Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/0/EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507.mft
File:                     EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507.mft (raw, json)
Hash identifier:          52UR0ZDxh7bb/OI3aHLAxzgYPYhq/fQwrCLiIHucPB8=
Subject key identifier:   7E:0E:A2:D4:D5:07:19:39:40:B4:6B:19:3A:6F:B2:80:91:5B:CB:EB
Authority key identifier: EB:1B:FC:3F:E8:D0:3D:1C:50:77:D1:11:55:BD:AF:17:14:BE:35:07
Certificate issuer:       /CN=EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507
Certificate serial:       20FB128DE9E141A47DDBB63494B78BE789FD8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/0/EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507.mft
Manifest number:          011C
Signing time:             Thu 02 Nov 2023 18:14:44 +0000
Manifest this update:     Thu 02 Nov 2023 18:09:44 +0000
Manifest next update:     Fri 03 Nov 2023 20:17:44 +0000
Files and hashes:         1: 3137372e37342e3232342e302f32302d3332203d3e20323633363532.roa (hash: ToMvLyRApbTnhbyvBikaVAzVhPVtsJ5+4XDqeE8O4DY=)
                          2: EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507.crl (hash: N8++e1Wfiv8z+W3s9m/aBlCfInol8OG5tmTjsIndSNE=)
                          3: 323830343a313064633a3a2f33322d313238203d3e20323633363532.roa (hash: H7Rnv/hSa5gJ+zYzMYXldzaMCGOxInQGmaPlSvFuPDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fb:12:8d:e9:e1:41:a4:7d:db:b6:34:94:b7:8b:e7:89:fd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507
        Validity
            Not Before: Nov  2 18:09:44 2023 GMT
            Not After : Nov  3 20:17:44 2023 GMT
        Subject: CN=7E0EA2D4D507193940B46B193A6FB280915BCBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:9f:41:5f:c4:62:fa:f3:e7:ee:0f:12:b7:
                    fc:34:9b:05:1d:e9:ab:a9:cd:c6:46:f1:ec:a1:7f:
                    c2:3c:88:7d:bb:8b:50:60:b3:70:cc:ad:29:c8:ff:
                    58:44:67:ea:b2:d5:06:53:80:d7:c2:62:d4:8e:95:
                    53:62:bf:e7:25:2d:2d:6b:97:f8:70:f9:0b:af:a7:
                    1f:22:d6:ab:8f:67:d9:94:9e:39:4a:84:02:dd:96:
                    df:e1:c8:cc:83:b5:2c:1c:dd:83:18:df:37:d1:bd:
                    2f:91:b3:b9:ff:e1:51:a8:7b:da:ed:eb:aa:cc:6f:
                    01:17:04:fa:bc:97:87:6e:d9:45:4a:4a:ef:ea:90:
                    f3:51:41:23:44:6c:09:27:30:c2:77:54:d4:e8:fd:
                    fa:e9:61:e4:98:7e:20:94:a5:07:74:d6:d3:cd:de:
                    58:f3:51:6c:70:c1:ff:0d:24:cb:07:a4:a3:9b:ef:
                    ff:eb:49:eb:e3:0d:c2:0f:9c:58:3e:a9:79:00:a6:
                    cf:ee:8a:7d:28:ad:76:f5:0a:fd:14:0a:1c:dd:5e:
                    21:95:18:2f:45:cc:29:4e:d8:b0:a4:42:8c:f2:dc:
                    5c:29:5d:dd:be:4c:c5:2a:d8:87:3b:61:a9:f6:83:
                    dc:3c:80:f8:b2:7d:3b:18:1e:4a:1a:ca:7d:bc:bb:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0E:A2:D4:D5:07:19:39:40:B4:6B:19:3A:6F:B2:80:91:5B:CB:EB
            X509v3 Authority Key Identifier:
                keyid:EB:1B:FC:3F:E8:D0:3D:1C:50:77:D1:11:55:BD:AF:17:14:BE:35:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/0/EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/0/EB1BFC3FE8D03D1C5077D11155BDAF1714BE3507.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:10:2b:c0:27:21:11:34:6d:e1:c6:4b:f5:5c:92:28:3b:
         a5:31:d8:a3:e7:20:0b:d2:36:09:97:fb:56:46:6b:05:f3:02:
         e1:ec:62:94:b3:67:60:2d:59:91:9a:e4:e5:fa:51:2b:30:47:
         0d:40:60:14:6f:d4:bc:50:6b:8e:25:87:f3:90:7b:83:9a:77:
         e7:f2:0b:10:39:91:37:3d:af:2b:a3:72:6d:7e:a4:fc:c0:7d:
         5e:34:f9:22:a5:9f:45:08:87:c7:06:34:6f:e9:09:eb:c5:c4:
         76:ad:a8:c3:87:a5:35:3a:fa:2d:5c:5c:8c:a3:25:bf:82:c1:
         3d:7f:20:f8:cd:47:40:7d:b7:4a:85:dd:d4:79:5f:59:10:39:
         9d:a2:ff:86:0d:f2:36:08:d1:4f:2c:21:97:fb:0e:3b:99:51:
         a5:1c:02:3f:49:22:5b:ca:fd:63:a4:f7:24:49:34:8a:05:18:
         99:fc:99:8b:b3:ba:ef:35:ff:d8:c3:6e:ab:9a:0f:fb:61:ab:
         0f:b5:07:93:cb:79:12:12:9c:07:f1:c5:76:03:aa:8a:f8:ac:
         e4:c6:36:b5:a0:bb:4b:7f:b3:4e:3b:a6:05:02:db:a6:98:65:
         ab:76:c2:0b:bb:e8:aa:26:a2:80:61:65:2b:58:71:15:b1:c8:
         38:84:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org