Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.mft
File:                     C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.mft (raw, json)
Hash identifier:          8Jcw4JcfqrkacF7CnTo4j/yOZqd2xF8ieMCIM4Or2q0=
Subject key identifier:   F2:40:9C:79:4A:71:C6:42:06:73:AF:DC:1D:21:76:BB:97:30:96:FD
Authority key identifier: C8:D7:FF:44:E9:AC:6C:CF:68:C5:7A:2D:E1:74:8F:34:03:4D:33:E9
Certificate issuer:       /CN=C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9
Certificate serial:       32ACA59C45B16032A3AFBC7C335B9BFD6A5150F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.mft
Manifest number:          40
Signing time:             Sat 04 Mar 2023 16:26:53 +0000
Manifest this update:     Sat 04 Mar 2023 16:21:53 +0000
Manifest next update:     Sun 05 Mar 2023 18:46:53 +0000
Files and hashes:         1: 3230312e3138322e36332e302f32342d3234203d3e20323637353030.roa (hash: pLxlS/tC1d1S2u8aShbaYY0GoGHhLIk81B/bOLO1fHI=)
                          2: 3230312e3138322e36312e302f32342d3234203d3e20323637353030.roa (hash: zI/eWtNkP2r9FF42TFvSVb3D7hBeqxG2Ge7/zetREKk=)
                          3: 3230312e3138322e36302e302f32322d3232203d3e20323637353030.roa (hash: YT9pv9cdl8G8nUQ6uM/V6NjwZRG9OssTYmhglWEN4yw=)
                          4: C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.crl (hash: wOJfcgT3Zm4FWI/68uXRO5YphhQUv+ODVYMA7ll7RwQ=)
                          5: 3230312e3138322e36302e302f32332d3233203d3e20323637353030.roa (hash: hVyjJTojobMfq8J34ygi8of3SYO6yoHm0WHLQRy5sWE=)
                          6: 3230312e3138322e36302e302f32342d3234203d3e20323637353030.roa (hash: CvWCzBMDe8+I7MkAWbcbeUsid6VbrY6x2YrlhbiNXPc=)
                          7: 3230312e3138322e36322e302f32342d3234203d3e20323637353030.roa (hash: GneA2JHGB+voUCFpD5PwBlKGaAYQW0VlkbjSGKxqJ0A=)
                          8: 3230312e3138322e36322e302f32332d3233203d3e20323637353030.roa (hash: l4A9ozL13ExdfjMrngKy//jsZ/UqMTtyP5ZsUkO5yyw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ac:a5:9c:45:b1:60:32:a3:af:bc:7c:33:5b:9b:fd:6a:51:50:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9
        Validity
            Not Before: Mar  4 16:21:53 2023 GMT
            Not After : Mar  5 18:46:53 2023 GMT
        Subject: CN=F2409C794A71C6420673AFDC1D2176BB973096FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:4b:32:5b:4e:40:bf:02:ce:e7:5e:24:12:
                    05:ba:63:47:76:e9:69:67:6e:f7:38:99:b7:db:dc:
                    0c:80:32:b1:92:f7:d9:eb:a5:a8:f5:5e:60:4b:0c:
                    ee:21:be:80:57:23:44:d6:47:d3:1f:8f:cc:b6:ad:
                    c5:25:08:56:e3:6e:95:19:dc:1f:48:9e:c5:28:ac:
                    cd:8a:a8:c9:cc:c4:e5:6c:37:e9:b6:9a:53:8a:12:
                    90:99:76:d5:8c:30:31:18:0a:a0:b8:d8:f8:f7:7e:
                    61:64:df:2c:60:43:ed:33:58:9e:88:c6:5c:87:8d:
                    03:c0:68:e6:dd:25:e8:63:8e:38:ef:ce:17:55:c5:
                    80:1c:59:48:d7:1e:ca:62:ea:a7:3a:5d:c5:65:39:
                    d3:a8:05:43:7c:be:44:0e:82:5d:35:80:3a:91:34:
                    56:5d:78:9a:fa:64:3d:c0:b4:0a:f3:32:09:05:ee:
                    8e:76:7f:91:69:cc:e7:ca:89:34:4b:c3:21:70:ef:
                    6a:92:80:da:c8:90:a7:75:12:1e:bc:33:de:f1:b5:
                    ed:60:07:42:04:e4:20:fb:ff:dc:98:b3:d1:55:6b:
                    c5:a9:6f:ab:d8:f1:b4:e2:51:fb:17:1a:be:e8:c9:
                    53:e0:12:3c:ab:ed:98:33:07:80:5c:57:72:b4:4b:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:40:9C:79:4A:71:C6:42:06:73:AF:DC:1D:21:76:BB:97:30:96:FD
            X509v3 Authority Key Identifier:
                keyid:C8:D7:FF:44:E9:AC:6C:CF:68:C5:7A:2D:E1:74:8F:34:03:4D:33:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:3e:18:78:dd:0a:ec:55:ae:cb:87:48:dd:98:60:b2:9f:d3:
         8a:f4:2b:12:6b:7d:e1:3a:f3:07:b0:e9:1b:87:df:b9:cf:da:
         ae:ca:e8:8c:e1:36:b8:b7:7c:de:df:3f:9b:c9:10:ee:73:9d:
         d4:84:1d:3e:54:06:c5:21:58:ff:37:68:ce:bc:a5:cb:0b:42:
         28:fd:b9:b0:77:88:d1:f3:f8:7e:5b:64:b7:36:ee:a0:e6:4e:
         c0:2b:4d:c6:62:4c:f6:87:0f:c9:d1:59:8a:d9:98:f1:f1:5a:
         1d:56:3f:e8:82:a8:8d:49:aa:e4:b4:dc:cb:b6:4c:bf:c7:eb:
         17:d3:1e:f6:c0:32:54:23:4e:f1:d0:c2:8d:ec:8a:b3:b0:cc:
         29:1f:93:a4:76:cb:37:ba:2b:27:35:6b:be:da:18:06:fe:55:
         cd:a4:85:9a:0a:51:31:c5:eb:f2:96:fb:74:a3:6e:71:b9:b0:
         59:9f:e6:14:75:98:a6:d3:02:1f:79:19:7a:b6:d8:2a:ff:c9:
         d6:81:ac:50:cc:e3:8a:c6:cb:90:08:c1:b5:74:2d:f8:40:81:
         ce:68:38:62:c1:c8:00:50:cf:da:6d:39:ec:73:ae:40:9d:f9:
         ca:50:5f:7b:93:97:21:04:6c:71:e5:d5:34:c4:f6:e6:76:c8:
         fa:79:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org