Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3499771B5EB4066540F215449553AD5B4EB27176.mft
File:                     3499771B5EB4066540F215449553AD5B4EB27176.mft (raw, json)
Hash identifier:          1mY65NWeokAui6Y+ovi0HN9bxVrPMO/RLXADwMV2Aqg=
Subject key identifier:   F6:93:B8:AA:88:34:D0:67:8A:D8:0C:FA:C9:20:10:E6:DB:3B:26:B6
Authority key identifier: 34:99:77:1B:5E:B4:06:65:40:F2:15:44:95:53:AD:5B:4E:B2:71:76
Certificate issuer:       /CN=3499771B5EB4066540F215449553AD5B4EB27176
Certificate serial:       3B1BBCE9ECB362571E9B74791907D7F1C0901667
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3499771B5EB4066540F215449553AD5B4EB27176.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3499771B5EB4066540F215449553AD5B4EB27176.mft
Manifest number:          0141
Signing time:             Mon 15 Apr 2024 02:21:00 +0000
Manifest this update:     Mon 15 Apr 2024 02:16:00 +0000
Manifest next update:     Tue 16 Apr 2024 05:18:00 +0000
Files and hashes:         1: 3137392e34392e3234382e302f32342d3234203d3e20323731323231.roa (hash: atZkwDodIpL2u3RzEdtxCFUqcde377bIj7me9jWw2rs=)
                          2: 3137392e34392e3235312e302f32342d3234203d3e20323731323231.roa (hash: Wnt9EzXaA/uz1bS9bfaKyGA7XEtbBldyEcXz5irzlAs=)
                          3: 323830343a373831633a3a2f33322d3438203d3e20323731323231.roa (hash: i8ofi6qmWH2YIvyZ8w6Bid7+Edd/xTEKokpNOsylF70=)
                          4: 3499771B5EB4066540F215449553AD5B4EB27176.crl (hash: Xe65pX2aOdGw/X3KaVhcdohzPoG/V0H0wSkUv7+BFwE=)
                          5: 3137392e34392e3235302e302f32342d3234203d3e20323731323231.roa (hash: uf9FMmcgp3DT6URovemc5CFbZ8GGZxNxaJKB3/9AO9A=)
                          6: 3137392e34392e3234392e302f32342d3234203d3e20323731323231.roa (hash: likg72rObCCAjUsYlEmSvwXOWJ21jhZG+32BKyGNRb0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1b:bc:e9:ec:b3:62:57:1e:9b:74:79:19:07:d7:f1:c0:90:16:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3499771B5EB4066540F215449553AD5B4EB27176
        Validity
            Not Before: Apr 15 02:16:00 2024 GMT
            Not After : Apr 16 05:18:00 2024 GMT
        Subject: CN=F693B8AA8834D0678AD80CFAC92010E6DB3B26B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:a0:d6:28:53:72:34:f0:55:7d:fd:e6:cb:
                    4d:05:f2:cd:ed:8d:34:10:01:cb:c7:a6:be:40:71:
                    4e:00:3b:a8:b8:9b:d9:ba:72:b8:5d:07:48:5b:bb:
                    17:81:ef:32:87:17:8a:59:74:25:eb:0b:00:40:77:
                    f5:79:ef:d9:ed:04:c6:19:e9:21:d1:ac:af:ae:56:
                    67:9b:9b:4f:b5:bd:d6:07:12:df:7d:54:1f:65:ff:
                    87:59:a1:00:a9:50:ac:70:4d:c1:40:0f:43:6e:5b:
                    3a:2e:74:1c:ed:64:4c:cc:de:fd:83:51:ad:de:6b:
                    12:4d:be:a5:b3:8d:00:43:e9:8e:ba:17:4f:1b:7d:
                    ff:cd:82:a2:c6:c9:5b:fc:36:29:e8:ed:ab:ab:fd:
                    6d:08:13:be:d7:f3:46:dd:f0:a1:ed:0d:3b:4b:c6:
                    a2:65:61:6e:3b:e2:88:3e:3c:c3:74:fc:40:39:4a:
                    87:ba:3b:c9:0c:c9:d3:e2:a6:4b:78:da:8c:c1:87:
                    52:7e:91:45:22:59:75:cb:82:c1:ae:f5:10:a0:d9:
                    30:ac:a4:b1:68:ae:46:af:4a:5f:ac:92:52:87:f4:
                    57:2c:fa:9e:8e:5f:94:db:cd:a0:8a:a2:22:45:e2:
                    ce:85:79:73:d6:96:0c:6d:7e:93:e6:84:ad:51:d1:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:93:B8:AA:88:34:D0:67:8A:D8:0C:FA:C9:20:10:E6:DB:3B:26:B6
            X509v3 Authority Key Identifier:
                keyid:34:99:77:1B:5E:B4:06:65:40:F2:15:44:95:53:AD:5B:4E:B2:71:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3499771B5EB4066540F215449553AD5B4EB27176.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3499771B5EB4066540F215449553AD5B4EB27176.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3499771B5EB4066540F215449553AD5B4EB27176.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e5:71:d3:de:5f:b0:c6:24:35:7c:30:4d:fb:9c:f9:35:ee:
         1f:8d:17:f2:77:2a:ee:22:52:c7:14:0e:b1:eb:4d:8b:c1:c0:
         c2:83:b0:36:a7:a8:bc:07:66:86:2b:c3:2e:de:e9:d0:60:44:
         13:48:f4:e7:73:d8:69:5a:34:22:fe:a0:49:2d:15:d6:f6:c2:
         9c:70:06:a1:f8:4b:bc:b8:eb:ba:e1:60:96:49:fa:92:29:63:
         d5:fd:47:25:c9:16:96:25:bd:85:95:31:2d:5a:18:53:b0:a0:
         d1:87:35:d6:ea:c5:17:4f:07:8f:9d:dd:76:e7:7f:ae:9b:c2:
         11:86:70:88:6a:ce:50:55:49:9c:d3:dd:fb:cd:6a:47:b9:c6:
         8a:6a:57:04:e8:1f:d2:65:2c:c8:6b:dd:20:15:e5:da:4b:de:
         e1:d3:e2:77:fd:8f:90:76:4c:49:79:79:ce:b4:7a:8e:02:be:
         f8:00:44:b5:8e:86:bd:07:71:67:d0:40:5a:da:9b:c4:c7:04:
         17:04:5d:e7:6a:8d:7a:2a:6b:d0:64:08:11:6b:4d:dd:74:c9:
         8e:84:e9:0f:ec:94:35:06:46:83:4d:d7:3f:05:f0:28:ab:77:
         65:2e:0e:69:16:b0:32:ec:9f:37:7f:e5:0e:b3:4b:21:c7:0c:
         ce:b3:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org