Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.mft
File:                     D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.mft (raw, json)
Hash identifier:          sq9rp2JACs76dCl/c7N008LNZZEQ3Gc9yMextaBDbUQ=
Subject key identifier:   21:BF:9B:EE:A9:E3:28:85:AA:F3:7B:3F:B6:AD:1F:7B:C0:6B:8C:D8
Authority key identifier: D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C
Certificate issuer:       /CN=D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C
Certificate serial:       410447AE709A94F0BDF793F7D306E4DF27DB3210
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.mft
Manifest number:          CA
Signing time:             Mon 15 Apr 2024 00:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 00:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 02:30:00 +0000
Files and hashes:         1: 3133382e3230342e35322e302f32342d3234203d3e20323633393032.roa (hash: /aBmDWAF5LfF9ptZEjFE7DinIXdOJFhMh7DaQ6c5pHw=)
                          2: 3133382e3230342e35322e302f32322d3232203d3e20323633393032.roa (hash: /8MHPZefC24uXjpxmDZqCzSH32xdR6BrZZuX0tAN1mk=)
                          3: 3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa (hash: 3PNG7sOGC3bMtXkvvABPygMQ3j5ipzd9O0Kwnf2WNuI=)
                          4: D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.crl (hash: rlxly4YWSLtvdb8NN48UYBs04hGeLMuFrG2tPbXQvNg=)
                          5: 3133382e3230342e35342e302f32342d3234203d3e20323633393032.roa (hash: c4HghzPcNxRBiKgClqhOC40wFfy3Kt9J6NurmC6yXCs=)
                          6: 3133382e3230342e35332e302f32342d3234203d3e20323633393032.roa (hash: RHKw8SqjOIPTkMbIqA9R3jC3rL6HTjAN2hAGOzbYgAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:04:47:ae:70:9a:94:f0:bd:f7:93:f7:d3:06:e4:df:27:db:32:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C
        Validity
            Not Before: Apr 15 00:05:00 2024 GMT
            Not After : Apr 16 02:30:00 2024 GMT
        Subject: CN=21BF9BEEA9E32885AAF37B3FB6AD1F7BC06B8CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ab:69:df:aa:82:1e:92:e1:11:c5:26:85:58:
                    3e:c2:77:3b:c7:c1:ea:e4:76:74:0e:7b:87:a9:82:
                    47:25:af:d2:ac:4b:4e:7c:7d:9a:22:99:d7:1f:ba:
                    39:4c:ae:32:7b:bd:10:82:10:8a:5b:39:75:af:78:
                    10:2d:7d:9c:81:a3:6d:10:41:ae:e1:ad:2f:39:d2:
                    0a:fe:6c:c2:61:05:05:b6:1e:8a:49:f0:7a:09:fc:
                    15:6d:97:75:82:0e:14:18:5e:81:13:d3:44:ca:e2:
                    3a:ac:d0:f3:d4:e6:18:85:95:bc:44:97:19:10:f3:
                    07:ba:ef:02:54:f0:f3:a1:69:e5:e2:89:68:32:19:
                    ba:18:9a:14:3a:5b:10:b6:f0:8f:d4:d8:0f:6c:95:
                    dd:91:e1:a0:97:e6:46:bc:63:b9:e7:96:80:33:61:
                    e1:ed:ad:2c:6c:64:54:d7:50:9f:82:a8:34:18:a2:
                    16:df:47:2c:bf:95:20:bf:5c:c2:cb:8c:4f:93:ab:
                    f0:14:46:73:2c:97:af:a0:ce:bd:8a:8c:de:96:4c:
                    4e:e6:3f:1f:80:37:7b:0b:8e:07:53:eb:70:92:02:
                    9e:f9:39:5e:32:be:f7:cc:57:94:46:86:a0:03:23:
                    35:a5:8e:0e:20:19:15:47:ee:6f:06:d4:ad:fe:7e:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BF:9B:EE:A9:E3:28:85:AA:F3:7B:3F:B6:AD:1F:7B:C0:6B:8C:D8
            X509v3 Authority Key Identifier:
                keyid:D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:b8:ac:c1:7c:dd:33:e7:92:46:a7:de:4e:8b:2e:c0:fb:
         f4:d5:ce:5d:1b:f4:24:b5:38:94:8f:01:42:bb:29:89:df:c6:
         5f:16:09:fb:c4:99:b7:a0:8f:05:52:ed:60:3a:d0:e3:94:75:
         ce:9c:94:6a:6a:44:8e:46:7b:7a:9c:12:5d:34:90:fa:ba:39:
         bc:15:16:14:5d:ed:0a:fb:07:76:71:ba:f8:da:fe:0d:e9:19:
         79:28:4e:71:0a:98:75:5c:6a:dd:9b:37:25:bf:3b:67:a4:e7:
         54:d3:e0:dd:73:54:b3:12:aa:ab:63:f8:c7:95:57:5d:1c:a7:
         de:42:c2:bb:b4:77:37:71:ba:30:33:80:cd:1b:27:1d:43:19:
         e4:17:e8:ee:c4:ac:48:65:e2:ed:c0:4a:70:83:d0:5e:70:b0:
         0a:2a:6d:94:49:66:14:ec:93:4a:74:d9:4e:ed:38:70:41:30:
         c3:36:7e:1f:4f:a4:5d:59:22:0a:15:86:3f:02:03:bc:41:57:
         15:10:1e:23:22:78:40:7e:15:da:86:3a:27:5e:2b:eb:dd:3e:
         7a:20:13:ea:26:f3:0f:fa:3c:38:84:fb:2a:b8:bd:28:c6:43:
         b7:78:ea:99:dd:7d:b3:65:81:54:50:3a:ad:3e:b1:f0:b8:0e:
         d0:15:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org