Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.mft
File:                     3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.mft (raw, json)
Hash identifier:          6SiRfxU4TgMJCTXwm3MwtS81MiKS9k/lWPYQBsAIwaQ=
Subject key identifier:   DF:D5:79:25:E9:14:48:70:36:4A:BB:34:01:AA:35:4D:5D:2E:2E:4A
Authority key identifier: 3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Certificate issuer:       /CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
Certificate serial:       0DF1AF80E30B81E13F539E8B7439B97B917B3F5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.mft
Manifest number:          21
Signing time:             Wed 03 Apr 2024 18:03:11 +0000
Manifest this update:     Wed 03 Apr 2024 17:58:11 +0000
Manifest next update:     Thu 04 Apr 2024 20:45:11 +0000
Files and hashes:         1: 3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl (hash: 5ESV/7o07ng5LVofacyrbenIaUzeWlH/XFtMr2AnoBs=)
                          2: 323830343a383637383a3a2f33322d3438203d3e20323732363435.roa (hash: lfb2CC/6zJzDYu5iNAjAR13GmKNk9m/lMUEuqgUV/HI=)
                          3: 3230312e3231362e3130342e302f32322d3234203d3e20323732363435.roa (hash: JXFGb/9l1yjnHyzPjcKm56Y3W4541H2TudiT/RJB07A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f1:af:80:e3:0b:81:e1:3f:53:9e:8b:74:39:b9:7b:91:7b:3f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Validity
            Not Before: Apr  3 17:58:11 2024 GMT
            Not After : Apr  4 20:45:11 2024 GMT
        Subject: CN=DFD57925E9144870364ABB3401AA354D5D2E2E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:22:d5:56:3b:f1:88:e9:f8:02:e4:c5:fc:
                    75:3f:c6:49:7c:04:19:ab:66:24:fe:44:d1:2b:f0:
                    40:6f:95:3d:e1:40:bd:15:03:f1:ee:b4:1f:43:4c:
                    6c:43:96:e8:ff:f5:a4:27:5f:81:0b:b7:8b:02:22:
                    be:43:cb:2d:8d:4a:ac:76:5c:07:69:8e:a7:2c:b2:
                    7a:d7:7e:1d:5c:d1:ce:fc:a0:e1:97:a4:2c:1b:1b:
                    7c:48:0d:b5:ec:40:49:f2:a2:8c:49:c7:67:6a:28:
                    7c:d3:93:2d:9d:4f:2c:6e:4c:3d:2d:71:65:9c:b0:
                    51:d0:fa:ee:55:89:ef:33:86:40:15:a7:05:a8:b4:
                    95:16:64:e6:72:47:5e:48:30:e8:a7:7a:6c:6a:d8:
                    d5:f1:fc:b2:a4:87:44:1c:37:de:6a:86:e1:28:fd:
                    be:ea:09:52:30:b2:72:7d:a9:f9:cd:c2:84:b0:5b:
                    6d:77:07:e9:49:3b:1c:69:3f:8c:c9:1b:e2:d0:cb:
                    df:c1:95:ae:8f:e9:28:6d:53:39:e5:0b:36:db:da:
                    f1:6f:52:8e:80:2b:d0:01:0c:c0:fd:50:54:67:44:
                    1e:f4:2b:4f:13:c9:cc:3e:e4:20:aa:dd:4f:7c:19:
                    36:53:4b:89:f8:b0:51:52:0b:bf:fe:61:ed:5a:61:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D5:79:25:E9:14:48:70:36:4A:BB:34:01:AA:35:4D:5D:2E:2E:4A
            X509v3 Authority Key Identifier:
                keyid:3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1d:62:e8:54:f9:4f:74:1a:70:35:f1:d3:47:f7:f4:72:6c:
         a8:19:a7:02:7c:1d:ea:a0:4e:13:4f:1b:74:66:98:51:2e:bb:
         dc:f7:29:e0:59:79:b3:5f:74:9a:d9:03:a2:30:ca:47:ed:f6:
         64:8a:21:e4:20:19:85:c7:76:0f:6c:3e:6d:a8:1b:6b:1a:12:
         04:20:6c:ac:1c:c0:c6:53:60:b5:b9:7b:a7:9a:ed:1c:ec:4a:
         1c:f4:89:7d:9e:c8:53:0a:6c:e3:13:1f:bf:70:d2:1e:5b:df:
         bf:ca:37:ac:eb:cc:07:ea:f9:fc:87:a3:6a:ef:cc:09:57:60:
         55:95:6d:13:47:95:b8:f4:c0:06:d1:ae:d9:65:bc:b4:20:6c:
         00:50:c2:88:e1:64:81:6e:83:04:ef:70:82:69:fa:50:ad:07:
         ff:3f:78:f4:f7:ea:c5:38:19:ce:ee:87:11:c5:ed:54:78:60:
         4d:2f:da:48:32:61:5e:ec:82:cc:1c:57:f9:5f:0b:bb:88:70:
         c1:8f:0c:9c:db:a7:e2:9c:79:05:3f:e2:f8:34:72:08:19:cc:
         8c:35:c6:90:a4:16:e4:6d:d5:85:a6:c5:59:52:ac:c9:5b:98:
         2e:24:08:ed:5d:11:3d:6e:a3:4c:70:13:73:e9:83:e5:3d:0c:
         57:e5:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org