Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.mft
File:                     089532F8915FBA77F2B07B59B91FADAD8FE95EB0.mft (raw, json)
Hash identifier:          3OwffN+PCENxOzyRUYMQ70lAnC7iqK+YerL1xsWOQR8=
Subject key identifier:   E3:50:C8:C0:49:DC:C3:47:69:27:C2:23:61:42:5B:CB:53:97:0D:79
Authority key identifier: 08:95:32:F8:91:5F:BA:77:F2:B0:7B:59:B9:1F:AD:AD:8F:E9:5E:B0
Certificate issuer:       /CN=089532F8915FBA77F2B07B59B91FADAD8FE95EB0
Certificate serial:       7A0157E473F6E70B427E2CE475351B49882D33CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.mft
Manifest number:          2A
Signing time:             Fri 03 May 2024 15:07:22 +0000
Manifest this update:     Fri 03 May 2024 15:02:22 +0000
Manifest next update:     Sat 04 May 2024 15:34:22 +0000
Files and hashes:         1: 3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa (hash: br3FAN1VjGnLSLhfwMfgywmNkMXafXesyeBEJ/qVe94=)
                          2: 089532F8915FBA77F2B07B59B91FADAD8FE95EB0.crl (hash: 2z6NblpLlrKG4nlgzvV10AgUA3IyNuc+KRBvNq55vq8=)
                          3: 323830343a333465383a3a2f33322d3438203d3e20323635343837.roa (hash: x1MVqcninbCtzqUhGnthRk4NhC4/6M0NeTdoi3B/gJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:01:57:e4:73:f6:e7:0b:42:7e:2c:e4:75:35:1b:49:88:2d:33:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089532F8915FBA77F2B07B59B91FADAD8FE95EB0
        Validity
            Not Before: May  3 15:02:22 2024 GMT
            Not After : May  4 15:34:22 2024 GMT
        Subject: CN=E350C8C049DCC3476927C22361425BCB53970D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:bd:58:44:ec:ce:46:82:00:1b:7b:3b:3a:
                    7f:5e:ef:6c:fc:23:fe:18:15:ce:1d:f7:de:f9:50:
                    11:dd:bf:fd:55:9a:ed:10:14:fb:8a:e0:88:bf:a6:
                    c2:63:ab:2f:b7:0b:5b:bc:7e:23:44:bc:a2:0d:2e:
                    cc:94:d3:b9:69:49:c5:97:4f:f4:af:03:d7:e6:f9:
                    cd:89:76:0b:ee:54:dc:b5:e6:8b:9f:59:b9:b0:ec:
                    e4:10:ce:40:19:45:d8:7b:61:8f:5e:32:59:b6:3c:
                    36:eb:7d:c7:78:da:6b:b7:71:f9:0c:60:a2:27:e5:
                    80:3c:27:f2:b5:ba:e0:61:6d:71:9e:5b:04:26:8c:
                    20:2b:34:35:63:84:5e:95:34:98:f0:be:f6:50:2c:
                    d3:4c:21:f3:e5:4a:85:64:0a:34:5f:4d:29:b7:12:
                    0d:49:85:27:db:b6:06:ea:9c:50:a4:12:12:68:a4:
                    0b:10:4d:3e:00:c9:18:a1:05:17:d1:e0:7d:ea:a0:
                    4a:c5:27:f9:8a:17:d9:50:3a:02:b5:54:0a:b8:4d:
                    4a:71:0b:7e:84:3c:16:03:aa:8a:51:9f:58:97:18:
                    ff:9d:eb:af:f5:73:71:d6:ac:37:70:71:30:ef:db:
                    41:3d:55:24:fa:80:1d:99:40:6e:3d:0d:16:ce:47:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:50:C8:C0:49:DC:C3:47:69:27:C2:23:61:42:5B:CB:53:97:0D:79
            X509v3 Authority Key Identifier:
                keyid:08:95:32:F8:91:5F:BA:77:F2:B0:7B:59:B9:1F:AD:AD:8F:E9:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:92:8d:4f:f2:90:f7:cf:76:c2:4e:ca:17:fb:ab:ec:92:79:
         31:d0:96:54:df:25:ff:8d:0b:26:72:be:c6:a7:7f:b5:5f:2a:
         dd:f7:13:9c:5b:08:92:39:74:12:58:f0:c5:30:e5:f1:90:48:
         c3:f0:06:4c:5d:5a:9b:73:90:a0:4a:42:7a:10:b9:ed:f2:f7:
         f8:d3:0a:4a:23:2d:db:c8:ca:74:22:ff:2c:fe:28:a3:91:fb:
         f9:6d:fd:f9:59:67:c9:fa:79:06:77:88:ac:d3:b8:c2:1d:85:
         8f:7e:83:9c:48:96:4b:e0:27:c5:fb:34:a3:dc:1d:6f:b3:5b:
         f1:f5:d3:b9:73:9c:57:5a:d1:41:d7:50:7c:7c:16:a3:35:74:
         2f:6f:0e:cb:54:5c:f3:44:e1:f9:88:1f:99:b2:cf:be:bf:6c:
         1d:cb:18:50:37:4e:59:81:77:b9:41:b4:69:5a:1a:63:be:76:
         5d:53:fd:e6:a0:b7:02:7e:15:85:7d:fb:43:eb:34:71:3c:29:
         d2:10:b8:a8:74:f2:c1:54:3e:90:f4:4e:aa:1c:be:89:f3:56:
         8d:a2:d1:cf:d2:ea:6b:af:2a:19:a4:aa:13:0f:56:5d:bb:44:
         bd:71:89:0b:ac:84:8d:83:59:d2:7a:ea:32:6d:11:cd:d2:33:
         61:c3:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org