Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/7DABE8FD69A0E70AB82099347A2DADA545901DEC.mft
File:                     7DABE8FD69A0E70AB82099347A2DADA545901DEC.mft (raw, json)
Hash identifier:          v2VKRhXGGycr18t3sZqqDQIAq6q51mN3xNLAfEGFgWI=
Subject key identifier:   E8:94:3D:0F:4D:9B:CB:D9:1A:82:06:FF:FF:EE:D1:55:74:02:4A:6D
Authority key identifier: 7D:AB:E8:FD:69:A0:E7:0A:B8:20:99:34:7A:2D:AD:A5:45:90:1D:EC
Certificate issuer:       /CN=7DABE8FD69A0E70AB82099347A2DADA545901DEC
Certificate serial:       5E9DB21A93871FD3E537C3F211B3E1AE2FC9404A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DABE8FD69A0E70AB82099347A2DADA545901DEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/7DABE8FD69A0E70AB82099347A2DADA545901DEC.mft
Manifest number:          22
Signing time:             Thu 03 Oct 2024 13:01:20 +0000
Manifest this update:     Thu 03 Oct 2024 12:56:20 +0000
Manifest next update:     Fri 04 Oct 2024 15:55:20 +0000
Files and hashes:         1: 7DABE8FD69A0E70AB82099347A2DADA545901DEC.crl (hash: 6LYes5YK2OnHIKh+81drewaxzru0e7kCZcROFbKXHkU=)
                          2: 323830343a316432633a3a2f33322d3332203d3e20323634333532.roa (hash: 2krwTPsA2rP/fpMDl9T/Lzo3iSCfNTqRK3AVnkxQHbE=)
                          3: 3133312e3130382e3232382e302f32322d3232203d3e20323634333532.roa (hash: B2wa75Ubpf+ZOQGE6OYSgzMYXQK9+gRIUbtPJxUDC8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9d:b2:1a:93:87:1f:d3:e5:37:c3:f2:11:b3:e1:ae:2f:c9:40:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DABE8FD69A0E70AB82099347A2DADA545901DEC
        Validity
            Not Before: Oct  3 12:56:20 2024 GMT
            Not After : Oct  4 15:55:20 2024 GMT
        Subject: CN=E8943D0F4D9BCBD91A8206FFFFEED15574024A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:b4:36:e7:74:32:04:8e:03:dc:38:d9:1a:
                    4d:68:82:12:66:1b:bb:a5:7e:3c:fd:b4:1a:b3:8a:
                    00:bf:6c:19:85:fb:bf:6a:ff:2f:6b:3b:a8:8c:b6:
                    56:ff:24:03:6f:26:c6:fe:d7:8c:65:96:63:db:15:
                    99:81:b9:7b:16:9b:eb:93:7f:2f:7e:7c:75:65:26:
                    30:9b:12:53:c7:50:29:8c:ee:d9:38:15:17:b1:f1:
                    98:2d:a0:22:5a:ce:0d:26:ad:ca:d8:58:eb:7a:91:
                    c6:54:b9:fe:7e:9f:df:78:77:73:53:ba:ab:1b:45:
                    5a:6c:37:60:1e:65:26:9f:e4:c5:35:97:87:04:84:
                    fa:39:05:08:56:cd:ec:78:6c:1b:ce:a2:c6:bd:09:
                    0f:9a:61:ae:e6:c9:b1:60:50:09:99:b9:de:cd:51:
                    74:5f:be:bb:6d:ef:d4:03:7f:c6:5a:bb:d9:8b:f1:
                    3c:74:34:aa:95:f5:17:b2:d5:09:75:ba:0a:f6:86:
                    01:bd:ac:9c:e4:9b:ad:82:27:d0:20:56:a1:2c:6b:
                    b1:14:a5:f7:42:fe:3f:79:36:f7:6d:56:b2:72:57:
                    bf:cd:06:fc:c7:66:4b:af:10:60:61:d7:36:f3:31:
                    3a:47:28:45:99:72:c0:ba:6f:67:e8:a3:37:94:25:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:94:3D:0F:4D:9B:CB:D9:1A:82:06:FF:FF:EE:D1:55:74:02:4A:6D
            X509v3 Authority Key Identifier:
                keyid:7D:AB:E8:FD:69:A0:E7:0A:B8:20:99:34:7A:2D:AD:A5:45:90:1D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/7DABE8FD69A0E70AB82099347A2DADA545901DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DABE8FD69A0E70AB82099347A2DADA545901DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/7DABE8FD69A0E70AB82099347A2DADA545901DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:55:b0:2f:03:fc:c1:46:33:fc:61:c4:81:60:78:30:a1:42:
         14:68:74:f0:d3:b5:8a:f7:3e:0d:45:79:a6:f4:b4:c1:0c:e6:
         72:c2:f0:f0:16:db:b1:51:17:57:60:06:9b:5f:58:05:a2:0e:
         a6:12:05:a8:83:35:12:ab:f6:d5:83:69:c5:9c:27:f4:29:f7:
         a7:e8:e2:fa:79:2e:b0:fe:23:10:34:11:51:52:59:35:68:0a:
         cb:1a:76:e7:69:32:f3:0f:87:55:ae:76:67:40:24:29:e6:15:
         e7:3b:44:df:cc:9b:0f:26:76:85:fa:8e:28:90:cd:b4:c4:47:
         26:f7:39:64:82:33:09:43:ed:3f:f5:99:24:24:b2:e9:cc:8a:
         cd:4a:5a:e4:5f:c6:f7:29:e0:8c:6a:59:72:ba:6d:a7:bb:82:
         35:0d:be:a8:4a:56:1b:34:1c:d1:63:6c:37:cf:be:c6:e7:71:
         e6:8b:29:51:f3:3f:88:99:1d:fd:7d:1c:ec:8d:5e:f6:30:a3:
         46:65:46:7d:16:13:d9:ee:af:25:02:85:1a:31:14:c3:17:33:
         1a:d1:36:04:09:79:4e:ca:7d:13:cd:85:17:6d:6c:1e:b5:93:
         5d:20:06:f0:0d:8d:94:a0:9d:e2:82:ff:6c:bc:81:e2:df:38:
         89:f7:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:25 2024 by rpki-client on console-fra.rpki-client.org