Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/2563708FFC494233FAD9ABD11B7C61F83F089E7B.mft
File:                     2563708FFC494233FAD9ABD11B7C61F83F089E7B.mft (raw, json)
Hash identifier:          ADzIxeMcdOC1j3xit8g4Out5F5156MOJka/7VhaLmEA=
Subject key identifier:   7A:A7:89:C5:19:67:98:A4:D6:DE:A4:06:4E:C2:A0:78:61:4C:6E:3A
Authority key identifier: 25:63:70:8F:FC:49:42:33:FA:D9:AB:D1:1B:7C:61:F8:3F:08:9E:7B
Certificate issuer:       /CN=2563708FFC494233FAD9ABD11B7C61F83F089E7B
Certificate serial:       10C628DFB476727948F98590DAF445CD866D0C13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2563708FFC494233FAD9ABD11B7C61F83F089E7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/2563708FFC494233FAD9ABD11B7C61F83F089E7B.mft
Manifest number:          0509
Signing time:             Tue 19 Mar 2024 18:13:39 +0000
Manifest this update:     Tue 19 Mar 2024 18:08:39 +0000
Manifest next update:     Wed 20 Mar 2024 18:14:39 +0000
Files and hashes:         1: 3136382e3232382e3138302e302f32322d3234203d3e203238363432.roa (hash: +P6AC73KExlIdDoCv1XCALzgp/JMw6wXhT0j4EqdrHA=)
                          2: 3230312e37362e302e302f32302d3234203d3e203238363432.roa (hash: 5duBBfjcibhSWCsjgxiITH3aEXJ2JJxdFnSG6Xb5JoE=)
                          3: 3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa (hash: ADAWzt+mOwdYWrJOmgSvwJUMQylG5KKjVeq46sSsARU=)
                          4: 323830343a6566343a3a2f33322d3438203d3e203238363432.roa (hash: NIbyPJsrgGjt51LYLyxVC2AkOHn3xv+6a4EdQjEQW20=)
                          5: 3137392e3130382e3136302e302f32302d3234203d3e203238363432.roa (hash: f7S6deiTKv8LXX9ix/cEPfIzdsJ5/u8Yu84EWudyHec=)
                          6: 2563708FFC494233FAD9ABD11B7C61F83F089E7B.crl (hash: 07CAZR/hLBkxXlpkbR5vDUKWRk/veLn2S/z3+3ymA6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c6:28:df:b4:76:72:79:48:f9:85:90:da:f4:45:cd:86:6d:0c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2563708FFC494233FAD9ABD11B7C61F83F089E7B
        Validity
            Not Before: Mar 19 18:08:39 2024 GMT
            Not After : Mar 20 18:14:39 2024 GMT
        Subject: CN=7AA789C5196798A4D6DEA4064EC2A078614C6E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:45:8c:39:2f:91:19:45:10:cd:4e:f9:13:
                    c3:11:3d:67:87:d8:a4:6a:8d:a9:4e:92:42:2d:82:
                    bf:d9:fe:2a:fb:78:d0:13:58:51:8b:be:ea:9b:14:
                    31:70:49:3f:09:13:6f:81:43:d5:c2:67:fa:69:5d:
                    4b:49:42:13:bc:fd:a9:fc:0c:53:ab:b1:03:66:d0:
                    65:23:e3:f0:5e:a5:38:0b:86:f5:66:4b:8c:80:8d:
                    5a:a2:ca:a7:65:97:26:c3:aa:ea:21:73:fb:be:6c:
                    20:95:7d:fa:53:50:fc:eb:08:a4:6b:fa:65:7a:3c:
                    e9:6b:94:1c:0e:2d:c5:e9:cc:97:dc:24:c6:de:91:
                    4b:d1:8d:33:b3:88:fc:4b:70:ad:ba:ed:c7:d8:4a:
                    cf:5e:e5:84:df:78:60:19:03:51:37:dd:9e:d2:d0:
                    7d:03:8c:c3:f1:db:7d:70:b4:01:c2:58:ee:34:e6:
                    81:57:fc:0b:2e:7a:60:23:f5:2e:7d:0e:0c:db:95:
                    8e:65:4f:93:50:fa:69:08:94:b7:45:48:3b:6e:e2:
                    cb:a7:95:db:db:eb:b0:df:8e:57:d0:1e:5d:5b:94:
                    11:c1:23:4a:7c:99:63:74:b9:23:5d:1b:7a:c7:45:
                    28:cd:2e:72:9e:af:02:d0:b1:87:0e:ce:8f:02:03:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A7:89:C5:19:67:98:A4:D6:DE:A4:06:4E:C2:A0:78:61:4C:6E:3A
            X509v3 Authority Key Identifier:
                keyid:25:63:70:8F:FC:49:42:33:FA:D9:AB:D1:1B:7C:61:F8:3F:08:9E:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/2563708FFC494233FAD9ABD11B7C61F83F089E7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2563708FFC494233FAD9ABD11B7C61F83F089E7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/2563708FFC494233FAD9ABD11B7C61F83F089E7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:ae:f4:b8:ab:eb:58:53:14:91:97:9f:04:58:6d:b1:cb:
         09:ed:30:cb:6b:7b:86:e1:0a:92:29:0d:f8:c7:06:7f:f6:47:
         81:16:85:a5:14:5a:6f:62:6e:90:d5:a8:36:7d:74:2e:b1:75:
         84:4b:0a:b0:33:8d:92:b2:2b:f0:73:ff:cf:5e:a8:09:b4:9c:
         6c:bc:2a:c0:2f:ba:aa:04:01:d8:e7:71:0d:17:c6:1b:eb:2d:
         1e:68:6b:95:b2:c4:c6:db:e0:7e:18:81:67:7d:07:4a:78:f5:
         a4:fc:0d:44:86:d8:a1:e9:a4:75:8e:34:aa:88:07:eb:db:ba:
         b1:e9:5c:36:38:dc:da:47:d3:a1:6f:99:8f:70:e4:87:72:d8:
         62:d2:99:01:8c:a8:85:60:15:4f:70:95:d8:92:0f:dd:a2:fe:
         ee:b3:6b:08:90:24:46:ca:a5:c0:00:cd:48:7f:08:b5:16:30:
         ef:6f:59:65:42:b1:63:db:50:1b:41:03:81:09:0f:64:e8:e9:
         d9:2e:7b:12:cb:81:d0:3a:56:c1:42:b9:40:2e:2b:42:ce:3c:
         23:08:db:cd:58:22:fb:25:fc:b0:e7:b2:1e:b8:56:87:1b:39:
         3d:8d:8c:43:b1:58:e7:05:01:aa:6f:79:5a:fb:c3:ef:52:47:
         2f:63:78:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org