Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.mft
File:                     3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.mft (raw, json)
Hash identifier:          CV/61c954U3+cv3bBNjgYlibpGdgXcBqAVtXuQxBTWg=
Subject key identifier:   B6:A6:1F:B1:45:2E:9E:8D:56:05:97:BF:D1:70:2C:86:76:6D:EF:AC
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       132BBCA4B5EEC1982B4ABBA8C79F2D1BA30D22A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.mft
Manifest number:          17
Signing time:             Tue 23 Apr 2024 10:28:29 +0000
Manifest this update:     Tue 23 Apr 2024 10:23:29 +0000
Manifest next update:     Wed 24 Apr 2024 13:49:29 +0000
Files and hashes:         1: 323830343a363563383a3a2f33342d3334203d3e20323639353134.roa (hash: wRWy+nnNFSFfLfX30qrTbe/Nolfeh4Q2rqNwLA6/+gg=)
                          2: 323830343a363563383a633030303a3a2f33342d3334203d3e20323639353134.roa (hash: QDPJ8P+5A5ihHQJV6S2KGqQ9Cr4kaZ1Bj0U+/mpygRw=)
                          3: 34352e3138362e3233382e302f32342d3234203d3e20323639353134.roa (hash: nG2WRJyndrk7RKZa4NqHPfhbcY5rwv5EcAs3sy42Gog=)
                          4: 323830343a363563383a383030303a3a2f33342d3334203d3e20323639353134.roa (hash: GjmtUhWL5wqxCFeE1tWcNHTwnZ5Zv54dqu13xmoJhZk=)
                          5: 323830343a363563383a343030303a3a2f33342d3334203d3e20323639353134.roa (hash: L1rXR1cJiS2y4qE3chkDDWghk8GPY62WjJzohttksHY=)
                          6: 34352e3138362e3233382e302f32332d3233203d3e20323639353134.roa (hash: UbvtdG83cTyj04qq2tCPkYnE5JygQKdFe8dZrPVVAQo=)
                          7: 323830343a363563383a3a2f33322d3332203d3e20323639353134.roa (hash: DmudeKdVIMD/51vU6PZ+z8cG6olIapashH57JVSZsXM=)
                          8: 34352e3138362e3233362e302f32332d3233203d3e20323639353134.roa (hash: WmjJLNPGnJxTOW9UVnHMlS9ORU9XevBQqZc5MvnrbNw=)
                          9: 34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa (hash: atJ/bXtcN6IhwQPVMjxQgRbP6J50JATRbxF1TnSsL4g=)
                          10: 34352e3138362e3233362e302f32342d3234203d3e20323639353134.roa (hash: AYncZABqE/CkPEeChqPfi7HJmfyeilBEcHtbAz6Y180=)
                          11: 323830343a363563383a383030303a3a2f33332d3333203d3e20323639353134.roa (hash: lVdPGHGJIRs7YT0dyzMusxvPw2bWb55Noss8cpnIDcE=)
                          12: 323830343a363563383a3a2f33332d3333203d3e20323639353134.roa (hash: hS+EfG/oBllTT/npraQM6ohSZ+TU2PMAfX7JaVUWX/0=)
                          13: 34352e3138362e3233392e302f32342d3234203d3e20323639353134.roa (hash: 61SdSSmSuF+p2PMebvaAQhEytoWHtPIyp1tCxMjGcqM=)
                          14: 34352e3138362e3233362e302f32322d3232203d3e20323639353134.roa (hash: DyFTrxl+uVqORPUiSazQMawQoObrjceU9KPtebT2ny4=)
                          15: 3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl (hash: E/AMY8N9/SPo5m9+u+UwNFFll1l04BRdHlZKQc/eMjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2b:bc:a4:b5:ee:c1:98:2b:4a:bb:a8:c7:9f:2d:1b:a3:0d:22:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr 23 10:23:29 2024 GMT
            Not After : Apr 24 13:49:29 2024 GMT
        Subject: CN=B6A61FB1452E9E8D560597BFD1702C86766DEFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:12:16:33:50:07:31:47:87:58:86:66:56:
                    75:e9:48:06:1e:1b:83:bb:96:b0:31:64:c0:89:07:
                    62:2f:38:0e:68:46:b6:d3:f7:8e:52:d1:16:2f:c0:
                    8e:ff:13:c9:87:a8:ec:6b:65:7f:2e:8a:b2:92:53:
                    2c:df:24:fa:8e:72:12:05:06:40:98:87:29:18:bd:
                    83:c0:d8:7d:64:70:cb:d0:05:ab:9e:45:c9:43:34:
                    a9:5b:98:8e:d0:6c:94:23:45:50:e6:9b:5f:5e:44:
                    0b:95:d9:e5:01:8b:9a:11:bd:32:55:92:5e:0b:62:
                    07:6c:26:7a:ac:e1:ca:50:1d:43:ba:6a:cd:ae:c0:
                    47:95:49:f9:f0:e3:34:c2:bb:dd:b3:d8:87:6d:9c:
                    0f:69:86:db:ee:01:a9:62:86:1c:fd:5d:5e:fb:15:
                    b6:5b:b2:65:7d:4e:b5:fd:49:c0:e3:cc:a5:e0:a7:
                    b6:a5:05:2c:4e:99:fa:e9:f5:ff:d0:2d:d0:7d:42:
                    90:70:1a:1f:2f:34:26:ff:08:78:72:ed:ed:48:dd:
                    84:94:bf:85:24:a8:50:3c:0f:46:76:a3:5d:49:6d:
                    75:81:ad:7d:4a:a8:23:c0:d9:c3:a1:ba:95:0b:4f:
                    79:fd:14:49:7d:4e:84:f6:0e:9b:8b:2b:60:08:99:
                    3a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A6:1F:B1:45:2E:9E:8D:56:05:97:BF:D1:70:2C:86:76:6D:EF:AC
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7f:23:93:e1:11:5f:d7:7d:d8:3b:2f:08:94:13:a6:89:3a:
         50:84:d3:8d:73:3d:91:0e:94:76:3c:9d:f5:d8:af:4a:5e:02:
         56:0c:ff:dd:b2:0b:4f:7f:94:5d:82:78:d2:08:a4:33:8d:31:
         90:ca:c9:29:1b:28:69:c8:44:d1:e3:bd:b4:dc:0e:82:09:d8:
         a2:05:9f:fb:45:f9:50:db:ee:cd:1c:12:09:39:37:fd:23:91:
         7f:c5:f0:4c:7e:3d:30:1b:81:24:67:47:55:e6:1c:01:f4:96:
         9f:70:88:96:b1:8b:0c:e4:fc:7d:63:73:96:9e:60:03:9c:08:
         57:66:81:8f:5a:c5:53:2b:99:9b:86:8c:43:c5:68:83:78:f9:
         6b:38:b2:10:c8:9b:f7:97:30:41:af:c8:65:5d:89:c0:43:83:
         80:14:3a:18:61:30:19:76:ad:89:d9:34:98:ef:9f:6c:d6:7e:
         b8:ba:f8:59:fe:7a:e0:99:60:f0:8b:f7:38:97:78:99:59:2f:
         63:b6:1e:00:c7:bf:51:89:aa:81:28:32:81:14:68:57:b0:2e:
         3e:12:ca:e9:96:f7:50:e1:a2:26:e6:61:e8:70:ee:6a:44:3b:
         ad:5a:97:3b:75:e2:81:46:1e:75:3b:f9:97:c6:1c:ae:94:2f:
         17:0d:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org