Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/8D938B39CE32069FE231DEF54E4D9089AAEBDE62.mft
File:                     8D938B39CE32069FE231DEF54E4D9089AAEBDE62.mft (raw, json)
Hash identifier:          gN3UdJuHModbDTsLGxMFuTqzxfeL7XqFb1ZEQFKoM9c=
Subject key identifier:   98:31:60:E8:19:A2:5C:E5:29:B0:4B:C1:F2:66:B9:18:45:38:57:D4
Authority key identifier: 8D:93:8B:39:CE:32:06:9F:E2:31:DE:F5:4E:4D:90:89:AA:EB:DE:62
Certificate issuer:       /CN=8D938B39CE32069FE231DEF54E4D9089AAEBDE62
Certificate serial:       1435E173D813010C5A5D1704A369B5D312728685
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D938B39CE32069FE231DEF54E4D9089AAEBDE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/8D938B39CE32069FE231DEF54E4D9089AAEBDE62.mft
Manifest number:          71
Signing time:             Mon 06 Mar 2023 17:31:59 +0000
Manifest this update:     Mon 06 Mar 2023 17:26:59 +0000
Manifest next update:     Tue 07 Mar 2023 21:19:59 +0000
Files and hashes:         1: 8D938B39CE32069FE231DEF54E4D9089AAEBDE62.crl (hash: ngu4lxJHeqGhF3jo5KhAvf312p/pqwJuUqR0T/FLu+g=)
                          2: 34352e362e36342e302f32322d3234203d3e20323636313333.roa (hash: 0amPNHoTLrxhPnTRj8vcIGTRtRri3u7lIYQmK7SGX/M=)
                          3: 323830343a336232633a3a2f33322d3438203d3e20323636313333.roa (hash: WnR7z5fOGDAcwUPy4bX3LfKJmBk4ME9lwIyorjnsxHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:35:e1:73:d8:13:01:0c:5a:5d:17:04:a3:69:b5:d3:12:72:86:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D938B39CE32069FE231DEF54E4D9089AAEBDE62
        Validity
            Not Before: Mar  6 17:26:59 2023 GMT
            Not After : Mar  7 21:19:59 2023 GMT
        Subject: CN=983160E819A25CE529B04BC1F266B918453857D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:d8:fb:d7:ef:df:19:9a:52:75:43:6e:68:
                    2a:03:94:c5:04:06:e7:eb:38:63:f0:dd:a7:d8:93:
                    e5:78:83:81:0a:a0:bf:7a:23:3a:56:31:9d:20:de:
                    b3:1b:99:fe:03:96:af:46:33:69:ff:a3:68:42:9c:
                    84:89:35:29:26:10:52:a3:88:cc:bc:0d:77:a7:05:
                    13:b6:b8:ca:29:ca:ea:08:a0:3b:40:9a:a0:13:5a:
                    fb:8b:65:e6:2d:62:66:91:12:7a:23:94:ca:fd:c6:
                    da:37:c5:85:43:a0:b1:e8:24:77:f2:7a:b0:59:d2:
                    21:6f:8b:b7:44:5d:4d:d4:88:01:fd:1b:a7:f3:3e:
                    45:f7:fa:e3:e1:f2:7b:11:43:66:40:1f:eb:9a:f6:
                    af:7c:9f:c5:74:5a:e9:f2:fd:a3:f0:a1:0f:a2:e6:
                    87:9d:3d:21:4d:5c:6f:3c:74:fe:53:c3:38:8a:e6:
                    e4:2b:0f:a1:59:81:93:38:bd:a1:6a:bb:a1:0c:c5:
                    e4:cd:5c:34:6e:d5:6f:e9:0e:7a:f1:76:02:5e:69:
                    5a:18:89:3c:3d:5d:ee:f0:e0:67:f6:7a:5f:82:db:
                    5b:0d:3f:4d:7a:07:fb:cc:a9:02:26:9f:46:a7:7b:
                    ca:9f:49:f9:17:32:4c:19:0a:77:96:01:95:b3:84:
                    3c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:60:E8:19:A2:5C:E5:29:B0:4B:C1:F2:66:B9:18:45:38:57:D4
            X509v3 Authority Key Identifier:
                keyid:8D:93:8B:39:CE:32:06:9F:E2:31:DE:F5:4E:4D:90:89:AA:EB:DE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/8D938B39CE32069FE231DEF54E4D9089AAEBDE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D938B39CE32069FE231DEF54E4D9089AAEBDE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/8D938B39CE32069FE231DEF54E4D9089AAEBDE62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cb:d4:45:f1:2f:c7:c4:4a:e4:0c:c3:95:74:05:a6:9b:9f:
         9f:6b:a7:bc:12:fd:af:94:4f:09:42:af:c5:f0:75:27:87:0a:
         b4:10:34:38:1f:3b:5f:9a:6e:55:27:54:ef:16:d3:9c:d5:44:
         68:bc:90:69:5f:5c:e4:9b:80:23:6d:ad:43:d1:ff:c2:b8:4c:
         06:fd:6f:68:4b:aa:fc:f1:e9:33:b2:54:0d:5c:99:45:45:43:
         24:6c:a1:f3:6f:b4:09:9d:1d:b9:0b:85:40:c1:90:86:72:5b:
         10:83:b1:57:2e:03:3c:b2:a0:9e:71:e3:9e:8b:81:39:5f:bb:
         41:8f:bc:ea:4f:46:09:7e:de:23:5f:65:0f:31:17:42:b5:74:
         53:da:39:84:3c:31:24:2e:5c:f5:58:58:da:5f:fa:87:be:cf:
         91:39:3c:5e:16:3a:e8:c9:ce:3a:f8:be:16:b6:c6:b6:cb:bc:
         b5:51:37:09:af:ef:39:ca:17:bc:d1:4d:90:1f:90:6b:40:7b:
         a5:36:a7:6d:26:48:e0:5e:ba:e8:3d:d2:35:c1:42:cb:7f:67:
         a7:73:bb:a6:74:6d:8f:11:d8:67:84:7b:90:8f:4a:6e:18:d9:
         e8:e1:33:23:df:ec:d4:2c:a9:fa:3a:67:b8:82:fe:ba:5f:6b:
         ba:59:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org