Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.mft
File:                     ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.mft (raw, json)
Hash identifier:          Z9iULJo0YpbXEwjnOHlRfzWNburJtWojcOzjTURD+UI=
Subject key identifier:   76:42:4A:E5:B1:41:30:89:04:79:99:AB:32:27:FD:33:76:E8:1A:3C
Authority key identifier: AB:E9:B1:1D:B9:D8:E8:D8:E8:0E:57:F6:4B:F8:7F:41:C9:0C:F8:BC
Certificate issuer:       /CN=ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC
Certificate serial:       571F72E4FE2E4AFDE1C61344228422726B774417
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.mft
Manifest number:          CF
Signing time:             Tue 03 Sep 2024 23:00:13 +0000
Manifest this update:     Tue 03 Sep 2024 22:55:13 +0000
Manifest next update:     Wed 04 Sep 2024 23:31:13 +0000
Files and hashes:         1: 3137372e35322e3137342e302f32332d3332203d3e203532383230.roa (hash: kKywH/UOqDuKOGXw6nKCHkBaW+HXac7Vj2kyguQr7II=)
                          2: ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.crl (hash: WEP61Ed4L3X6mXaWyEMgkGHYu/FZG2SAH4MhzgP6QTA=)
                          3: 323830343a386163303a3a2f33322d313238203d3e203532383230.roa (hash: L8nJKZx4kzQZb44LCzygPExMb3kG9ain55KA+KBlQHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1f:72:e4:fe:2e:4a:fd:e1:c6:13:44:22:84:22:72:6b:77:44:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC
        Validity
            Not Before: Sep  3 22:55:13 2024 GMT
            Not After : Sep  4 23:31:13 2024 GMT
        Subject: CN=76424AE5B1413089047999AB3227FD3376E81A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:7d:25:1b:20:e7:a5:8b:a3:7d:37:b4:fe:
                    45:f7:c4:8e:48:f5:3f:09:00:c4:ea:b9:99:e6:ca:
                    97:5b:fe:c5:91:2e:01:f5:a6:60:d8:d8:6f:a5:4c:
                    a7:8b:67:e3:44:4c:90:7e:2c:3d:67:19:f5:62:97:
                    82:67:b1:04:2a:2f:67:c4:24:f3:e2:7d:9a:1f:ac:
                    94:43:0b:45:0e:0a:f1:d1:16:89:db:1c:19:8d:7b:
                    c3:f8:e5:c1:96:ff:82:c8:30:ad:92:cc:a0:86:b3:
                    7d:7e:ca:fd:5d:77:01:7e:9b:c6:51:a5:4a:8d:53:
                    7f:bc:db:e7:b8:6c:a1:e0:6d:4a:47:e0:fd:37:b4:
                    67:ea:86:f4:12:4f:d9:4d:f5:a8:e6:be:33:0e:7f:
                    16:a4:62:af:16:7a:55:e1:47:34:8b:3d:04:9c:81:
                    9c:da:7e:d9:23:be:ca:b8:94:86:c1:f1:af:1d:c1:
                    39:64:30:f7:ce:09:be:cc:00:94:e6:92:cb:c4:86:
                    53:86:a3:57:fd:42:47:ef:92:49:6d:c3:bf:a8:db:
                    79:e8:64:ad:51:e5:de:04:c1:21:9d:3a:c4:7b:cc:
                    db:66:24:2c:5e:a9:39:19:48:5d:9b:43:31:cf:4c:
                    72:83:0e:2b:ac:8c:98:08:7c:40:8c:b5:36:23:7d:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:42:4A:E5:B1:41:30:89:04:79:99:AB:32:27:FD:33:76:E8:1A:3C
            X509v3 Authority Key Identifier:
                keyid:AB:E9:B1:1D:B9:D8:E8:D8:E8:0E:57:F6:4B:F8:7F:41:C9:0C:F8:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:0a:a4:21:94:f2:69:f9:56:f0:80:19:62:05:ff:51:9c:56:
         8d:28:66:56:0a:33:06:b5:3c:28:dc:41:59:06:70:90:86:0c:
         fb:3e:f6:95:65:81:bf:61:64:3f:c0:38:04:93:87:79:a1:3e:
         db:2d:5a:77:23:56:7d:c2:96:5a:d6:30:b0:4b:59:0f:e9:01:
         c9:57:da:f8:1b:97:49:dc:a1:af:73:34:11:41:1c:82:2a:c5:
         9c:48:6d:21:7d:fd:d6:16:9d:0c:98:0d:45:c6:54:f2:05:20:
         e8:e8:fb:c6:15:d0:8e:24:d2:b1:a3:63:df:83:d6:9d:02:29:
         71:9d:f0:d5:92:7c:a7:e5:8e:e4:c0:da:ef:5b:ec:0c:6e:a1:
         a0:4b:ca:ec:71:66:96:85:6b:cb:70:32:82:52:13:c7:d8:1e:
         17:21:39:48:00:b8:aa:20:d5:21:03:d3:70:f0:10:f6:25:0a:
         d0:82:2b:b3:86:e8:71:d4:63:a4:04:2f:87:62:72:2e:c7:66:
         da:8f:9a:3d:bc:84:c0:98:84:87:54:d8:8f:55:09:79:d4:d7:
         e6:27:38:69:dd:0d:81:69:e4:c2:86:5f:d0:a8:17:15:4d:2b:
         65:a3:5d:5d:86:78:66:39:23:5a:43:b7:25:61:8c:81:78:01:
         bd:f2:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 15:47:48 2024 by rpki-client on console-fra.rpki-client.org