Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.mft
File:                     3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.mft (raw, json)
Hash identifier:          k5LPN5gbck7pBPX0Eal1FETBDCerj03sySVuhS57SDY=
Subject key identifier:   D6:18:1B:04:AE:52:D1:40:18:02:E2:1B:68:56:25:22:61:BF:2D:58
Authority key identifier: 3F:12:C9:D5:B4:5E:7F:D3:F1:EC:7A:E0:8D:A8:BF:70:DC:9E:22:1F
Certificate issuer:       /CN=3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F
Certificate serial:       21938C0A6D83787253B7A11B1273B069A10BD11B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.mft
Manifest number:          016D
Signing time:             Sat 06 May 2023 02:56:51 +0000
Manifest this update:     Sat 06 May 2023 02:51:51 +0000
Manifest next update:     Sun 07 May 2023 03:48:51 +0000
Files and hashes:         1: 34352e3136392e32342e302f32332d3233203d3e20323638303931.roa (hash: gvnQcejr5tH/IyOteml7iJSKBjloXm6001cmc0VQUWs=)
                          2: 3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.crl (hash: pbKZz24sPtngsx4rjxXZ51uvela5mcu6FQTyJRQmClw=)
                          3: 34352e3136392e32352e302f32342d3234203d3e20323638303931.roa (hash: yU1NOzCOGVnpUtihQdgrFi3HthlK1cQRAnvkZwiQqqY=)
                          4: 34352e3136392e32342e302f32342d3234203d3e20323638303931.roa (hash: vym7NOwIcCb7bV3Meodn1bwUvsqSMHnDGNnW48iG45s=)
                          5: 34352e3136392e32342e302f32322d3232203d3e20323638303931.roa (hash: zdMHeC3Mh8D5p9doBA4mi29RliPs4/MOXMSM/znKDT4=)
                          6: 34352e3136392e32372e302f32342d3234203d3e20323638303931.roa (hash: vcOidZPaUutMk+MeLTq16f4AMkm7w0HVxtgPxu9D7Ww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:93:8c:0a:6d:83:78:72:53:b7:a1:1b:12:73:b0:69:a1:0b:d1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F
        Validity
            Not Before: May  6 02:51:51 2023 GMT
            Not After : May  7 03:48:51 2023 GMT
        Subject: CN=D6181B04AE52D1401802E21B6856252261BF2D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:a9:c9:ce:95:9a:f3:ea:93:c1:26:d1:d3:
                    65:04:eb:da:cd:4f:78:4e:39:12:81:de:dd:c5:7b:
                    be:5d:c3:7b:0b:6d:56:ec:a7:d5:df:c7:ec:08:5d:
                    f1:ed:0e:66:d3:de:4a:73:34:dc:bc:9c:36:2e:82:
                    b4:a5:67:7f:77:36:e3:04:e6:55:33:e1:7b:a8:24:
                    eb:1a:1f:a5:d9:90:50:04:a5:d4:70:11:b6:12:91:
                    ed:7d:11:4e:08:4d:64:52:78:84:41:1d:98:b2:30:
                    3c:df:be:50:b3:3b:25:2f:9b:d3:9d:cf:4e:2b:26:
                    e7:fe:22:74:84:bf:2c:40:a0:19:19:7e:18:7a:92:
                    d2:9c:a0:f3:b7:ee:8e:c3:6e:23:e3:16:51:d2:aa:
                    33:53:6d:8a:55:91:dc:a2:d8:5d:d6:69:20:cf:13:
                    73:ab:da:ea:60:78:ff:7f:d7:e6:d6:20:a7:66:e4:
                    38:f5:8f:49:f1:4a:6f:3c:fe:dc:04:0e:7f:b7:6a:
                    3f:63:bb:cb:a2:fd:2c:50:fe:88:59:0d:95:37:94:
                    e9:3d:9b:c6:c8:35:2a:cb:2c:5d:1a:b9:85:d0:3a:
                    a5:f5:f5:61:54:15:60:f1:30:74:79:06:f3:a0:f9:
                    61:16:df:8f:19:74:ff:47:8d:cc:be:ee:f7:53:60:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:18:1B:04:AE:52:D1:40:18:02:E2:1B:68:56:25:22:61:BF:2D:58
            X509v3 Authority Key Identifier:
                keyid:3F:12:C9:D5:B4:5E:7F:D3:F1:EC:7A:E0:8D:A8:BF:70:DC:9E:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:57:65:d7:61:fd:db:23:6e:dd:97:ab:29:6d:67:d8:43:66:
         ef:8f:76:6d:76:f3:cd:ce:cd:f9:e1:98:f8:21:c2:00:57:6b:
         b8:8d:f4:48:0d:94:81:26:9c:cb:dd:41:0a:91:2f:12:b2:c4:
         40:d4:ec:ac:cb:ee:35:a7:c8:60:2b:aa:15:2f:8d:30:79:a1:
         cd:c6:09:a6:12:e6:7c:f3:17:22:c0:b1:26:dd:c4:6a:0c:70:
         57:95:c3:cc:d5:7b:e5:56:1e:7b:c1:ea:23:0e:31:da:9e:21:
         ee:f5:f7:e4:c2:a3:48:66:8b:bb:94:46:9c:64:66:4a:e5:af:
         65:dc:e3:d7:ae:3c:ba:7a:bc:9c:7f:9b:ad:ab:00:fa:d1:cf:
         6b:0d:c5:76:2e:40:a3:d4:75:97:6b:93:3a:29:c5:32:22:a9:
         a7:f2:ee:3f:de:a5:83:5c:eb:72:70:46:ed:a8:14:58:22:c2:
         60:8f:87:68:fc:70:89:94:22:b7:2f:3d:c0:31:f7:dc:0e:38:
         82:e2:3a:7f:91:19:ff:ff:da:3a:14:88:b2:bc:17:30:30:9d:
         40:fc:2a:f8:3f:b9:9f:cb:0b:0d:56:ca:69:96:f3:c3:1d:1b:
         5d:d8:fa:02:26:88:d4:5b:01:70:1f:02:bc:e5:5a:42:37:d3:
         2d:5d:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org