Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14.mft
File:                     8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14.mft (raw, json)
Hash identifier:          9W6UMQwsJYjRiTdkSCwiSeAGT7j5V+M9a2Ww0Y0RZLU=
Subject key identifier:   30:77:E5:AD:98:04:F7:B6:3B:EF:CA:3D:8B:CB:07:FF:88:96:D5:6E
Authority key identifier: 8C:DB:CF:65:AF:DB:79:36:BC:8A:EB:CC:AF:01:7C:C8:64:FF:1F:14
Certificate issuer:       /CN=8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14
Certificate serial:       7F06679F9990619F5FDE46CFC2F1542CA8ADB0BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14.mft
Manifest number:          F5
Signing time:             Mon 30 Sep 2024 10:31:13 +0000
Manifest this update:     Mon 30 Sep 2024 10:26:13 +0000
Manifest next update:     Tue 01 Oct 2024 14:02:13 +0000
Files and hashes:         1: 34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa (hash: ua0jvcqCmRBbqUpuHzsZijlAM4cdC8FUlhcKjUP+pBQ=)
                          2: 8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14.crl (hash: ndewN+TGMID7+IvqXWC03wOQWrj7o1CPkrLsI34tpOQ=)
                          3: 323830343a343866343a3a2f33322d3634203d3e20323637313535.roa (hash: LF5AcG3LWI7jk8Nv0ytYGaSwqu2wJe/IFQQsxcpIqSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:06:67:9f:99:90:61:9f:5f:de:46:cf:c2:f1:54:2c:a8:ad:b0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14
        Validity
            Not Before: Sep 30 10:26:13 2024 GMT
            Not After : Oct  1 14:02:13 2024 GMT
        Subject: CN=3077E5AD9804F7B63BEFCA3D8BCB07FF8896D56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ba:9c:4a:54:aa:5c:b0:96:f0:c8:8b:27:ec:
                    f7:09:ab:ee:ab:dd:a0:ee:2c:2a:6c:cb:cc:2b:ad:
                    78:46:4f:eb:35:f6:24:e0:ea:78:3f:9a:33:4f:73:
                    fb:e2:f9:2c:c5:7a:ad:80:d1:65:10:05:f5:f2:a7:
                    46:1c:e7:2e:69:9b:33:9f:6c:25:5a:df:3a:35:05:
                    27:64:03:28:6b:83:5f:88:5d:93:a4:1d:71:cf:fd:
                    82:65:95:13:be:72:3c:85:dd:62:5b:b3:5f:f5:8b:
                    4f:98:b0:ff:21:2b:02:5e:99:1b:28:70:6b:d4:b4:
                    42:55:b6:92:5a:89:53:f0:da:9a:00:6a:3b:d8:22:
                    91:d7:45:9d:96:17:33:a8:b8:a6:3b:86:a6:34:ce:
                    1b:59:7c:b2:e3:a7:c4:d5:11:46:5d:ef:ee:bd:25:
                    80:d9:d8:69:62:8c:cd:2b:a2:c4:62:c9:a9:c7:d6:
                    86:7a:3b:34:a7:a1:d0:0b:6d:5c:65:d4:77:0f:3a:
                    c1:ce:65:7f:04:72:da:53:14:ab:c9:ad:7d:b2:a8:
                    f4:5d:29:08:38:e1:d4:5c:50:f5:de:51:3b:7e:81:
                    54:b0:c2:77:ce:1b:61:16:7f:74:c1:f9:c4:b0:74:
                    4d:f0:9f:da:ec:0c:7e:a7:4a:33:92:bd:45:2f:98:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:77:E5:AD:98:04:F7:B6:3B:EF:CA:3D:8B:CB:07:FF:88:96:D5:6E
            X509v3 Authority Key Identifier:
                keyid:8C:DB:CF:65:AF:DB:79:36:BC:8A:EB:CC:AF:01:7C:C8:64:FF:1F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/8CDBCF65AFDB7936BC8AEBCCAF017CC864FF1F14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:74:da:c6:b3:25:3b:70:a8:b4:a0:1a:94:0b:f6:44:75:
         96:e3:a6:61:e9:67:75:61:04:09:dc:fd:8e:0f:5d:d7:8d:ec:
         c4:db:72:3b:91:02:be:8e:5b:8b:4f:9f:a6:35:2e:87:c8:2f:
         1c:ad:e5:e8:1e:4a:26:f6:93:c1:dd:70:a5:e2:3f:1e:d6:ae:
         35:bf:78:7f:fb:45:f2:69:93:3e:41:b3:0a:ff:3c:7f:57:21:
         5c:a1:a3:1f:1e:21:e6:b4:62:f1:ae:24:4a:b7:23:96:c3:a7:
         26:5d:87:a8:a7:09:8b:11:8f:ae:6f:72:ac:0d:db:e2:ea:b3:
         a2:25:e0:86:df:c7:48:35:c0:c1:ae:13:23:ce:8d:96:2b:eb:
         d0:61:d7:df:2d:88:7e:f0:3d:0f:3b:85:28:19:0e:5f:e9:e0:
         0f:70:0c:a8:5b:c0:cd:fe:3c:c5:b3:3b:62:11:4a:22:1c:b1:
         2d:a5:0e:df:44:a4:89:33:b9:40:a3:9f:2f:d0:27:32:02:5f:
         2b:13:f3:0e:bb:27:73:2c:d8:db:16:ec:61:5e:ae:cc:25:e9:
         48:98:1e:62:10:7f:5a:b2:cd:85:76:d7:fe:6e:f5:f6:e7:db:
         cd:61:f2:c7:db:4e:ba:33:25:78:2b:bf:f2:18:3c:4f:d3:5e:
         0e:94:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 13:33:04 2024 by rpki-client on console-fra.rpki-client.org