Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.mft
File:                     2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.mft (raw, json)
Hash identifier:          qC57JUVEBDyTmfVwG3HCqBlLEFfLUqLi94AEaLOjfVA=
Subject key identifier:   BF:FB:C1:0A:4B:5C:63:C3:03:BE:D8:F4:DC:16:59:7E:72:85:84:68
Authority key identifier: 2A:31:E3:D7:06:C9:4A:A2:BE:B3:D7:49:A7:2D:01:79:3F:5D:2A:AD
Certificate issuer:       /CN=2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD
Certificate serial:       459B7AC4797C9947F21A0C7B85E655ED4CA3F4DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.mft
Manifest number:          86
Signing time:             Thu 31 Oct 2024 00:51:51 +0000
Manifest this update:     Thu 31 Oct 2024 00:46:51 +0000
Manifest next update:     Fri 01 Nov 2024 04:35:51 +0000
Files and hashes:         1: 3137302e3233332e3133362e302f32322d3234203d3e20323635303739.roa (hash: 6OPcjVuKgZm2KT2Iw/tCDDRSWJavOfJp+j3E094kFgk=)
                          2: 323830343a333237343a3a2f33322d3438203d3e20323635303739.roa (hash: 2c+9pdJ6OkTxBDgFRLluZj6Y82O2j4F3GXLy8e1/3U4=)
                          3: 2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.crl (hash: EX/TbucHup4Ucp+VcaYXfRLS57twbR9U32AHO2UA5GI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9b:7a:c4:79:7c:99:47:f2:1a:0c:7b:85:e6:55:ed:4c:a3:f4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD
        Validity
            Not Before: Oct 31 00:46:51 2024 GMT
            Not After : Nov  1 04:35:51 2024 GMT
        Subject: CN=BFFBC10A4B5C63C303BED8F4DC16597E72858468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:82:b9:03:28:7c:bf:82:3f:ea:53:23:49:
                    8d:88:c5:46:0a:5d:5f:bf:4b:16:04:da:ff:93:11:
                    d5:0a:9c:44:d6:97:d6:7f:d0:a2:bd:f3:bf:f9:5e:
                    e4:cf:e0:67:85:c0:c8:19:d1:f5:e3:9d:be:0c:51:
                    20:5d:ea:29:df:84:ec:5c:13:0c:df:01:0b:39:55:
                    b6:9b:c4:fc:8c:83:b7:9e:dc:22:19:5c:93:d3:15:
                    c9:db:a0:18:f0:80:b1:cf:23:f3:2c:c9:c4:d6:3f:
                    4a:11:48:71:2e:64:72:f0:59:43:fa:98:39:1b:3c:
                    ec:7d:b0:3b:8a:24:24:35:77:4e:1e:52:a4:b7:46:
                    57:6c:e3:13:be:77:ab:65:5c:63:97:cf:49:f0:01:
                    c4:1e:b5:b9:06:69:87:44:ec:4a:21:26:42:c0:d1:
                    47:49:fe:7a:e8:e6:95:d9:55:f2:a2:5a:3d:71:d7:
                    1f:32:3f:76:b6:44:96:8f:35:34:aa:91:d6:d9:b5:
                    11:8b:68:08:94:14:37:12:8d:bd:7e:a9:46:ba:e4:
                    0f:fb:b5:3c:ac:0a:56:40:d6:19:e9:2e:66:e1:f1:
                    4a:86:7b:35:27:94:c7:62:fd:c0:25:21:39:a0:a6:
                    08:b9:0a:da:cb:f0:49:da:8d:5f:c1:b0:80:96:e7:
                    6b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FB:C1:0A:4B:5C:63:C3:03:BE:D8:F4:DC:16:59:7E:72:85:84:68
            X509v3 Authority Key Identifier:
                keyid:2A:31:E3:D7:06:C9:4A:A2:BE:B3:D7:49:A7:2D:01:79:3F:5D:2A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:eb:a8:f2:43:ce:aa:7a:c7:b5:2c:de:16:24:c6:f6:c1:a5:
         f0:23:45:72:81:83:bb:4c:27:46:ba:fb:d0:a9:c0:b4:05:cc:
         b4:db:62:63:43:b5:a7:82:55:88:45:96:24:17:59:a0:3b:26:
         85:95:8e:d4:0e:f5:ed:0b:47:cd:42:71:f0:33:89:2d:a6:7a:
         0a:d0:ee:a9:10:fa:74:7a:f3:c9:d3:1c:1c:80:33:5f:dd:57:
         af:5a:c4:eb:6d:6f:58:ce:d1:a9:6e:9e:87:52:dd:45:11:7f:
         22:1f:9d:bd:7a:4c:ff:8d:62:f4:eb:45:c7:0f:09:bc:33:2d:
         ee:82:4a:e2:f0:67:f9:fc:eb:cf:f3:b0:4b:cf:95:0a:b6:01:
         0f:d1:94:ef:d5:f9:48:00:2e:9b:59:64:00:94:0d:ee:37:77:
         04:da:1c:e7:56:6a:77:84:1d:7d:08:f1:8a:72:16:60:72:1f:
         a5:a6:83:0b:c4:1e:79:07:e4:83:57:8a:49:c0:ee:91:92:a4:
         35:6f:87:ed:4d:6d:b9:34:12:09:13:ca:5c:92:f8:31:a7:b4:
         07:14:69:4c:8b:a0:e0:14:66:f1:d5:7e:07:38:16:58:4e:6e:
         2f:23:a2:fa:d8:6e:d9:bb:cc:93:e6:ee:7c:e1:0a:69:88:e6:
         05:21:cf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 19:17:33 2024 by rpki-client on console-ams.rpki-client.org