Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.mft
File:                     4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.mft (raw, json)
Hash identifier:          tTGoAfqeQ3vU/G3QeriTAA4vaTmimPlsgZyfq3A0268=
Subject key identifier:   30:84:51:5D:6D:9A:A0:F8:F6:B4:81:A2:3A:BC:E5:45:D8:7D:1F:2A
Authority key identifier: 4C:34:58:A0:1A:C9:50:A9:DE:1A:83:67:C6:F3:E9:6B:AF:09:B3:32
Certificate issuer:       /CN=4C3458A01AC950A9DE1A8367C6F3E96BAF09B332
Certificate serial:       433B17E4EF4160344CD061B094671984FD70ACF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.mft
Manifest number:          0A
Signing time:             Sun 10 Dec 2023 23:11:36 +0000
Manifest this update:     Sun 10 Dec 2023 23:06:36 +0000
Manifest next update:     Mon 11 Dec 2023 23:20:36 +0000
Files and hashes:         1: 4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.crl (hash: nS9XwUSW5ZUEgNkkVGZsTgDDRRMn7Maf9rxB5/M+a7U=)
                          2: 34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa (hash: c+MGpkJs/NJ2grD2bfVVkYAEJ7Pniaz//XeaELzHal8=)
                          3: 323830343a353534633a3a2f33322d3332203d3e20323632383939.roa (hash: YhtZO+m6A0EY6yWL1+guqra+ZUdCB758t2ySp7PWPtE=)
                          4: 34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (hash: bracTHcQiGH7kEAeCE59twepKxMjq8YlzM/dxAusoo0=)
                          5: 34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa (hash: 3mVQYib1J6Wx15ZW7c3qgW/Drz5bknDLM+gm96AG+KY=)
                          6: 34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa (hash: akmTAgGd9IYgBbdgnR7HP4WLo4VGT2fdKg9TQmqfW0k=)
                          7: 34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa (hash: r9ZTBJNkiWNHIm4gSNQbA/427TS5YLzRoK3ZXMrgnBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3b:17:e4:ef:41:60:34:4c:d0:61:b0:94:67:19:84:fd:70:ac:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3458A01AC950A9DE1A8367C6F3E96BAF09B332
        Validity
            Not Before: Dec 10 23:06:36 2023 GMT
            Not After : Dec 11 23:20:36 2023 GMT
        Subject: CN=3084515D6D9AA0F8F6B481A23ABCE545D87D1F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:58:be:db:03:5f:2b:1b:c7:a5:41:e1:51:45:
                    91:bb:57:d4:d1:d0:9b:3e:9b:00:f6:c3:f7:7c:89:
                    e0:86:44:e1:c0:64:da:d5:d4:14:9c:03:79:9c:4d:
                    2d:47:06:a1:25:44:70:9d:89:e4:16:6f:81:94:6a:
                    b6:74:09:79:50:21:3d:de:94:ee:53:0f:18:a8:7f:
                    63:40:97:f7:f3:92:9a:58:37:2c:18:bf:1a:c3:70:
                    d4:f0:5b:a3:1d:87:32:9a:b8:d7:5e:e7:ae:e2:fe:
                    96:b7:89:f0:a2:83:55:e4:93:c1:35:97:4b:e3:c9:
                    1b:ca:44:99:b9:82:07:aa:17:eb:e9:23:26:46:b9:
                    71:5a:24:69:de:64:6d:37:8a:ea:f5:b4:be:c2:2f:
                    12:29:eb:3b:af:20:9e:ff:98:2e:8c:74:1e:45:99:
                    8c:aa:4f:07:28:9f:f2:1e:73:a3:33:a7:dd:ab:25:
                    d6:c7:ad:f1:74:59:fe:f3:f9:6e:c2:ea:14:1e:80:
                    89:fc:a7:d5:48:42:62:74:8a:41:53:a9:54:91:a7:
                    ef:b4:60:2a:7d:2b:48:ef:d1:25:8a:48:5d:6d:b6:
                    29:e0:ed:27:ff:68:22:ee:bc:84:5c:77:8f:e9:3c:
                    a4:03:dd:92:3c:9c:81:15:90:74:96:64:4c:41:16:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:84:51:5D:6D:9A:A0:F8:F6:B4:81:A2:3A:BC:E5:45:D8:7D:1F:2A
            X509v3 Authority Key Identifier:
                keyid:4C:34:58:A0:1A:C9:50:A9:DE:1A:83:67:C6:F3:E9:6B:AF:09:B3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4f:6c:8f:8c:cc:4d:e5:da:88:26:9f:a3:2b:a8:8c:fb:41:
         f2:10:40:a4:bc:9a:4b:52:e5:6d:9b:7a:8a:a2:a3:b9:47:39:
         93:76:f9:3f:14:aa:06:d2:eb:41:02:be:aa:47:74:c0:2b:ef:
         2f:8f:f5:a1:55:11:ae:a1:85:89:20:de:69:90:f8:db:4a:37:
         b5:a0:0b:f6:52:0c:32:49:a2:80:b4:5b:8d:5d:b0:21:77:25:
         6a:52:01:7c:a7:bf:10:f6:cf:c1:3d:83:49:88:da:59:62:00:
         c7:da:92:4b:22:7b:33:ba:8f:36:f0:0d:8d:6a:f0:49:73:bc:
         cc:43:be:53:5f:c6:c6:d9:a6:4f:3e:c8:0e:db:a4:9e:53:77:
         45:b6:90:4b:e4:e4:49:f1:f1:f3:89:5b:68:8e:42:f3:cc:1d:
         3a:c5:76:3c:23:01:c3:7a:01:3b:a0:18:b9:fc:08:a1:e9:78:
         f1:62:c2:73:3c:7f:84:f7:8b:11:3f:41:67:5d:52:bf:4d:82:
         b8:05:ad:f7:10:7b:79:cf:f7:a1:fa:b5:ec:6a:1f:97:f7:71:
         5f:34:af:4c:8f:11:fc:cd:a2:ea:7e:d0:fc:e4:bd:3b:fe:67:
         44:03:77:8d:5d:04:c2:d8:d7:be:26:d2:f8:62:e3:58:96:0f:
         83:31:42:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org