Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.mft
File:                     393C05C5D41432E0C49D28B3830034F3BD93985A.mft (raw, json)
Hash identifier:          A3bS0etzTmsQSAPFZsP6MWm6d0pH09iAUWIT2Bv/0xs=
Subject key identifier:   68:1F:7D:FD:89:8B:00:BC:ED:BC:19:A2:31:A2:E2:17:63:87:E8:5C
Authority key identifier: 39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A
Certificate issuer:       /CN=393C05C5D41432E0C49D28B3830034F3BD93985A
Certificate serial:       31C27926F6F56F2C32EF574A78360ACFEE62E25C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.mft
Manifest number:          D8
Signing time:             Mon 15 Apr 2024 08:07:06 +0000
Manifest this update:     Mon 15 Apr 2024 08:02:06 +0000
Manifest next update:     Tue 16 Apr 2024 09:48:06 +0000
Files and hashes:         1: 3137372e3132342e37322e302f32312d3332203d3e203532363031.roa (hash: rtw+jqoNJRO386f39jTZv8AxP8B95kAZfvnbtLJbeq0=)
                          2: 3137372e37342e3232342e302f32302d3332203d3e20323633363532.roa (hash: 3U2nRC+l8Ei6Wam8AxhHwd6edyob07AFG9C/p2dCv2Y=)
                          3: 323830343a333833633a3a2f33322d313236203d3e203532363031.roa (hash: k8xLTDV/cgCBFUdlcRdi7HxQ251mqzzQzyhOchK+ssA=)
                          4: 393C05C5D41432E0C49D28B3830034F3BD93985A.crl (hash: q61nqOo1bRyBO2jTeTwxMpnFdSh2IzCwWj6KrBLXWm0=)
                          5: 323830343a313064633a3a2f33322d313236203d3e20323633363532.roa (hash: 6iAYme9wPtoRhRcWvm3KgNALaOrq+Gfcv5tzb4t4/Xk=)
                          6: 3137302e38332e3130302e302f32322d3332203d3e203532363031.roa (hash: sB79MgccKAmfd3VqDcc+FaJ3+hD4OjXhMf/ycNTjupg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c2:79:26:f6:f5:6f:2c:32:ef:57:4a:78:36:0a:cf:ee:62:e2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393C05C5D41432E0C49D28B3830034F3BD93985A
        Validity
            Not Before: Apr 15 08:02:06 2024 GMT
            Not After : Apr 16 09:48:06 2024 GMT
        Subject: CN=681F7DFD898B00BCEDBC19A231A2E2176387E85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:a4:fd:1b:fa:e8:e5:af:94:0f:43:33:b1:
                    84:6e:26:a5:f8:99:ec:36:a6:52:96:6d:87:5d:b7:
                    60:84:cf:b9:0c:1d:8c:29:67:2d:d1:f0:40:dd:21:
                    fb:57:b4:ad:0d:28:91:14:86:c1:a7:4c:39:40:30:
                    b5:b3:2e:aa:a0:e4:71:58:da:33:4d:d9:9d:05:14:
                    b2:77:26:a5:72:e4:07:b6:3e:94:5b:ed:cc:9c:79:
                    99:93:16:8e:a1:80:58:ae:1e:23:06:ff:d6:20:ce:
                    25:fc:21:d2:b6:a6:d1:0a:5d:94:74:21:bd:54:0c:
                    42:a9:ba:9d:40:a8:b8:15:3b:30:aa:30:4f:bc:66:
                    18:41:c4:4c:ad:1e:1d:c4:f4:60:3e:85:e9:2e:5b:
                    e2:49:fa:c2:dd:d0:9f:5d:1e:b6:b1:ab:a0:9a:e1:
                    dc:fb:c8:2d:f1:26:c5:01:04:d8:96:b0:a5:8a:bd:
                    4f:13:14:e8:10:fd:5a:4d:33:0e:69:bb:a9:a8:a3:
                    17:25:cd:9c:ba:e0:21:2d:42:b6:57:bc:5d:5d:75:
                    8e:b6:0a:a7:a1:98:4d:c7:fc:7e:18:74:e2:e9:2d:
                    47:ee:50:d4:3d:02:62:30:90:02:c5:12:29:2c:cb:
                    d6:e2:30:85:1e:b2:26:16:3a:36:63:dc:44:c3:b6:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1F:7D:FD:89:8B:00:BC:ED:BC:19:A2:31:A2:E2:17:63:87:E8:5C
            X509v3 Authority Key Identifier:
                keyid:39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b9:8e:28:8a:96:77:2f:1f:10:0d:23:c1:2e:8c:c1:51:cf:
         9f:ed:0b:7f:26:66:72:3e:f3:3e:f3:e2:c1:6a:8d:de:c0:63:
         c2:12:38:c3:c8:b2:80:5b:1b:60:e5:b4:36:dc:89:0a:10:45:
         76:b3:0c:ef:8f:e6:1f:a9:d6:df:44:0e:72:7c:af:96:bb:6e:
         77:38:6d:b7:ad:18:d1:8a:4d:ba:57:0c:46:d5:57:e3:77:0d:
         ca:3b:45:6f:50:33:cd:36:8f:98:d3:a8:b9:cc:b9:86:6e:1e:
         ff:7d:5d:90:cd:0d:17:19:41:a4:e5:41:e7:55:53:70:d2:a2:
         a3:b9:4a:b1:70:0c:a8:46:a5:92:b0:32:7c:99:af:80:15:3e:
         d8:97:dd:36:d4:8d:83:46:4a:5f:64:b6:dd:ed:9d:9e:f8:85:
         b2:f8:39:65:98:05:49:c2:2d:f6:5b:91:cd:12:be:02:5e:d3:
         52:16:9f:aa:7b:9d:a1:94:c4:65:7d:3a:de:2e:6d:76:e6:f6:
         5d:40:8d:de:be:8a:1e:00:4f:cb:87:32:3f:06:28:1a:e1:28:
         4f:bd:10:ae:1a:3b:4b:e7:e7:ed:f5:4b:60:e0:86:23:33:ec:
         e2:88:48:dd:dd:94:e0:56:28:07:87:db:9a:7e:05:df:af:39:
         54:47:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org