Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.mft
File:                     6409C080E90CD4DF34A2B2740447E95499B2DF14.mft (raw, json)
Hash identifier:          9Ris5nunMPxlsb3W3mKVEcOnYVVGg4aXn+33TA5+n+Q=
Subject key identifier:   EA:16:4D:B8:ED:1D:27:86:7D:8E:CB:5B:E4:A1:CD:BD:6D:BC:40:BD
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       645C5E8AE0D03DB7B30CEE12C65B7EC8395D4156
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.mft
Manifest number:          03D0
Signing time:             Mon 15 Apr 2024 11:06:34 +0000
Manifest this update:     Mon 15 Apr 2024 11:01:34 +0000
Manifest next update:     Tue 16 Apr 2024 12:04:34 +0000
Files and hashes:         1: 6409C080E90CD4DF34A2B2740447E95499B2DF14.crl (hash: zOExzbAYl8s9ztSXy2B+gI0G6yEH8njrRNgVWXAnGko=)
                          2: 323830343a313137633a3a2f33322d3332203d3e203533303631.roa (hash: loGOwqE8ESEee4fctx5PM+ho/JLS3ARNqfLrpd2xgUE=)
                          3: 3138372e38352e3133302e302f32332d3233203d3e203533303631.roa (hash: Uju+vpakvmljbPsesV6p4Mfo/bSm7Ce6h8eu7aykqDE=)
                          4: 3139312e3234312e3139322e302f31392d3139203d3e203533303631.roa (hash: J3dpP70zh60ywb1D7zza+x36FQWty0TEeQkgZ074w00=)
                          5: 3139312e3234312e3232322e302f32332d3233203d3e203533303631.roa (hash: xPGX64d8YPz5CvstBdmhLTkNC1FofGYQccXbgqP9z9E=)
                          6: 3138372e38352e3132382e302f32302d3230203d3e203533303631.roa (hash: cyFnygU8pfD5yVXrmkDraBX8AHzUjSedyYiMsXFEdPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5c:5e:8a:e0:d0:3d:b7:b3:0c:ee:12:c6:5b:7e:c8:39:5d:41:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr 15 11:01:34 2024 GMT
            Not After : Apr 16 12:04:34 2024 GMT
        Subject: CN=EA164DB8ED1D27867D8ECB5BE4A1CDBD6DBC40BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:9e:ed:55:fb:9c:c6:5f:2d:2d:39:ce:7c:
                    9c:74:00:99:9d:f0:24:82:a4:b7:bc:a8:06:7e:cd:
                    fe:85:70:d7:1c:71:d1:d1:4a:03:68:53:92:b7:fe:
                    50:f3:26:99:63:23:54:e2:ce:35:d0:22:f4:79:e0:
                    62:62:b8:d2:06:34:b5:09:3a:d9:33:ba:22:a7:bb:
                    a5:51:8e:6d:5f:c3:1d:ed:df:85:e1:e4:c0:8b:10:
                    3d:2f:c3:f5:f2:53:e0:af:11:2c:49:ae:e6:e0:1b:
                    30:b3:5a:36:f7:eb:a9:bc:28:59:13:8f:d1:3b:ab:
                    a1:40:c7:b1:ee:55:27:18:0e:a9:e3:be:3d:d4:d1:
                    99:04:65:ac:0e:cb:9f:19:1f:d7:01:d3:69:05:54:
                    a4:cb:a2:93:e0:b6:90:cd:48:7d:e8:8a:59:c4:6b:
                    85:6e:c6:7e:75:e6:d5:3e:41:22:c8:93:ab:49:16:
                    58:c8:29:63:db:8a:71:aa:a9:a9:50:db:57:73:56:
                    11:b2:89:a2:64:ab:3f:11:ce:23:97:64:2c:dd:d0:
                    0a:e2:64:0f:10:1b:0e:9c:3a:a8:67:ec:06:5f:4e:
                    ad:0c:86:93:14:8b:77:fd:86:61:5c:1a:1c:8f:f4:
                    1e:4e:f8:9e:b9:d5:65:91:f5:c7:9c:5b:2a:ee:b8:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:16:4D:B8:ED:1D:27:86:7D:8E:CB:5B:E4:A1:CD:BD:6D:BC:40:BD
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b3:7d:49:d8:86:b1:d9:36:ef:34:7e:cc:db:c7:ef:d4:cd:
         29:ab:1d:c9:eb:09:54:12:6a:ed:76:ef:74:b1:9d:ec:9f:f3:
         ab:0d:c5:c4:21:98:9a:81:6c:97:3b:75:60:da:7f:1e:66:ff:
         dd:78:e3:fb:17:10:86:6a:bd:76:01:af:af:68:7c:a4:dd:5f:
         54:b6:a5:be:e8:5d:94:fe:3d:ce:08:76:0e:80:bb:3f:ce:23:
         86:ea:89:9d:73:14:8a:c1:db:62:59:82:4e:7f:3d:36:97:10:
         0c:33:dd:41:94:0a:73:d5:17:bf:ad:3c:9b:5d:39:0f:16:56:
         98:1b:d2:77:58:06:a1:da:06:38:cd:dd:09:2f:4c:ae:1e:b7:
         9c:46:73:cd:ec:e5:bb:c5:b7:db:96:79:1e:a6:19:d6:b2:65:
         06:d3:a9:cb:44:8d:73:be:27:15:1c:4c:7b:75:ed:0f:fc:71:
         9e:37:09:55:57:90:bf:02:a0:fd:af:42:a5:43:f1:63:47:ed:
         0e:6c:99:2f:08:ef:3d:25:f1:44:da:3c:fb:9e:99:de:47:05:
         d5:3a:aa:ac:1b:35:59:9a:b8:02:5d:3f:5f:c4:95:f8:6c:d3:
         a3:21:23:c7:d6:e6:83:75:19:77:51:dc:25:1f:0f:eb:f7:d8:
         ec:14:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org