Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/470FF6A2012E1FA7944856A4F3B10523D0D9F574.mft
File:                     470FF6A2012E1FA7944856A4F3B10523D0D9F574.mft (raw, json)
Hash identifier:          CE3eqvsoAjn5ccTCA2koXaGG752n1bYHh2kPCw9wh0w=
Subject key identifier:   DB:B0:0A:E0:56:2C:CA:1F:70:83:7C:FD:88:6A:D1:68:1A:36:81:43
Authority key identifier: 47:0F:F6:A2:01:2E:1F:A7:94:48:56:A4:F3:B1:05:23:D0:D9:F5:74
Certificate issuer:       /CN=470FF6A2012E1FA7944856A4F3B10523D0D9F574
Certificate serial:       7668A380B231B041FF935CBD02E48C42AC0AD73B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/470FF6A2012E1FA7944856A4F3B10523D0D9F574.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/470FF6A2012E1FA7944856A4F3B10523D0D9F574.mft
Manifest number:          6F
Signing time:             Wed 22 Mar 2023 15:32:30 +0000
Manifest this update:     Wed 22 Mar 2023 15:27:30 +0000
Manifest next update:     Thu 23 Mar 2023 16:09:30 +0000
Files and hashes:         1: 323830343a336538633a3a2f33322d3332203d3e20323636363035.roa (hash: 0xCaZMs1dBZJJzgn5O+eV6r3fEJDQgA2JHng8zEEtBg=)
                          2: 34352e372e3134342e302f32342d3234203d3e20323636363035.roa (hash: 803bkBRA4uUSUZAob5Zo+l6JxF5CVNPzQDj7yf+500w=)
                          3: 323830343a336538633a3a2f33332d3333203d3e20323636363035.roa (hash: OIA53ghZ8yZsSCI9N0kuvKycG0OIo6Mc2TJotf23oy0=)
                          4: 34352e372e3134342e302f32322d3232203d3e20323636363035.roa (hash: l3rFY63RMUOTBuqUHIzqbAUT9ectdnirSRslFwmoh3A=)
                          5: 34352e372e3134362e302f32342d3234203d3e20323636363035.roa (hash: bvmpwIvKysl6YMnJydbhYkHROI1dAmkcONgfcDro7wQ=)
                          6: 323830343a336538633a383030303a3a2f33332d3333203d3e20323636363035.roa (hash: WIaS41U3OV+GfxZJPRpogcbXyqQRPHjC9KeIMoFavYM=)
                          7: 34352e372e3134352e302f32342d3234203d3e20323636363035.roa (hash: uAlZ65jsXqywqAmBA0jkgww8xFh6DgMoNqYvGO20qWg=)
                          8: 470FF6A2012E1FA7944856A4F3B10523D0D9F574.crl (hash: NoE4nKeV+67UWejdiaOY5/3SUr64P5MQ81Tv7BK9hFA=)
                          9: 34352e372e3134372e302f32342d3234203d3e20323636363035.roa (hash: 7VrtAHlWPLggWfCAwO2czt2CZArh8h3miDtYkCvWmHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:68:a3:80:b2:31:b0:41:ff:93:5c:bd:02:e4:8c:42:ac:0a:d7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470FF6A2012E1FA7944856A4F3B10523D0D9F574
        Validity
            Not Before: Mar 22 15:27:30 2023 GMT
            Not After : Mar 23 16:09:30 2023 GMT
        Subject: CN=DBB00AE0562CCA1F70837CFD886AD1681A368143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:7e:68:21:ac:5d:1b:1e:ad:73:97:a7:75:
                    53:11:04:52:23:d5:fd:87:9e:b3:1a:1a:cc:4c:2b:
                    b4:0a:40:b0:55:70:39:cf:e3:af:b2:85:8a:a6:d0:
                    fc:97:5b:ff:a8:df:de:92:be:c2:a5:f7:57:33:57:
                    ab:58:7e:f5:fc:fe:7d:7c:eb:80:69:84:10:27:11:
                    4b:ac:6b:4b:82:24:13:21:81:67:da:e0:6c:cf:61:
                    97:42:fa:d8:ae:06:f2:f8:af:33:b1:f3:39:2d:16:
                    2b:1a:bd:22:f0:ea:7f:03:29:f3:25:e2:25:2a:b9:
                    11:37:77:11:1c:82:d8:d1:eb:9f:3b:5e:63:af:c7:
                    d9:63:95:05:17:09:22:6a:dd:07:f8:5d:df:ee:71:
                    09:4b:33:47:4b:0f:9f:c0:8c:91:26:14:27:4e:d5:
                    00:ca:be:6e:57:97:a6:d5:0b:00:65:2c:03:4e:58:
                    63:a1:b4:a7:df:ff:91:82:d6:12:46:fc:0c:7d:a6:
                    18:59:38:9e:a1:98:af:1d:82:99:5c:b2:49:58:e3:
                    d9:b1:40:39:83:d8:83:b9:81:28:32:79:69:00:7b:
                    48:ff:3f:7a:28:10:84:6d:ae:09:64:33:54:a6:34:
                    83:f7:5a:92:ec:96:73:9d:33:9b:10:f1:ed:5f:41:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B0:0A:E0:56:2C:CA:1F:70:83:7C:FD:88:6A:D1:68:1A:36:81:43
            X509v3 Authority Key Identifier:
                keyid:47:0F:F6:A2:01:2E:1F:A7:94:48:56:A4:F3:B1:05:23:D0:D9:F5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/470FF6A2012E1FA7944856A4F3B10523D0D9F574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/470FF6A2012E1FA7944856A4F3B10523D0D9F574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/470FF6A2012E1FA7944856A4F3B10523D0D9F574.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:85:9a:84:48:5a:f4:b2:4e:42:0e:09:5c:80:46:54:8a:5b:
         66:fe:ad:81:fd:52:c5:fb:30:23:ac:23:24:60:d9:5f:03:59:
         6f:09:4c:e3:e3:c9:f6:4e:3a:29:71:f3:11:b9:d4:21:f9:3e:
         6f:11:27:ef:b7:53:66:e6:a8:7b:5e:91:6d:9a:0b:3c:81:07:
         22:6a:ae:b2:f2:63:c6:dd:df:fd:a4:4e:ca:93:30:6b:9a:02:
         25:79:57:5e:69:41:19:72:2e:79:42:9a:ee:88:dc:83:8b:c1:
         b9:ec:eb:2e:ff:15:b2:42:03:0c:01:c5:bc:a1:e9:96:2b:8d:
         8a:67:a9:41:2f:9d:c3:4b:bc:ab:de:1b:81:72:ab:ec:11:6f:
         91:ca:a8:e7:c4:d8:8a:b9:71:be:6a:39:50:f6:bf:79:ea:c8:
         4a:fe:8a:51:6e:a3:e5:44:60:c9:4a:e3:06:55:13:95:01:3e:
         7c:3f:16:1a:d7:02:e4:b4:fa:f0:79:6a:70:03:8a:40:fc:fe:
         45:4a:ff:a0:bf:94:8b:54:56:e4:d6:84:2a:36:0d:73:89:1a:
         aa:b7:1d:a9:e4:55:11:91:c0:41:3b:00:d4:a5:82:52:63:e3:
         44:e2:7c:14:6b:be:9d:56:70:90:06:3b:00:5c:39:67:3d:77:
         9e:9a:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org