Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.mft
File:                     952A85BFC0E691CB7CE10742B5260602B9A8A0BA.mft (raw, json)
Hash identifier:          Dk6feKZSsOz6AN8HYQKXbglpoPGNJrASNAXfUQF0cq8=
Subject key identifier:   7A:63:F5:87:30:0E:DD:D2:6A:00:F3:BF:3C:DE:EC:26:88:D6:39:F1
Authority key identifier: 95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
Certificate issuer:       /CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
Certificate serial:       6857B51D17F86B57D6D7D5A8ACB845ACF267E3AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.mft
Manifest number:          0160
Signing time:             Mon 15 Apr 2024 09:29:08 +0000
Manifest this update:     Mon 15 Apr 2024 09:24:08 +0000
Manifest next update:     Tue 16 Apr 2024 11:37:08 +0000
Files and hashes:         1: 323830343a326563303a3a2f33322d3332203d3e20323635333634.roa (hash: D84fDzoruxYTRTK4piAnNT0I5FOePUMNIMKrH0pqC4k=)
                          2: 3136382e3230352e39312e302f32342d3234203d3e20323635333634.roa (hash: UTWR8LyQyuG4PsocZ0iha6GDLtlo8tKW07hezvK6fS0=)
                          3: 323830343a326563303a383030303a3a2f33332d3333203d3e20323635333634.roa (hash: d+i1gi/8qO6fnEe6TJUQLlJ0O6F9k17QYIyFu3x4eEc=)
                          4: 3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa (hash: 0Sb9trZcem7GsoD/kLV5CcDGJ1EQb7ZiYXX/IVI8owY=)
                          5: 3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa (hash: Vh9Vk6ywYho03yR+BZd7B5ecFRfltYFXHD2j7GlY8Xk=)
                          6: 952A85BFC0E691CB7CE10742B5260602B9A8A0BA.crl (hash: 6JH1mK28Aw5PrwDNigSIzH6IgXNw7GL7RBhcp40Bl8E=)
                          7: 3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa (hash: NNZ9/qiJvWZxs4yItw9KXsucmnbJLUf2jnckVjLueMo=)
                          8: 323830343a326563303a3a2f33332d3333203d3e20323635333634.roa (hash: 23+x7Q6PGmExGugZ66uospOLD565e94XMJzpp1j8U+I=)
                          9: 3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa (hash: Xs2I02T/YtMuIUoj46sFpdgNaw6Yert2OPjo+TQevM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:57:b5:1d:17:f8:6b:57:d6:d7:d5:a8:ac:b8:45:ac:f2:67:e3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
        Validity
            Not Before: Apr 15 09:24:08 2024 GMT
            Not After : Apr 16 11:37:08 2024 GMT
        Subject: CN=7A63F587300EDDD26A00F3BF3CDEEC2688D639F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:86:9a:5e:f4:5b:24:f7:4f:cb:14:17:53:
                    81:d6:3d:52:04:85:5f:51:8d:8b:7b:76:af:e2:83:
                    fa:5d:2e:a8:d8:f1:15:d6:40:ff:ec:a5:82:65:7a:
                    3e:98:2d:33:9d:ff:f7:c3:69:7c:5c:1a:31:fc:81:
                    1a:9a:ea:aa:74:36:39:5c:7f:7c:90:4f:77:58:f8:
                    ba:32:42:75:61:27:ab:95:ee:33:15:62:00:79:28:
                    b1:6a:ab:ea:64:82:49:aa:c3:3f:d6:61:ef:8e:92:
                    a7:cb:88:f9:de:3d:94:50:af:cb:62:e4:26:1b:ac:
                    f0:00:bf:d9:f1:79:82:65:60:0c:46:5f:aa:a2:1a:
                    5f:f3:d7:88:a6:20:31:f9:ac:67:36:fb:70:59:9c:
                    16:6f:20:b9:31:85:5e:45:d7:32:1c:c9:4d:d2:c4:
                    fd:bb:36:a6:bf:b4:59:93:e5:e2:e7:50:2d:30:a9:
                    67:8b:62:93:b9:70:b4:9b:ac:01:32:4b:41:e8:c6:
                    13:62:7a:1d:08:23:5b:b5:fe:8c:d7:f1:28:ce:fb:
                    56:ac:38:db:28:20:9a:dd:fd:35:b5:6b:ef:0b:73:
                    37:bf:11:60:ba:3c:fb:66:16:78:10:18:3e:d9:40:
                    00:f8:57:0a:94:82:ec:84:72:31:40:62:0d:2b:7a:
                    60:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:63:F5:87:30:0E:DD:D2:6A:00:F3:BF:3C:DE:EC:26:88:D6:39:F1
            X509v3 Authority Key Identifier:
                keyid:95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:30:55:e9:63:06:b4:76:ae:a6:b0:47:43:3c:96:05:0d:aa:
         d9:05:a3:d8:82:99:7b:60:46:75:e5:9a:fa:d7:14:55:ab:c8:
         8e:f8:65:a4:0d:a3:cd:ce:ad:b4:50:c4:12:20:e2:6e:1b:4f:
         f1:6e:0b:92:64:7f:a1:62:bf:ff:a1:a0:d2:a0:f4:3e:c0:ec:
         b6:50:0f:e7:ab:4d:9c:51:dd:7d:47:95:49:1e:83:5d:cf:f0:
         11:a4:f3:e5:7b:ca:38:a1:8b:4e:ca:ec:7c:a9:73:f0:f5:df:
         98:d6:59:9e:11:28:bb:e2:ca:f2:d0:78:0a:f1:14:34:37:d8:
         ef:86:04:ef:7d:67:21:7c:ce:51:dc:c1:1b:fd:8f:8c:9f:b1:
         90:65:e9:19:7f:ab:17:46:31:40:63:f0:57:35:28:a4:f2:59:
         cf:ac:d9:68:ac:c1:0c:87:55:d4:5f:71:83:d5:12:82:6b:04:
         a4:e9:51:25:33:f4:d2:a2:fe:e5:b0:5b:56:d2:5b:fb:2f:23:
         ee:d4:81:95:40:1a:5f:fa:40:81:0c:0d:13:f9:41:da:a2:d4:
         ae:b5:b4:98:d1:5e:a1:61:61:c8:dc:70:cb:bf:58:26:ec:f3:
         9b:fc:9d:ce:44:c1:31:80:4d:67:06:85:c5:c8:5e:5d:30:cf:
         1b:31:d1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org