3A990E469D1CB41394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/96105F190DDE9234922D5C3A990E469D1CB41394.mft
Manifest number:          010B
Signing time:             Thu 31 Oct 2024 21:41:12 +0000
Manifest this update:     Thu 31 Oct 2024 21:36:12 +0000
Manifest next update:     Sat 02 Nov 2024 00:12:12 +0000
Files and hashes:         1: 323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (hash: f79NV5LrwhrQJ6H2/+WK0lab9N8gC40e3Bmet7vnZTQ=)
                          2: 96105F190DDE9234922D5C3A990E469D1CB41394.crl (hash: efqGcAOgRyiwAFzyHgKzwsX84HefL1Bi9DzhcJ7ZE7s=)
                          3: 3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa (hash: a6cx+DXhm5K3g+pua0PXyqb0JgNvgamjUI1N77nD9Lo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8b:6a:c4:e1:3f:3f:85:ce:ae:d8:d6:13:1a:f6:f4:59:30:4b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96105F190DDE9234922D5C3A990E469D1CB41394
        Validity
            Not Before: Oct 31 21:36:12 2024 GMT
            Not After : Nov  2 00:12:12 2024 GMT
        Subject: CN=65418B1A6F51082710FF23637C04B2DC8C0BF15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:e8:26:4a:b6:2e:8a:76:c7:c0:fd:bc:e2:
                    2a:58:f7:b2:d0:e2:9f:a1:b8:0e:a0:fc:f2:0b:69:
                    f6:a1:df:69:84:11:4e:d4:ea:51:7f:11:1d:97:47:
                    4c:6a:ff:1f:c5:4f:a6:18:11:f2:8b:1e:94:6b:ce:
                    9d:30:96:98:aa:a7:a1:10:ee:f8:05:6a:20:dc:51:
                    3f:e2:95:c9:84:40:ff:75:01:19:51:73:c4:45:b9:
                    b6:2b:5d:6a:b0:2b:5b:df:09:c7:bf:67:10:58:34:
                    88:ff:19:28:95:e2:33:d2:6b:87:38:ee:d1:87:38:
                    e8:46:96:81:d5:7c:f9:95:00:0e:47:4e:be:c2:4a:
                    a0:e4:fd:2a:9c:08:ca:e7:cb:f5:83:bc:53:e4:f8:
                    4d:48:85:7a:a4:4a:a2:90:e2:cf:6a:fd:8f:f5:41:
                    94:bc:f6:69:04:7c:58:9b:d1:e7:d3:3e:23:a2:2a:
                    25:2b:c3:7c:4c:0c:68:4e:b5:55:5d:6d:6d:d1:d6:
                    76:ba:18:45:70:17:37:69:6a:8b:45:16:07:99:c8:
                    5f:d7:e0:1a:0b:4e:57:43:0e:58:47:16:25:73:57:
                    59:d2:09:76:8f:5d:12:43:3b:00:ae:47:23:59:60:
                    58:de:93:b7:a5:b8:d5:e3:3d:f3:03:8f:3b:d6:67:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:41:8B:1A:6F:51:08:27:10:FF:23:63:7C:04:B2:DC:8C:0B:F1:5A
            X509v3 Authority Key Identifier:
                keyid:96:10:5F:19:0D:DE:92:34:92:2D:5C:3A:99:0E:46:9D:1C:B4:13:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/96105F190DDE9234922D5C3A990E469D1CB41394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96105F190DDE9234922D5C3A990E469D1CB41394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/1/96105F190DDE9234922D5C3A990E469D1CB41394.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0e:cc:8f:77:e1:85:84:e0:c8:e1:48:03:5e:a2:12:41:7b:
         3e:df:b0:be:c0:28:ad:7e:59:df:e5:ef:fa:2c:46:a9:b6:3c:
         3f:d5:f8:b6:b1:20:ef:61:3b:d0:92:84:bf:46:95:52:92:f2:
         c2:59:14:a0:6b:a8:13:ec:73:f5:4a:df:dc:01:03:f6:56:59:
         7c:7d:72:8a:a1:4d:ef:f4:6a:53:c3:13:f2:65:ee:23:c6:db:
         42:23:06:a5:80:b6:e3:9b:b9:96:4b:de:4c:24:b1:7c:78:be:
         fb:ec:b3:23:61:6a:29:52:53:73:84:69:01:99:14:b1:46:04:
         3b:d2:6a:70:4e:24:c0:6f:55:88:f4:d0:9a:24:74:67:7c:74:
         7c:8b:ae:df:49:e1:02:8c:e2:df:f5:6d:8c:b9:e6:32:ee:38:
         4d:f1:5c:3b:7a:63:78:00:5e:f9:4d:b7:f2:2c:2b:91:08:10:
         f7:d5:f5:5a:3c:ce:06:ee:90:ff:77:e4:54:37:96:3e:65:e1:
         40:8e:15:01:8d:73:fe:a6:d8:02:c9:66:18:0d:c8:1d:7c:19:
         92:4b:91:11:35:ea:33:35:0c:37:3e:5b:ae:98:36:a5:82:25:
         84:82:ab:ea:13:ac:ab:ab:6d:5c:c4:79:5b:5a:bd:e9:bb:f1:
         f9:00:74:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 20:24:31 2024 by rpki-client on console-fra.rpki-client.org