Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.mft
File:                     394570B4B603A64BAC893860032DEA7505AFD053.mft (raw, json)
Hash identifier:          DHFLYdvK4qCM9ITQOyXakgz7AIkbJ4r0FexV0LWLsaE=
Subject key identifier:   DB:E8:3D:37:CD:7E:97:AB:5E:CB:CB:AB:BF:28:01:78:07:86:10:1E
Authority key identifier: 39:45:70:B4:B6:03:A6:4B:AC:89:38:60:03:2D:EA:75:05:AF:D0:53
Certificate issuer:       /CN=394570B4B603A64BAC893860032DEA7505AFD053
Certificate serial:       70D60C8AD2871F4911FF05912047CF3204744CF4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/394570B4B603A64BAC893860032DEA7505AFD053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.mft
Manifest number:          A2
Signing time:             Sat 13 Jan 2024 08:03:46 +0000
Manifest this update:     Sat 13 Jan 2024 07:58:46 +0000
Manifest next update:     Sun 14 Jan 2024 10:00:46 +0000
Files and hashes:         1: 323830343a376661303a3a2f33342d3334203d3e20323731363939.roa (hash: EM9avuOUVLPsJmu9HeikGG2hUpSwNskblplVP1+eWaw=)
                          2: 394570B4B603A64BAC893860032DEA7505AFD053.crl (hash: ge5/wJ+ersgIo6MRELd2ZbX8l46NieztCH+equT64HA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d6:0c:8a:d2:87:1f:49:11:ff:05:91:20:47:cf:32:04:74:4c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=394570B4B603A64BAC893860032DEA7505AFD053
        Validity
            Not Before: Jan 13 07:58:46 2024 GMT
            Not After : Jan 14 10:00:46 2024 GMT
        Subject: CN=DBE83D37CD7E97AB5ECBCBABBF2801780786101E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:41:fa:5f:b9:26:e0:b3:9b:58:f1:da:03:
                    ac:ad:37:28:17:af:a2:17:65:4e:a4:b5:0e:36:d3:
                    0a:aa:a5:0e:6d:0f:02:87:ab:4b:70:ab:78:9b:54:
                    b0:5a:24:65:5c:1a:66:c5:fd:1a:10:03:6d:e6:b8:
                    e9:1b:2b:e0:8c:0d:0e:33:6d:cf:cb:4f:6e:4c:2a:
                    4c:92:56:c4:79:4f:7a:63:49:0e:46:65:0a:38:56:
                    a7:03:df:5b:b1:4d:d0:f2:1d:30:83:02:f9:39:d4:
                    04:61:fe:4f:8c:14:e9:47:c1:90:40:f3:b0:1b:1f:
                    b3:61:be:1a:bf:0f:84:51:e2:2b:58:e6:6a:4e:11:
                    e0:b9:56:cf:ec:5f:24:2c:46:51:46:85:40:e1:0e:
                    4f:48:bb:cc:5f:c6:d1:81:db:ad:60:61:67:f4:fc:
                    4b:79:e7:0a:cc:3c:88:7f:ab:ee:8b:ac:b6:75:cb:
                    49:24:ff:40:29:60:ac:52:f2:d3:40:5b:f4:53:7a:
                    37:63:29:68:a7:99:88:2d:5f:b6:51:8b:ff:02:17:
                    f9:10:ea:49:96:f5:6a:bb:ec:2a:88:cf:da:fd:d2:
                    d4:a7:98:85:ea:bf:3e:2a:55:da:d5:33:34:5e:6b:
                    a1:16:6a:e5:aa:8f:d5:7d:ff:f2:0f:80:8c:d7:36:
                    78:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E8:3D:37:CD:7E:97:AB:5E:CB:CB:AB:BF:28:01:78:07:86:10:1E
            X509v3 Authority Key Identifier:
                keyid:39:45:70:B4:B6:03:A6:4B:AC:89:38:60:03:2D:EA:75:05:AF:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/394570B4B603A64BAC893860032DEA7505AFD053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:58:0a:7b:a9:08:1c:67:1d:f1:5e:45:4c:2c:9c:0d:2c:bd:
         d7:a8:0a:8e:2c:08:b6:6f:89:38:ec:b5:60:fe:7a:c4:49:c9:
         dc:59:6d:36:18:dd:d8:0f:1e:be:9d:58:e8:c6:00:9f:4d:25:
         aa:76:94:0e:9b:99:84:23:01:95:7c:6d:77:37:78:a9:c0:88:
         db:b5:49:85:63:01:4c:02:26:cd:17:b6:1f:2c:f0:23:be:4a:
         f9:39:2f:4a:26:73:81:21:f2:45:26:37:64:c0:c7:c0:cd:7a:
         90:74:f0:d0:a9:7e:4f:36:7a:47:e9:5a:5f:2d:eb:c6:50:5b:
         78:88:f4:4f:e4:44:4d:29:b1:82:f7:98:84:c4:11:00:42:0f:
         76:bc:99:51:e8:d5:48:76:5f:43:46:63:44:11:9b:2c:83:02:
         35:c1:9f:74:2d:0f:f6:55:a6:8d:8c:b1:0f:c5:22:fd:3a:91:
         ac:2f:ed:b9:e0:6d:6e:40:85:68:9c:61:a3:7f:8b:49:17:c6:
         97:4b:a2:3f:58:c5:d8:f6:f1:36:0e:80:ef:48:da:7c:ea:33:
         69:86:d0:58:48:d0:9f:62:7d:6f:6a:c3:77:09:d7:ff:cd:d2:
         8a:e9:10:ed:1f:5e:52:dd:6f:37:1d:49:0e:e6:04:a8:44:59:
         1d:3d:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org