Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/1/23AAE9A21DE72B65D4D71AEE6765DD78A480617A.mft
File:                     23AAE9A21DE72B65D4D71AEE6765DD78A480617A.mft (raw, json)
Hash identifier:          MiZ0HrBDk4nRw9tQ6HhvOLtUPSEvrLoeEq2BOvqVcsI=
Subject key identifier:   3E:8B:1D:F5:27:2D:F2:7A:00:88:60:DF:08:FE:8A:ED:72:EC:35:27
Authority key identifier: 23:AA:E9:A2:1D:E7:2B:65:D4:D7:1A:EE:67:65:DD:78:A4:80:61:7A
Certificate issuer:       /CN=23AAE9A21DE72B65D4D71AEE6765DD78A480617A
Certificate serial:       4AB64538C7E3C59DD9F07DC94260460DA8CF8814
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23AAE9A21DE72B65D4D71AEE6765DD78A480617A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/1/23AAE9A21DE72B65D4D71AEE6765DD78A480617A.mft
Manifest number:          1B
Signing time:             Tue 23 Apr 2024 14:47:53 +0000
Manifest this update:     Tue 23 Apr 2024 14:42:53 +0000
Manifest next update:     Wed 24 Apr 2024 15:46:53 +0000
Files and hashes:         1: 3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa (hash: uYNUb5XZkUnXDuI1gmbsMm9vmjAshoax+kBTaF2iWBk=)
                          2: 23AAE9A21DE72B65D4D71AEE6765DD78A480617A.crl (hash: QoKWtpuTjh2VVv4zUgocf2LjIOHvRvYtOjGo+r4pZaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b6:45:38:c7:e3:c5:9d:d9:f0:7d:c9:42:60:46:0d:a8:cf:88:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23AAE9A21DE72B65D4D71AEE6765DD78A480617A
        Validity
            Not Before: Apr 23 14:42:53 2024 GMT
            Not After : Apr 24 15:46:53 2024 GMT
        Subject: CN=3E8B1DF5272DF27A008860DF08FE8AED72EC3527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:02:cd:cf:48:a0:19:57:b8:cf:0d:73:8d:
                    00:b3:5f:1b:cf:54:5e:0a:1d:43:44:2b:91:13:5e:
                    71:db:3e:45:7e:d3:1b:c1:60:53:6f:5e:40:6e:cf:
                    3b:62:ca:d7:47:13:75:0e:ce:26:ea:34:4f:d5:d5:
                    10:3b:82:bb:43:cc:e3:ac:d9:bc:28:1f:26:90:41:
                    9c:07:0e:94:9b:40:27:05:32:70:79:f4:9a:b7:0e:
                    c6:20:50:ef:d4:90:96:40:d1:15:35:2e:fb:d2:1d:
                    c6:a7:e8:9c:64:72:33:96:b3:6f:7c:ea:d4:cd:96:
                    0b:3a:84:69:13:ec:2d:59:8a:b8:f4:51:86:99:56:
                    eb:9d:a6:77:88:3c:80:bd:19:34:df:85:2a:09:ce:
                    09:c4:45:5c:75:50:70:e6:45:2f:66:d9:1d:2f:0e:
                    19:33:c6:8e:29:70:35:e9:fe:db:35:89:6d:e0:44:
                    1a:69:96:4b:9c:ad:d1:7c:d0:a7:6d:bb:d0:99:8e:
                    c1:f2:ee:fd:4e:e5:83:55:59:09:6d:94:fa:30:09:
                    aa:fa:44:8b:54:10:28:bc:59:92:26:e6:fe:20:fe:
                    02:d0:b7:1e:80:f5:2a:59:f9:20:91:7d:d4:e9:1a:
                    87:40:40:c4:f9:3a:04:10:33:80:7c:6b:b2:15:f2:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8B:1D:F5:27:2D:F2:7A:00:88:60:DF:08:FE:8A:ED:72:EC:35:27
            X509v3 Authority Key Identifier:
                keyid:23:AA:E9:A2:1D:E7:2B:65:D4:D7:1A:EE:67:65:DD:78:A4:80:61:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/1/23AAE9A21DE72B65D4D71AEE6765DD78A480617A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23AAE9A21DE72B65D4D71AEE6765DD78A480617A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/1/23AAE9A21DE72B65D4D71AEE6765DD78A480617A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:21:bc:0c:4a:d7:8f:60:a6:b8:f1:64:a1:67:79:37:71:
         64:85:a8:7b:e8:78:27:3c:95:21:22:a6:29:86:47:3f:5c:fd:
         3d:13:1c:31:ae:7d:fe:7a:f9:b5:0a:e7:ad:00:b0:08:75:63:
         49:81:80:99:c6:2a:da:af:b7:81:c4:e7:72:b2:a1:ee:b9:09:
         16:7b:9d:02:2c:9e:cd:81:de:50:9d:14:21:53:f6:74:4d:cc:
         6e:e9:b9:71:b9:a3:a6:0b:c5:bd:7f:80:da:28:f9:41:66:90:
         a0:15:87:15:43:80:93:35:2a:d1:65:86:1c:f9:07:c4:bc:c6:
         e5:92:72:27:3c:5a:74:3f:a0:f6:d1:60:39:a8:01:70:c9:ce:
         7e:3f:63:d0:b6:44:65:4a:e0:a8:d6:50:31:05:89:90:98:2d:
         45:14:23:73:28:31:50:7b:31:4a:11:f5:4b:62:a0:e8:c7:0e:
         42:7b:20:8d:00:1e:50:d3:4a:18:e5:c9:2b:45:6b:05:9f:b6:
         3c:aa:47:f2:fa:1b:c8:e6:73:9a:81:e0:56:71:09:91:0c:4e:
         a6:ac:a5:f2:30:34:db:b8:d4:da:bc:cd:16:57:d1:53:61:57:
         04:88:26:97:5f:1a:86:87:4f:cb:b5:ab:2e:4b:d5:b9:99:b1:
         30:be:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org