Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft
File:                     D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft (raw, json)
Hash identifier:          DLF2IAG2elJRoF+EcP/mfmG2Glrc/C+lW0A8UTIWmnI=
Subject key identifier:   85:8E:CD:70:88:9C:69:0B:AE:E6:93:C0:56:FB:95:9A:F1:CC:2C:98
Authority key identifier: D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76
Certificate issuer:       /CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
Certificate serial:       621EEFE1FC53A64184B78B20F080631AFFD7A592
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft
Manifest number:          F5
Signing time:             Tue 15 Oct 2024 14:32:30 +0000
Manifest this update:     Tue 15 Oct 2024 14:27:30 +0000
Manifest next update:     Wed 16 Oct 2024 18:03:30 +0000
Files and hashes:         1: 3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa (hash: bMXMqqOe6NYXGqVOsQIVzsN7NUK5Bv/nifDSoNRNd2M=)
                          2: D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl (hash: QG+l8gWPWc7Rn4cLFYw8X1NBcok0iNc6qCKTxsKDhTs=)
                          3: 3138362e3233362e36342e302f32302d3234203d3e203237363933.roa (hash: 7If2e62te2XZwTfBSV2yfegD4f76T7lTntPQz9Vp4A8=)
                          4: 3138392e3132372e302e302f32302d3234203d3e203237363933.roa (hash: VFh19ClX8yuKNQGDLlA7J9bAggjmQyN4VbKD6KIqSAU=)
                          5: 3138362e3233362e38302e302f32302d3234203d3e203237363933.roa (hash: 8tCMYcUKo9fCVpK2+l4bri4+s+kEymjfjaUuyP0LHVw=)
                          6: 3137392e3130392e31362e302f32302d3234203d3e203237363933.roa (hash: APhaXheNJb7bi0HAcOpgCtLPoTq0uwpTwAV5i/8L0YQ=)
                          7: 323830343a36343a3a2f33322d3438203d3e203237363933.roa (hash: cMEo8EsEpvPVUjteg8B5N2K8Hb5YSSM1+FOtAdDCIkc=)
                          8: 3133312e3235352e32342e302f32322d3234203d3e203237363933.roa (hash: IGKKN2wWEIE6m2u4Mul2n2YAJezUxB4fr1eYBJZChY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1e:ef:e1:fc:53:a6:41:84:b7:8b:20:f0:80:63:1a:ff:d7:a5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
        Validity
            Not Before: Oct 15 14:27:30 2024 GMT
            Not After : Oct 16 18:03:30 2024 GMT
        Subject: CN=858ECD70889C690BAEE693C056FB959AF1CC2C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:23:08:1f:74:61:e8:1e:72:22:0e:71:35:
                    d0:74:2e:04:d3:2f:ce:90:20:40:17:d7:2f:ac:85:
                    49:d3:d5:e6:20:ea:cf:bc:b4:f1:b3:9f:73:a9:8a:
                    e7:1b:8c:77:23:bc:33:58:7d:c6:0e:31:d4:b6:67:
                    c9:f8:11:66:27:b4:4b:dd:63:db:38:4f:2f:9f:ed:
                    08:32:33:ac:7b:6c:1a:e3:04:2a:68:90:e7:6a:0e:
                    2a:3e:2e:20:a9:1b:14:56:b9:e3:45:1c:17:97:22:
                    d3:38:ab:de:77:3c:89:d4:4f:0c:ed:b8:7c:56:68:
                    10:75:c2:a5:dc:6b:fa:d8:c1:8a:c4:d0:ab:10:e5:
                    b1:a5:4b:a2:27:99:a8:26:f0:08:6a:0a:2a:4b:e0:
                    9e:3d:34:3f:7d:f1:57:53:12:53:ee:70:d8:39:15:
                    df:50:9c:74:12:9b:5a:63:ca:c1:fb:17:2b:9b:dc:
                    fe:ba:30:9b:36:69:69:d6:30:15:7b:5c:dd:2e:f8:
                    2e:e6:ed:0b:12:82:44:60:08:97:81:c3:4b:1f:59:
                    de:8f:12:24:82:b9:91:9d:26:1b:59:fb:b1:62:92:
                    48:3c:11:31:15:52:37:5a:09:58:0d:d2:fd:79:39:
                    b8:0e:88:a7:3b:50:33:f5:79:38:7d:f5:5e:5c:2b:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8E:CD:70:88:9C:69:0B:AE:E6:93:C0:56:FB:95:9A:F1:CC:2C:98
            X509v3 Authority Key Identifier:
                keyid:D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:22:81:c5:c5:2d:cb:ef:3d:7c:96:9b:23:ec:ca:07:06:
         96:d6:0a:ba:82:5b:5c:96:30:e1:f6:5b:94:32:64:8e:c7:1c:
         29:ba:9e:3a:36:54:ef:11:91:a4:11:e5:1e:4f:c1:6f:05:31:
         d3:53:26:41:44:78:1f:ef:55:5f:73:4a:2c:9f:51:67:3e:9b:
         8b:c9:b4:b3:7c:ad:36:ea:91:b0:93:7a:1a:28:a5:f4:8b:e1:
         b6:24:24:4b:d4:e4:53:5b:73:c3:ca:3c:63:81:33:bd:ab:da:
         c7:a5:0b:57:26:02:f6:86:f3:58:3d:da:f1:e0:2b:28:f0:9a:
         ad:3e:82:ff:b5:5b:b8:39:21:0d:96:f8:70:3b:cd:a6:44:e9:
         d8:2a:1e:0f:5b:ce:5e:e7:3d:a5:7f:f1:08:d4:2f:2a:3c:fa:
         d0:ec:1b:bf:50:43:0d:c9:50:ae:5b:b8:81:79:2f:9f:73:87:
         59:0c:2e:15:50:e4:6e:23:3d:ed:ec:3a:4d:15:3d:59:ed:1a:
         88:f3:06:02:4c:9f:97:bc:15:f9:1b:91:74:fa:cf:13:b6:6f:
         e0:09:8c:00:7b:39:8e:42:70:6d:00:5c:a0:40:2a:33:5b:f1:
         a2:0e:f1:af:ec:dc:93:91:05:d4:a0:47:79:61:41:9e:c7:64:
         a7:82:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 16:36:31 2024 by rpki-client on console-ams.rpki-client.org