Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/CD23D971274B713E206B34F0B4A67B75AAF920F1.mft
File:                     CD23D971274B713E206B34F0B4A67B75AAF920F1.mft (raw, json)
Hash identifier:          4BHG1Zc5XZw6Ucq6wnPFIhUIKvkxZdUDKTW0fZ07Mzc=
Subject key identifier:   D0:C1:63:19:DA:6A:D9:53:77:78:AF:05:E7:60:5A:CF:74:16:F2:8B
Authority key identifier: CD:23:D9:71:27:4B:71:3E:20:6B:34:F0:B4:A6:7B:75:AA:F9:20:F1
Certificate issuer:       /CN=CD23D971274B713E206B34F0B4A67B75AAF920F1
Certificate serial:       7D2B8EF0F98649E6573E686173B89F726350043F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD23D971274B713E206B34F0B4A67B75AAF920F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/CD23D971274B713E206B34F0B4A67B75AAF920F1.mft
Manifest number:          38
Signing time:             Fri 03 Mar 2023 15:55:15 +0000
Manifest this update:     Fri 03 Mar 2023 15:50:15 +0000
Manifest next update:     Sat 04 Mar 2023 19:23:15 +0000
Files and hashes:         1: 323830343a343438303a3a2f33322d3332203d3e20323637363336.roa (hash: Syuste/8WjZwkJK555QwOTi+8l9CcAIyXL3V79wlXXY=)
                          2: 34352e3232342e32342e302f32322d3232203d3e20323637363336.roa (hash: 5kqAhSPU4YBzgWA325IHrI57KNNbUism/EhtNeR7obs=)
                          3: CD23D971274B713E206B34F0B4A67B75AAF920F1.crl (hash: aTuASpm5r05sxNC7vIR/91fbZA814kF0IPAnJ/ySd0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2b:8e:f0:f9:86:49:e6:57:3e:68:61:73:b8:9f:72:63:50:04:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD23D971274B713E206B34F0B4A67B75AAF920F1
        Validity
            Not Before: Mar  3 15:50:15 2023 GMT
            Not After : Mar  4 19:23:15 2023 GMT
        Subject: CN=D0C16319DA6AD9537778AF05E7605ACF7416F28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:42:6f:38:5d:63:2c:17:0d:37:56:a0:95:
                    ea:20:ca:27:5f:bc:d6:f2:cc:13:2e:25:04:47:9e:
                    ba:3c:5f:a2:1a:93:b6:e9:0d:ec:fd:16:42:93:05:
                    ed:8e:fd:8a:d2:2b:06:52:55:0f:20:54:da:2b:fa:
                    7e:9c:f3:76:44:9e:cb:f4:2f:53:3e:60:10:44:ac:
                    d7:9b:67:d1:48:5e:13:80:90:a9:2a:04:a2:3b:2f:
                    15:aa:b3:ac:31:63:53:e5:f7:1f:9f:c2:70:7a:21:
                    e7:35:9d:4c:60:18:a4:af:7d:98:33:50:22:0b:b8:
                    dd:5f:db:df:3b:f9:64:e0:58:e2:ad:64:70:e5:91:
                    80:d9:8b:bb:ec:fa:b1:ae:dc:6d:aa:24:a1:c2:f7:
                    b8:20:7a:0d:87:be:36:09:e5:7d:03:a3:a2:4b:61:
                    38:ef:66:e9:70:80:6e:62:be:2e:4d:02:6d:ac:0b:
                    11:df:c3:66:54:cc:3d:de:57:9d:39:77:a1:86:19:
                    e1:07:fe:84:69:07:9e:11:b1:4c:33:80:80:1d:43:
                    99:f6:84:b3:77:9e:69:dd:82:e8:0e:b9:2d:a9:51:
                    f5:39:de:90:82:1f:2d:f2:1e:0a:bf:cf:ec:e8:8f:
                    1c:44:b5:9d:4c:e5:ef:d4:09:29:ec:75:0f:f2:32:
                    cf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:63:19:DA:6A:D9:53:77:78:AF:05:E7:60:5A:CF:74:16:F2:8B
            X509v3 Authority Key Identifier:
                keyid:CD:23:D9:71:27:4B:71:3E:20:6B:34:F0:B4:A6:7B:75:AA:F9:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/CD23D971274B713E206B34F0B4A67B75AAF920F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD23D971274B713E206B34F0B4A67B75AAF920F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/CD23D971274B713E206B34F0B4A67B75AAF920F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:41:f9:38:6d:70:e6:96:05:1f:d1:fd:e4:50:36:d1:c0:
         85:67:48:6d:2c:c9:6a:2d:ce:48:1a:bb:8b:b1:fb:68:37:5c:
         b0:5b:67:c9:56:6a:f0:ba:ef:73:b6:c2:ae:34:af:4e:13:6a:
         b8:0d:38:9c:82:06:46:cc:54:cc:57:d4:e1:6f:3e:43:db:38:
         c1:35:63:82:73:6d:e3:e9:6f:1f:68:25:ae:75:21:76:af:8a:
         f5:2c:b3:e2:0f:6c:cb:31:0d:a0:82:2b:2a:7f:c5:1c:ee:48:
         26:60:53:49:a0:f8:1c:65:ec:dd:47:52:51:0c:af:c1:7c:00:
         01:18:59:b0:3d:c2:a9:1f:f1:9a:3f:4f:15:f4:28:4f:dd:5c:
         7c:cc:0b:af:ad:6a:39:f2:e5:98:84:0f:52:99:22:de:6f:19:
         65:be:71:75:34:0c:c9:69:3f:f4:f1:88:e1:3a:c2:fc:bf:a5:
         e0:4e:ca:e0:99:7d:1b:5b:d9:6f:5b:a2:c6:2a:68:8a:a2:6b:
         76:c7:c3:e0:62:b9:7f:75:4f:2c:8e:7b:b6:0f:4d:70:b3:f8:
         26:d9:92:a1:bf:ed:05:66:72:f8:d2:16:bd:7b:1b:b9:74:2e:
         f9:a1:0d:23:cf:01:11:5e:63:da:3f:6e:3c:a3:87:a4:58:89:
         2e:42:59:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org