Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.mft
File:                     070EA8E1952151A5527479507E6D4DB57EAC2C66.mft (raw, json)
Hash identifier:          TBppIKaZIFf8sdYH3qChU89ALLFw7qrKrTs2QMQza08=
Subject key identifier:   50:5C:BA:60:21:21:FD:F8:16:AC:EA:CB:1D:6A:8A:8F:A0:28:21:28
Authority key identifier: 07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66
Certificate issuer:       /CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
Certificate serial:       789EC45E479A84BAE5AF998AA3D10D467CC32D3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.mft
Manifest number:          D1
Signing time:             Mon 15 Apr 2024 04:26:14 +0000
Manifest this update:     Mon 15 Apr 2024 04:21:14 +0000
Manifest next update:     Tue 16 Apr 2024 06:05:14 +0000
Files and hashes:         1: 323830343a366638633a3a2f33322d3332203d3e20323730363638.roa (hash: iVNC4Cr+/j7rssJfMNGBHRnv/ONKVWfMDYn2IMcunFA=)
                          2: 070EA8E1952151A5527479507E6D4DB57EAC2C66.crl (hash: nP2TUSPjGHu+Aq10tD4nJZv+m/OPO/j86g297SiaB5M=)
                          3: 323830343a366638633a633030303a3a2f33342d3334203d3e20323730363638.roa (hash: sKE3d1qsOc+WhU9HiX3iW9ZxDxyAgsU6vo0GHnCBrko=)
                          4: 323830343a366638633a383030303a3a2f33342d3334203d3e20323730363638.roa (hash: d4bKJUrDrgBvWLVWe1WP697/Q0yHmu87hULxOrxCJj8=)
                          5: 323830343a366638633a383030303a3a2f33332d3333203d3e20323730363638.roa (hash: IT/f8oj9eOobgRrI1AJIkI+u6EG2kNOognaALCP7RFc=)
                          6: 3137392e36302e3133322e302f32322d3234203d3e20323730363638.roa (hash: iVAuwkoKM3q5/eAx1K2eeZYSGAns4zPiZd9p8Q1bCLQ=)
                          7: 323830343a366638633a3a2f33342d3334203d3e20323730363638.roa (hash: SX7Q8JSjmWghr+Xd4pJVX9Q1+pqUREki4OKJwLIpEgc=)
                          8: 323830343a366638633a343030303a3a2f33342d3334203d3e20323730363638.roa (hash: FVLYjSvBEezOfZXeQU95bq/Zfs64L4V6zqmWhUsPD5M=)
                          9: 323830343a366638633a3a2f33332d3333203d3e20323730363638.roa (hash: 9vcvij1myr5qVSZozEiIW47y6S7vYXwKv3HpW4u8u0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9e:c4:5e:47:9a:84:ba:e5:af:99:8a:a3:d1:0d:46:7c:c3:2d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
        Validity
            Not Before: Apr 15 04:21:14 2024 GMT
            Not After : Apr 16 06:05:14 2024 GMT
        Subject: CN=505CBA602121FDF816ACEACB1D6A8A8FA0282128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:13:96:1e:56:a3:dc:5f:fb:25:15:fa:29:
                    7a:d2:fd:ce:a2:92:36:2f:09:06:6d:96:28:37:eb:
                    03:1b:cc:9b:b0:7a:e4:4f:36:31:27:d2:bd:84:ed:
                    1f:4f:55:66:0c:12:fa:d1:15:2b:2c:a5:dc:40:a2:
                    ef:9d:64:45:04:ba:d7:2a:ba:ec:48:49:08:dc:4f:
                    de:ea:25:e7:c2:82:56:d2:73:46:30:e5:f1:95:80:
                    05:e2:de:96:59:8a:2c:30:42:9e:86:cf:f8:d4:6a:
                    47:38:e8:b0:d1:24:a7:00:bf:f2:a4:aa:67:f9:0d:
                    3c:f3:00:46:4a:f4:7f:49:33:e1:06:d9:5f:ff:57:
                    d8:4d:3b:0e:28:f4:b5:82:dd:03:54:60:a3:b8:1e:
                    1c:c0:ed:d3:5f:89:5c:47:98:b5:25:4b:0e:2a:0c:
                    9f:88:77:ab:de:05:50:f1:65:a0:b6:a1:4d:cd:b8:
                    d2:3f:a0:5a:1a:b0:30:a5:82:fe:13:db:a6:cc:04:
                    1e:40:57:0c:63:61:5b:42:aa:56:94:16:42:73:29:
                    df:5f:8d:a2:60:94:72:96:0c:99:20:d3:72:17:03:
                    11:10:f0:9b:8a:1f:54:7c:e3:68:1e:2a:76:06:5d:
                    f2:0f:b2:83:c1:da:db:8d:dd:f2:f7:d3:3b:dd:ef:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:BA:60:21:21:FD:F8:16:AC:EA:CB:1D:6A:8A:8F:A0:28:21:28
            X509v3 Authority Key Identifier:
                keyid:07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:27:ea:78:1d:45:b7:6e:71:4b:1d:61:23:9f:aa:c4:67:bb:
         7a:7d:ab:50:57:1e:0d:21:58:1d:89:ef:ae:e3:b3:f4:af:bb:
         2a:c9:7c:df:de:94:a1:fa:ab:76:6e:75:5e:6f:75:af:3e:8d:
         70:2e:a4:2e:93:f4:e3:d2:bd:96:0c:b1:be:1b:96:ec:87:53:
         56:ef:29:fa:44:87:17:9a:94:a0:59:e2:ce:3b:d5:14:a8:0e:
         35:8b:f6:a0:79:71:1a:2f:6f:97:a1:1f:ce:6e:31:60:75:df:
         9b:4a:90:04:6f:8c:bd:3e:6f:85:c8:15:8d:b9:ca:e3:c4:cf:
         6b:43:19:12:25:98:10:a7:34:e8:51:b4:ef:a1:d9:fa:aa:69:
         67:b5:d2:0a:1e:8b:7b:d5:37:01:2b:55:09:07:7a:9a:7d:1e:
         3f:97:d0:fa:02:20:5e:b0:6e:7b:00:9a:61:00:78:1c:ab:09:
         d3:16:ce:7b:00:88:06:f8:ea:8b:55:ec:18:91:ea:ec:f9:57:
         6d:c3:ee:0f:96:5c:43:75:76:71:25:c9:8a:d7:69:60:a7:96:
         ae:76:14:7c:6e:b8:4e:7a:6a:ac:de:f2:7f:0b:55:67:45:89:
         92:c6:3a:9d:29:c0:de:be:01:44:93:eb:a7:32:1b:7e:cb:f2:
         db:f0:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org