Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.mft
File:                     96B144FE6CA3062A1FE26385A6C33A9C6A21A266.mft (raw, json)
Hash identifier:          eQLtg2XmN77XaJAjNgMT+jk+l8gZoijIv/I/6gGDENs=
Subject key identifier:   8B:D6:25:08:85:36:29:AF:F2:10:F3:56:A8:56:05:12:58:E5:DA:82
Authority key identifier: 96:B1:44:FE:6C:A3:06:2A:1F:E2:63:85:A6:C3:3A:9C:6A:21:A2:66
Certificate issuer:       /CN=96B144FE6CA3062A1FE26385A6C33A9C6A21A266
Certificate serial:       32D0C0230C4269E857CA2A1E1A3FE54C0F744D5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.mft
Manifest number:          0300
Signing time:             Thu 06 Apr 2023 09:18:46 +0000
Manifest this update:     Thu 06 Apr 2023 09:13:46 +0000
Manifest next update:     Fri 07 Apr 2023 11:57:46 +0000
Files and hashes:         1: 3230312e3135392e3136322e302f32332d3234203d3e20323730373933.roa (hash: P+jBDCA8hZslSZGyqLhwKJUbkkJpkH+FfBDkh2IGbf4=)
                          2: 323830343a373138303a383030303a3a2f33332d3333203d3e20323730373933.roa (hash: U+0dUWxUnwWHLzRN9JjGuvfEzxDIFxVN3OpI7DvHsas=)
                          3: 96B144FE6CA3062A1FE26385A6C33A9C6A21A266.crl (hash: t/VQ8LY9ASkfNA4S7ibR2PmDPIyaZqb+EW/nz7RnTH8=)
                          4: 3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa (hash: WRbo0GvFC9uk5R3P9dvCPgq48AbdhNM1kz6PosDhr0U=)
                          5: 3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa (hash: smZQSK/dZGQvnXi9LAvag505lph1c7DRXPOG+UR/zhs=)
                          6: 323830343a373138303a3a2f33332d3333203d3e20323730373933.roa (hash: Gqqs5a+0dMHrcFAAUq7aZk7lyCOXUk4iQ46mzmsVuGU=)
                          7: 3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa (hash: JvokKGGRRMjbOKF8N0TgVilj841ALeTt/QesBVVDRFo=)
                          8: 3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa (hash: FKKHKNgy+b0sb8qxwpLIvhsqJHUYIWpVFZOsN95SEs4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d0:c0:23:0c:42:69:e8:57:ca:2a:1e:1a:3f:e5:4c:0f:74:4d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B144FE6CA3062A1FE26385A6C33A9C6A21A266
        Validity
            Not Before: Apr  6 09:13:46 2023 GMT
            Not After : Apr  7 11:57:46 2023 GMT
        Subject: CN=8BD62508853629AFF210F356A856051258E5DA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f8:fa:77:e1:7e:3f:d6:70:7c:97:ed:c3:09:
                    e7:77:b3:6e:02:0a:a4:f8:66:e0:71:a9:6a:34:4a:
                    b8:60:c9:be:2b:72:37:2f:22:22:4b:f4:5b:ac:56:
                    a9:74:37:f2:bf:d3:7f:73:b9:0f:2a:b4:c5:6b:04:
                    fd:c9:92:68:be:86:cc:b1:98:97:af:c1:2a:d2:98:
                    82:14:9f:51:98:14:f6:14:e8:91:70:aa:e6:97:d9:
                    6e:04:49:4d:08:0f:f9:2c:53:40:1a:08:dd:52:8f:
                    4b:81:b7:3d:62:7c:cf:5a:3f:d5:dc:bc:a3:33:db:
                    58:2c:72:57:f8:68:41:55:79:b3:89:33:b5:0d:10:
                    a8:f8:7c:3a:99:5e:05:8a:2d:20:7f:8d:95:f8:e3:
                    03:2c:59:7c:ac:6b:0c:02:2b:1e:12:11:1b:17:2e:
                    fe:a8:ff:b1:04:9c:06:2b:59:ec:4f:67:ea:5f:c2:
                    b2:dd:78:15:24:f7:92:3b:dc:e2:af:2d:95:02:a0:
                    24:35:ea:b3:54:65:31:00:8d:72:f0:b6:84:60:04:
                    3b:b6:18:e7:e3:74:75:1d:3e:4c:8a:8c:d0:a5:62:
                    b3:b4:12:d5:c4:e0:62:87:0a:af:d7:6a:f8:b9:12:
                    4a:77:d9:19:d2:57:7c:79:14:5e:b7:74:3f:e3:20:
                    dd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D6:25:08:85:36:29:AF:F2:10:F3:56:A8:56:05:12:58:E5:DA:82
            X509v3 Authority Key Identifier:
                keyid:96:B1:44:FE:6C:A3:06:2A:1F:E2:63:85:A6:C3:3A:9C:6A:21:A2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3a:f8:3e:40:cc:91:31:36:f9:99:88:06:8e:ea:7b:cb:f2:
         2f:e3:7d:ef:76:76:82:88:1c:5e:d8:3c:1b:fd:1c:15:3b:23:
         f3:35:c0:54:f1:37:f6:5a:9f:c0:2a:a0:f1:a4:28:ac:8e:5b:
         e3:9d:30:3b:46:1d:5d:61:af:c9:ba:9b:0e:6b:cb:45:09:d5:
         e5:85:1a:af:22:ce:69:a3:bf:14:78:63:96:49:f9:b0:2c:07:
         21:1b:e6:a4:51:3d:2e:03:8b:49:cf:5c:f8:ff:a4:29:8a:50:
         f9:27:82:e3:57:ad:d1:08:b8:3f:11:d1:38:f2:c4:42:16:91:
         15:08:81:01:92:bd:1c:95:3d:63:f6:0a:71:af:90:a7:fa:3d:
         f3:28:4c:64:b0:34:9f:f8:e0:02:14:3b:ff:60:ec:c7:b3:b9:
         5f:84:15:cc:a8:a3:c8:33:05:3c:b0:da:eb:e8:f0:8b:19:c6:
         1e:11:de:09:ed:09:81:41:b6:2b:0c:53:b6:15:02:42:81:81:
         85:bc:54:bb:23:08:53:46:92:de:a3:77:cd:34:0c:3a:aa:28:
         c5:e5:1d:51:48:b7:93:88:6c:78:3b:bf:fa:60:b4:54:fc:da:
         55:c6:15:3a:21:f1:2d:a9:6e:0c:30:58:92:4e:f8:3d:24:55:
         f3:4a:c1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org