Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.mft
File:                     9153E8AC57500B9F6FAD7507DD47F690C821A068.mft (raw, json)
Hash identifier:          /OYECpA6lSP2vos3dZvDABxHUm4LN/FO9bt3qXaPDzw=
Subject key identifier:   42:08:F2:2A:3D:95:66:6C:4C:62:D8:B7:24:2C:52:17:AA:22:ED:2B
Authority key identifier: 91:53:E8:AC:57:50:0B:9F:6F:AD:75:07:DD:47:F6:90:C8:21:A0:68
Certificate issuer:       /CN=9153E8AC57500B9F6FAD7507DD47F690C821A068
Certificate serial:       7AAF1A4E46C084BE5A1A4AB3F42E14428C0D80A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.mft
Manifest number:          37
Signing time:             Mon 15 Apr 2024 09:59:35 +0000
Manifest this update:     Mon 15 Apr 2024 09:54:35 +0000
Manifest next update:     Tue 16 Apr 2024 09:59:35 +0000
Files and hashes:         1: 323830343a366266383a3a2f33322d3332203d3e20323730343337.roa (hash: jfLnf8PhODsAY5QS5szexXBXZRRoJUpJduz+rrdHEEo=)
                          2: 3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa (hash: zVdvF2D+yEk/L2f7Vn5rzN0ZQ0bDJYxTOS14VBzPZxE=)
                          3: 3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa (hash: pQaI+nQgLhlErtdIljJvAhDEedU08TiLeG9i+qTPYQ4=)
                          4: 323830343a366266383a3a2f33332d3333203d3e20323730343337.roa (hash: NR0t8yvFthqcRWIpRUeyByqj0WVqQXRDWkMUorT6aXU=)
                          5: 323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa (hash: wuIpjJL8ZwJ2or34vBtAh4D1KCqKEbwp1b8SEXQIDy0=)
                          6: 9153E8AC57500B9F6FAD7507DD47F690C821A068.crl (hash: dNVLphfylW2GSLkLdAXFCMiItSeVb1BoIXfnSt9hfR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:af:1a:4e:46:c0:84:be:5a:1a:4a:b3:f4:2e:14:42:8c:0d:80:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9153E8AC57500B9F6FAD7507DD47F690C821A068
        Validity
            Not Before: Apr 15 09:54:35 2024 GMT
            Not After : Apr 16 09:59:35 2024 GMT
        Subject: CN=4208F22A3D95666C4C62D8B7242C5217AA22ED2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:06:b9:1a:40:01:28:3f:f6:88:fc:55:ab:
                    ad:5d:76:7d:10:3d:64:ba:97:69:1a:21:f6:ec:b4:
                    7e:8f:3a:51:31:98:a0:21:4c:68:a3:e9:d0:22:a1:
                    59:a2:ba:21:3e:ed:16:d2:65:cb:ce:75:9a:2a:a8:
                    98:d1:a9:b7:2e:ef:e4:34:b7:29:64:a4:50:ca:8b:
                    b4:b7:26:bc:2f:85:ff:9a:ea:65:21:b0:b6:da:5c:
                    f7:b7:e3:40:fc:6f:3d:c1:54:13:6b:80:45:6a:65:
                    e9:4f:4c:59:ce:83:17:ae:c2:56:0a:92:45:3a:f9:
                    ca:c8:17:84:99:35:02:61:14:2e:dd:57:32:bd:04:
                    86:97:15:cf:0d:8f:5e:7d:f0:60:c5:90:c1:68:0b:
                    90:0d:3f:c4:18:cd:7e:7f:5e:57:08:b7:15:89:4c:
                    5b:95:38:e5:76:96:03:41:05:3a:5b:ed:1d:b8:45:
                    1d:22:84:ad:d7:77:c7:5b:7c:90:70:34:ff:5a:73:
                    d3:9b:63:9b:e0:4d:5d:cd:05:65:31:d8:7d:04:57:
                    a2:a9:8f:d3:ea:59:b7:1b:55:c5:a4:7b:aa:b1:59:
                    d8:24:d1:ce:85:59:72:c2:2d:0b:45:3a:e5:9c:77:
                    ae:b9:8f:d0:b4:4a:cb:45:e2:b2:78:8b:0a:b0:20:
                    c7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:08:F2:2A:3D:95:66:6C:4C:62:D8:B7:24:2C:52:17:AA:22:ED:2B
            X509v3 Authority Key Identifier:
                keyid:91:53:E8:AC:57:50:0B:9F:6F:AD:75:07:DD:47:F6:90:C8:21:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:77:5b:40:48:33:58:14:7a:cb:09:c9:8c:1d:dd:92:47:cc:
         f4:7e:9a:96:74:e1:ff:db:ac:e6:59:03:c4:0e:b3:ef:7e:b1:
         ed:4c:38:dd:3c:ad:2b:ee:b9:25:70:89:aa:d9:09:53:0f:4c:
         6b:95:a7:dc:38:cb:3d:21:b8:ee:b7:32:06:6d:00:4a:84:48:
         a5:76:f9:9e:6f:fd:d8:2b:a2:ed:f5:56:7d:2c:50:ef:04:09:
         75:8a:91:50:a9:f8:39:8d:8c:98:5e:70:d8:8e:b6:d0:75:e6:
         68:2b:0c:71:7e:98:62:83:bc:08:0c:a2:8f:7b:a9:df:79:2c:
         53:f3:2b:1a:15:b6:4d:45:49:ce:c6:2d:db:b5:1f:1e:f5:81:
         17:d8:52:e8:32:aa:02:a3:79:c6:0f:79:ca:d8:9f:02:d5:6d:
         b1:df:a8:eb:58:d5:6e:76:cd:95:0a:71:af:3d:9e:1c:72:d9:
         26:a7:c1:ee:19:df:1f:e1:6c:91:21:e8:87:1e:1a:76:0e:08:
         ac:ee:d5:ea:c1:0f:17:f7:e6:40:bd:29:02:0b:93:6b:a3:34:
         7a:db:c8:90:f7:14:22:eb:18:30:83:a5:a9:b6:e3:7b:db:80:
         e5:ae:97:ea:3c:60:05:a9:27:63:b4:ce:74:bd:73:0f:10:57:
         ff:06:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org