Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.mft
File:                     3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.mft (raw, json)
Hash identifier:          Icj39HO2hsM8+XxoF7GwUJsN6jxcEN1AYOFYqreJbu8=
Subject key identifier:   58:21:34:36:BC:FC:A3:45:7C:7B:D0:FB:3A:80:9D:75:A2:1F:C7:C3
Authority key identifier: 3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5
Certificate issuer:       /CN=3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5
Certificate serial:       3C7852C4B126FBCB8D9C83C5A1664CE84699E1B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.mft
Manifest number:          3F
Signing time:             Mon 15 May 2023 12:16:53 +0000
Manifest this update:     Mon 15 May 2023 12:11:53 +0000
Manifest next update:     Tue 16 May 2023 14:18:53 +0000
Files and hashes:         1: 3138392e35312e3139322e302f32302d3234203d3e203238333532.roa (hash: tW2HRaT1A3T77ucjxAmi2noYopNYKZfgGjZKhJhhvN0=)
                          2: 323830343a6165303a3a2f33322d3334203d3e203238333532.roa (hash: FBdkVLh72CnttRqu0vbhOWspTWpKuqYDo8iDTxhuEDY=)
                          3: 3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.crl (hash: rVaaLCh+jz4mG44wKKqcc7G/3rlobCJjlVyaax6hGwc=)
                          4: 3138372e302e34382e302f32302d3234203d3e203238333532.roa (hash: +o/BW5YEMkq7HA4XxuwBmnR640ZCDqqFCTiaieGN5p8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:78:52:c4:b1:26:fb:cb:8d:9c:83:c5:a1:66:4c:e8:46:99:e1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5
        Validity
            Not Before: May 15 12:11:53 2023 GMT
            Not After : May 16 14:18:53 2023 GMT
        Subject: CN=58213436BCFCA3457C7BD0FB3A809D75A21FC7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1a:98:18:ce:14:f7:b9:b4:25:8f:db:92:35:
                    e5:61:2c:d6:b2:2c:f6:fc:ee:5a:c5:da:d3:af:58:
                    64:75:64:c4:5f:37:b0:f5:97:a9:94:52:2f:ce:82:
                    10:1a:95:b4:23:48:70:11:99:49:23:55:fd:b9:2b:
                    ae:a8:25:d7:9b:e4:ea:82:fc:de:bf:1a:a3:ea:cc:
                    9d:b7:ef:9e:6f:9d:c0:ce:fe:99:4b:52:84:54:7b:
                    a3:d9:80:fd:50:a7:fe:2b:b7:c1:50:56:75:b9:f2:
                    c0:75:5a:71:d3:91:4e:53:ab:b3:bb:0e:03:dc:29:
                    96:9b:e6:dd:35:cb:e2:26:69:38:bd:29:cc:53:90:
                    b3:9a:13:7b:9c:97:56:9c:ed:4a:14:7e:98:87:2c:
                    85:03:6b:e9:6c:35:cf:19:b8:b8:b5:f5:33:4f:4a:
                    a8:2a:31:7b:0d:53:6b:de:88:86:5d:4e:71:77:59:
                    43:c5:c2:9c:d5:8e:26:6d:04:9c:ab:9b:4e:a2:86:
                    c9:ef:e6:19:f9:37:3f:6d:9a:02:7d:67:21:0f:5c:
                    15:27:e8:cc:f0:19:2c:5b:3c:7c:1e:9d:53:a5:f5:
                    26:9e:7a:5c:fc:54:1e:e2:67:44:13:dc:42:56:87:
                    78:c4:e6:00:20:d6:5f:ab:a9:ca:c0:2f:5e:76:0b:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:21:34:36:BC:FC:A3:45:7C:7B:D0:FB:3A:80:9D:75:A2:1F:C7:C3
            X509v3 Authority Key Identifier:
                keyid:3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:56:3b:08:48:18:ce:fe:77:21:fe:91:6f:32:29:c9:03:
         f7:6a:57:72:10:57:06:d4:a0:1f:f1:c4:90:e6:c4:43:f1:4f:
         e2:bd:a3:82:8c:32:57:f5:5e:d2:5b:1f:fd:4a:70:18:d1:12:
         8d:46:b8:a7:64:cc:b8:5f:4b:20:78:71:7c:40:c9:9f:14:fd:
         65:87:3d:87:73:bd:9e:f9:05:01:c8:88:27:69:35:99:76:dd:
         15:fa:60:f2:02:4c:2c:b3:6d:d6:cc:d4:bd:2f:f6:67:06:24:
         58:06:c4:cd:1b:ad:e2:51:81:24:42:86:a3:68:ee:6d:10:f6:
         73:6d:c0:6b:94:0a:69:f5:10:d5:d1:4e:a9:a9:4c:15:65:06:
         3c:fa:29:65:0a:ea:7d:88:49:28:f5:27:0b:0f:70:39:65:32:
         84:e0:85:11:f9:1e:3a:81:37:39:89:25:2a:63:16:49:bf:98:
         07:bb:e1:9a:f8:52:9f:35:74:04:7b:5b:1f:b4:87:9d:62:35:
         41:c2:28:ae:3e:93:e6:8d:42:08:96:df:1c:04:c6:ea:cf:d8:
         a7:c4:4b:9f:49:ac:12:0b:c7:17:f4:95:8f:f4:3d:f1:1a:bb:
         51:4f:86:ed:a0:bd:9e:2e:fa:a5:e1:5f:8c:b4:17:15:20:d7:
         1d:83:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org