Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.mft
File:                     6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.mft (raw, json)
Hash identifier:          Eeu/9JfdfLmsOiFK+cJH9KOs3u4AsKhyQOE98j+je7w=
Subject key identifier:   21:55:C1:22:A7:81:B1:3B:31:73:CA:1A:21:55:1C:88:2E:77:32:78
Authority key identifier: 6C:A3:D9:BB:49:D6:D6:6C:52:97:C1:DB:89:7B:FB:BB:35:61:5B:D3
Certificate issuer:       /CN=6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3
Certificate serial:       38E46CC51A938EFF7B51DC07B1468AFE3DB65BB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.mft
Manifest number:          5F
Signing time:             Tue 02 Apr 2024 11:50:00 +0000
Manifest this update:     Tue 02 Apr 2024 11:45:00 +0000
Manifest next update:     Wed 03 Apr 2024 15:09:00 +0000
Files and hashes:         1: 34352e3136312e3138342e302f32322d3234203d3e20323638353132.roa (hash: 79JNPiqSnz/1ph12W9NLnq6CwkRFm6XrWeEK585vfOA=)
                          2: 6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.crl (hash: 1MS9YnjFBTXQC5QiCQNuJR+v6w/sQY4/cGdWHu88nOA=)
                          3: 323830343a353235383a3a2f33322d3334203d3e20323638353132.roa (hash: MBhwR1AtBXG2NmFB84K9wrywh/cUq1sFnlgR1gWqPqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e4:6c:c5:1a:93:8e:ff:7b:51:dc:07:b1:46:8a:fe:3d:b6:5b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3
        Validity
            Not Before: Apr  2 11:45:00 2024 GMT
            Not After : Apr  3 15:09:00 2024 GMT
        Subject: CN=2155C122A781B13B3173CA1A21551C882E773278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d3:b7:d4:be:ed:e4:49:a6:ce:43:eb:c3:b2:
                    e7:52:70:6f:51:3d:31:c6:c7:5a:8e:5b:35:a9:bf:
                    43:c0:8f:bd:84:05:35:b8:c5:cd:80:4d:80:de:5f:
                    97:08:bf:bd:04:44:0c:69:bc:4c:d4:c1:51:e0:32:
                    bf:fc:05:39:f1:d9:94:f3:b5:82:36:e2:50:7c:bf:
                    b5:30:e0:49:c8:82:94:59:ec:e9:ef:e4:66:5d:82:
                    27:37:6a:5c:e6:50:b8:5b:d2:03:77:0e:a6:a0:36:
                    01:ed:c1:24:d2:12:d5:b4:8e:e1:ce:cf:6a:8c:2d:
                    1c:4b:ca:f9:f6:14:6e:60:11:03:b9:7b:7a:2e:be:
                    43:c8:d3:57:a5:a8:28:16:10:4e:37:7e:77:cf:44:
                    06:35:7f:17:9d:30:bf:1e:9d:5c:8c:79:0b:cc:0c:
                    06:3d:2f:1b:2d:8f:be:d9:15:f6:b3:f6:a1:94:95:
                    bd:ad:ec:1f:c3:6e:6f:4c:1a:34:c6:01:f3:4e:68:
                    e1:0e:7e:cc:c3:13:dc:bb:79:d7:6a:7b:45:20:72:
                    7b:25:60:26:c1:03:09:4a:b5:e6:5a:d7:90:93:49:
                    50:8d:6e:05:a9:86:49:3f:e0:f5:f7:33:51:b6:84:
                    1e:1f:81:25:4d:95:78:7b:bf:6b:ae:97:15:2e:b1:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:55:C1:22:A7:81:B1:3B:31:73:CA:1A:21:55:1C:88:2E:77:32:78
            X509v3 Authority Key Identifier:
                keyid:6C:A3:D9:BB:49:D6:D6:6C:52:97:C1:DB:89:7B:FB:BB:35:61:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:16:7a:92:d6:de:bd:ad:77:9f:88:5a:0d:ca:61:19:c4:18:
         da:c9:d2:5d:1c:75:09:bf:7a:40:73:be:83:fb:cf:d5:10:95:
         df:b6:a8:4a:48:86:39:b8:d4:67:71:4e:99:63:f3:ad:a8:51:
         27:9b:66:f8:f8:10:73:82:20:1a:88:33:2c:04:b9:b2:42:37:
         ce:87:37:6d:cb:fa:19:38:02:9f:ce:41:aa:93:f6:46:f3:9e:
         7f:90:02:d6:a2:ff:aa:7d:8e:e5:2b:74:c4:9f:61:61:f8:8f:
         e3:b0:14:fa:b8:1f:90:87:6a:6f:fd:27:2a:e1:2a:30:02:83:
         eb:b6:d5:0c:83:6d:8c:0e:f6:77:01:ff:56:dd:38:38:f4:86:
         46:ec:ab:fb:c8:9f:ab:bc:8b:38:20:ab:86:ff:53:d5:c4:35:
         c6:49:ef:09:15:77:4b:14:bd:c3:80:89:b9:1c:9c:26:ae:b2:
         b8:3f:15:d3:bc:88:2f:fa:3b:f9:54:fc:85:f0:69:a4:b8:a0:
         24:f4:74:43:26:1d:ba:7e:ac:b6:b5:64:d8:bc:79:f6:15:8d:
         6d:7a:10:86:f3:38:1e:a6:76:62:ea:9f:a3:1c:45:35:12:f8:
         67:9d:63:b0:1f:31:b6:aa:03:e2:97:dc:57:50:a4:c5:59:68:
         f0:4b:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org