Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E.mft
File:                     AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E.mft (raw, json)
Hash identifier:          hggYgAGSsbY76R9YIwWShebnZEAAhfrMvH94HNT6LRw=
Subject key identifier:   0C:96:A3:6F:73:1A:97:E6:51:9B:7D:1A:45:41:36:E4:A0:CE:00:33
Authority key identifier: AF:5A:A6:A1:D1:EA:B6:32:FB:04:6F:24:17:AE:3D:6F:CF:AB:B2:1E
Certificate issuer:       /CN=AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E
Certificate serial:       4AAEAD106390A8F3165F093E41F712D01C416217
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E.mft
Manifest number:          16
Signing time:             Fri 09 Feb 2024 09:08:07 +0000
Manifest this update:     Fri 09 Feb 2024 09:03:07 +0000
Manifest next update:     Sat 10 Feb 2024 10:52:07 +0000
Files and hashes:         1: 323830343a353866343a3a2f33322d3335203d3e20323638313630.roa (hash: qT76RqZb66EwMcMH7ggWXcoHNjJlZ6WvMCkD4r8IB5M=)
                          2: 34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa (hash: QEBSP9UEx/RsZ4ihv9BFGAApNYQm/lUW2nokKiOK0HM=)
                          3: AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E.crl (hash: AM1hGNQ7mLCTARYkOIM03yhY8MiffHTEHd6SPU0iojU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ae:ad:10:63:90:a8:f3:16:5f:09:3e:41:f7:12:d0:1c:41:62:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E
        Validity
            Not Before: Feb  9 09:03:07 2024 GMT
            Not After : Feb 10 10:52:07 2024 GMT
        Subject: CN=0C96A36F731A97E6519B7D1A454136E4A0CE0033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:21:eb:41:f4:ce:55:37:b9:0c:b2:78:9b:
                    cb:56:7f:2f:a6:aa:9d:16:bd:2a:dd:e3:47:6a:8f:
                    6d:c5:30:75:8a:f1:40:8d:e1:fe:1d:d0:92:7d:c6:
                    fe:04:b4:39:94:14:fd:59:23:65:09:34:27:d7:a4:
                    fd:6c:35:28:df:9e:5a:e0:59:c6:09:07:51:24:56:
                    08:ba:24:ba:e7:41:20:44:9b:5b:9b:0e:81:17:48:
                    5b:79:18:6c:a2:a0:13:6b:59:0f:bf:e7:c9:a0:12:
                    4a:f2:e4:c4:d1:24:bd:81:a4:24:a2:bb:ab:03:43:
                    6e:a8:63:0b:18:d2:6d:6b:33:54:88:87:b0:68:8b:
                    bc:5b:5f:88:d7:4f:47:99:e2:fa:36:ad:86:ce:48:
                    5e:af:49:01:a6:5e:05:8c:df:79:fa:fa:57:a6:2a:
                    61:50:ec:e1:c5:2b:a2:bf:82:46:51:30:c0:3d:8e:
                    f2:64:be:28:d3:71:91:a7:99:d3:a3:b4:f9:f7:3f:
                    cb:17:dd:87:8f:16:d7:b9:8a:9d:f4:e6:a3:2a:fc:
                    f6:17:93:44:47:d9:08:cf:cc:f4:6e:b2:09:d1:6b:
                    be:e7:78:e7:ea:35:b9:41:cb:92:ca:11:bc:5a:ab:
                    6e:ad:7d:32:92:c1:40:ca:49:33:63:53:8f:db:01:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:96:A3:6F:73:1A:97:E6:51:9B:7D:1A:45:41:36:E4:A0:CE:00:33
            X509v3 Authority Key Identifier:
                keyid:AF:5A:A6:A1:D1:EA:B6:32:FB:04:6F:24:17:AE:3D:6F:CF:AB:B2:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/AF5AA6A1D1EAB632FB046F2417AE3D6FCFABB21E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c9:e3:fe:da:b9:cf:34:f7:72:a0:18:8f:5c:ea:83:d4:09:
         af:e8:48:fe:b0:70:78:ca:d8:9e:3e:67:cb:51:17:1d:88:3a:
         5c:7b:c2:7f:4d:5a:b2:a4:2f:01:26:dd:2e:24:80:32:2d:1b:
         45:2c:94:15:10:b4:cd:5b:31:4e:23:f5:ec:6d:3c:1c:95:9e:
         39:de:6c:e6:11:99:1c:0a:41:7d:a5:04:dd:51:02:8d:10:e9:
         20:fe:80:3f:59:aa:fd:b2:7c:b7:c5:a2:a4:16:62:29:11:30:
         10:6b:d6:70:13:b4:fb:2f:30:32:f2:01:11:7f:2a:1f:5c:b9:
         d3:8c:5f:cb:c6:91:bb:84:08:24:6c:66:58:43:19:31:e3:c4:
         7f:a8:bd:9b:23:53:0b:42:d4:08:fa:f2:b4:cd:28:47:a4:f7:
         60:9d:5a:7c:7f:f4:0a:98:4d:56:09:c3:f7:36:35:72:bb:0e:
         4f:ad:7e:a7:9f:b5:5a:14:2d:cf:73:45:8f:cf:c1:12:22:52:
         62:ac:da:a8:12:4e:13:09:7e:5c:c9:13:21:b3:b3:cb:81:4b:
         c5:e9:e6:fc:f3:9a:c0:9d:35:0a:a5:82:7b:9e:9d:5d:5d:0c:
         16:f5:84:1d:d7:e0:a1:de:8c:47:6a:f2:f9:c7:17:aa:f8:c6:
         3e:97:71:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org