Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft
File:                     CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft (raw, json)
Hash identifier:          qSZ8D3YpJCsMrGTgPy7T7jhjAOryIW3Pk+tj6LLUQag=
Subject key identifier:   98:ED:3E:8F:22:0A:9B:B6:F4:29:D2:CD:D0:AD:14:C9:8A:60:A2:04
Authority key identifier: CE:9A:4E:28:9A:0F:1C:A3:1B:E0:31:4A:93:BF:DC:01:DC:EB:0E:0B
Certificate issuer:       /CN=CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B
Certificate serial:       723A21F81F8B6FC29CC899E6B1B4C9514E9256CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft
Manifest number:          36
Signing time:             Fri 09 Feb 2024 12:48:38 +0000
Manifest this update:     Fri 09 Feb 2024 12:43:38 +0000
Manifest next update:     Sat 10 Feb 2024 15:24:38 +0000
Files and hashes:         1: 323830343a343433383a3a2f33322d3332203d3e20323637363130.roa (hash: h4EtfVQ7sQBMq6W2zjt7VYPORZF8dQ61/5wL4D4+OAQ=)
                          2: 34352e37302e3235302e302f32332d3233203d3e20323637363130.roa (hash: BmvqHK2fupe8KEf54lm4S/5cU4T6TTRXQlTvdTqhNx0=)
                          3: 34352e37302e3234382e302f32322d3232203d3e20323637363130.roa (hash: 6d28YEyuMJaoJvwb6A14QqcIfHjowog1FL1cTJLPJK0=)
                          4: CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.crl (hash: SKPPqLKchj3JM5N552fF36GM0Xllr5ckcB8Q2nEGFHQ=)
                          5: 34352e37302e3234382e302f32332d3233203d3e20323637363130.roa (hash: mSM7OCGhFH7RMgf5qKpkruxHUVBqrdz+N977ubYjHjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3a:21:f8:1f:8b:6f:c2:9c:c8:99:e6:b1:b4:c9:51:4e:92:56:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B
        Validity
            Not Before: Feb  9 12:43:38 2024 GMT
            Not After : Feb 10 15:24:38 2024 GMT
        Subject: CN=98ED3E8F220A9BB6F429D2CDD0AD14C98A60A204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8d:fd:3c:77:db:e1:6d:6f:ae:15:7c:7b:ed:
                    2e:c5:83:b2:0c:7a:17:06:97:00:c1:a3:67:88:70:
                    29:0d:08:20:b2:54:d5:6c:b5:0b:e3:ed:4b:91:9d:
                    e8:ec:50:6d:86:ee:46:ea:f5:2a:4e:f5:55:ac:ed:
                    24:c7:df:be:51:7d:59:33:98:73:66:8b:fb:e9:86:
                    05:eb:76:be:08:e3:57:d4:66:83:d7:85:3b:29:0f:
                    99:89:a2:fc:d8:39:54:04:71:cb:8b:f8:2a:56:1e:
                    2d:c5:32:48:4a:e7:9c:6f:d2:67:c0:2d:cb:c2:05:
                    9a:cf:d5:15:32:bb:f3:0b:ef:40:f4:a8:9b:75:94:
                    63:eb:65:be:3f:cc:e6:5c:23:c1:99:96:01:ac:67:
                    53:60:fd:3e:37:08:e8:27:fc:c0:83:d8:79:7f:51:
                    87:0c:bf:92:01:36:6e:bc:f8:74:87:7c:cf:4b:73:
                    e0:f5:01:1d:9e:c2:fb:81:40:81:d8:cd:ec:07:9f:
                    ae:95:a6:61:4b:a9:9b:8a:66:68:e2:bb:2b:bf:45:
                    24:e6:63:29:d2:0f:e2:be:51:18:99:2a:c9:ab:0a:
                    ba:ee:bc:3c:54:3d:28:66:7b:d0:ba:73:c5:7f:7b:
                    5d:d3:16:6b:0f:6d:59:0f:b5:4c:55:95:5c:e6:cf:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:ED:3E:8F:22:0A:9B:B6:F4:29:D2:CD:D0:AD:14:C9:8A:60:A2:04
            X509v3 Authority Key Identifier:
                keyid:CE:9A:4E:28:9A:0F:1C:A3:1B:E0:31:4A:93:BF:DC:01:DC:EB:0E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:ed:33:7f:93:cc:51:52:66:b4:3f:8b:de:49:f6:bc:b6:
         da:65:75:c4:73:e3:69:ec:e0:7d:8b:3e:5c:6b:91:25:76:6f:
         08:50:66:cb:75:e5:33:c4:28:a1:c2:df:39:6e:c3:bd:f4:c4:
         4a:79:11:41:44:de:0f:a6:67:80:0c:2d:67:7a:60:ab:44:88:
         5a:da:3f:d3:17:67:b6:b3:72:76:9d:9f:33:c1:98:0b:a8:17:
         ca:ae:15:db:aa:15:ea:0b:61:c1:72:2c:81:85:c9:8d:5e:1b:
         23:04:21:dd:63:f1:2c:fc:4e:8b:fd:19:c6:14:bb:78:88:5a:
         27:f3:0e:0f:ff:6d:1d:80:e8:be:07:54:38:24:58:25:db:27:
         1b:bb:1e:4a:9f:49:59:a4:ea:4c:1a:0d:ab:b5:a0:d2:32:6a:
         f5:51:0c:45:21:ff:57:70:e9:a3:4b:74:e4:de:5a:4b:cc:f5:
         0c:d5:fe:d4:c5:0c:6c:ce:11:63:29:59:56:c9:e8:df:96:ac:
         d6:9c:4d:28:30:70:be:0a:93:b7:03:09:0c:d2:f8:2f:a6:d3:
         45:0d:1e:fd:25:41:78:76:c7:af:1a:9e:ec:09:59:17:72:5d:
         8c:76:17:ee:d1:ae:4d:3e:4b:aa:c8:60:3d:69:37:3e:5d:d0:
         11:00:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org