Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.mft
File:                     C6D220159E081BD89DCE356728E04C7EC1441DFB.mft (raw, json)
Hash identifier:          xnw3aUaYFfwEMUMilfbeIR4GVSM9dWc48S0qHQYV4ak=
Subject key identifier:   84:54:7D:96:5D:62:17:C7:9F:C3:F3:A2:48:70:64:6C:E9:A7:70:CF
Authority key identifier: C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB
Certificate issuer:       /CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
Certificate serial:       6FDD03ECBFCC159DB678B7AB456B2C231B135830
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.mft
Manifest number:          01DD
Signing time:             Fri 02 Dec 2022 19:56:39 +0000
Manifest this update:     Fri 02 Dec 2022 19:51:39 +0000
Manifest next update:     Sat 03 Dec 2022 22:52:39 +0000
Files and hashes:         1: 34352e3233312e38352e302f32342d3234203d3e20323637313839.roa (hash: dILxPR1idcz7KpV3W1s91t40jGzfBJTv+eSTYb+LUnw=)
                          2: 34352e3233312e38362e302f32342d3234203d3e20323637313839.roa (hash: 40ZmER0eqfqFfM5V+1sral2KtjmGTKaDWzEmXIcvfiQ=)
                          3: 34352e3233312e38342e302f32342d3234203d3e20323637313839.roa (hash: wZU1u0Bonk2fQR1y1A364nAL9WXV1lD8atkOl3Kf5+E=)
                          4: 34352e3233312e38372e302f32342d3234203d3e20323637313839.roa (hash: 74vea877bsFZfn1ZryKfsl2W9uGaW/mB4mtS+o+NxqU=)
                          5: 34352e3233312e38362e302f32332d3233203d3e20323637313839.roa (hash: NMm1aIAecauGZbHJ685P/MSs6udtsSOjElBDob4MHak=)
                          6: 323830343a343938383a3a2f33322d3332203d3e20323637313839.roa (hash: 86o82PXcfADd90hf8UnTUiScpug/jY5yTSZKp+AAEjw=)
                          7: 34352e3233312e38342e302f32322d3232203d3e20323637313839.roa (hash: 1UKN9Cna8nwkVHG/Y31771tm1nXdSvaEftkSv9CTzAk=)
                          8: C6D220159E081BD89DCE356728E04C7EC1441DFB.crl (hash: FSOVX1tQf6BZuTMRfunhTzNchiDY+My8I9p4PcqmnXg=)
                          9: 34352e3233312e38342e302f32332d3233203d3e20323637313839.roa (hash: 1UPreRcI1Re3oDlfBextHzyVw9iQ4xghR6KY1db3xQQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dd:03:ec:bf:cc:15:9d:b6:78:b7:ab:45:6b:2c:23:1b:13:58:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
        Validity
            Not Before: Dec  2 19:51:39 2022 GMT
            Not After : Dec  3 22:52:39 2022 GMT
        Subject: CN=84547D965D6217C79FC3F3A24870646CE9A770CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:6e:d8:31:c6:79:2e:4c:ca:d8:45:b0:f3:
                    60:02:2c:87:6b:6e:01:ac:1f:98:e6:94:ba:f9:79:
                    50:a3:d8:14:8f:f5:ed:eb:a4:31:6f:6c:64:ab:0c:
                    39:be:91:a8:3b:d7:f4:48:bd:a6:9f:6d:c0:a3:65:
                    eb:ac:1a:cd:44:d0:63:2e:50:b5:14:4b:62:49:9a:
                    65:e4:53:7e:3b:35:f9:32:b1:ac:79:b3:bb:7b:45:
                    3f:16:b6:7f:69:96:64:21:ec:61:70:22:bf:ab:fe:
                    ef:bd:29:4d:7a:fb:a3:18:eb:81:d6:95:2a:0a:e3:
                    97:14:54:2f:f6:76:f7:ba:cb:f0:95:69:e1:f7:91:
                    8e:22:ea:66:0b:b1:12:c7:d5:7b:e5:5a:41:36:91:
                    f5:c5:af:c7:33:c5:1a:9c:f2:d6:39:a0:e8:17:71:
                    45:c3:f5:1b:b8:2c:c0:a4:9f:61:84:3f:cd:8f:5b:
                    bf:5c:06:7f:47:ad:93:49:5a:86:92:d6:c4:18:d7:
                    7f:7b:61:6b:6d:02:0e:2b:96:a4:f3:64:30:4b:2f:
                    62:bb:84:56:bd:25:5a:5e:60:da:bd:06:0a:7a:5f:
                    32:04:3f:aa:28:68:77:26:1f:f9:8b:e7:b5:fd:05:
                    f5:e2:e5:b3:58:5a:42:db:d8:e5:a8:8b:99:07:9b:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:54:7D:96:5D:62:17:C7:9F:C3:F3:A2:48:70:64:6C:E9:A7:70:CF
            X509v3 Authority Key Identifier:
                keyid:C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:65:2d:7b:d8:c8:fe:26:9b:7b:e4:d5:a9:60:95:b8:23:02:
         13:44:b9:2d:97:79:47:77:09:3f:7b:dd:9a:35:f3:c3:d1:75:
         e5:b8:89:22:11:13:b9:fb:65:d1:ec:e8:69:20:00:12:75:dc:
         93:3c:ee:cc:89:f6:f5:43:2b:91:01:e5:01:81:ce:bb:c3:9e:
         71:c4:3b:bd:4d:1a:ec:bb:1f:86:86:8b:48:06:e6:80:38:09:
         bf:b6:95:82:85:11:59:42:9f:9c:d4:f4:7f:28:19:ed:9d:1c:
         97:76:3b:36:46:8a:eb:27:4c:fb:e9:01:b0:e1:0a:64:54:75:
         a5:ee:ca:4c:c1:4d:10:3f:4a:aa:f9:99:2a:0c:f6:33:27:62:
         4b:de:03:ca:01:98:9b:0c:5d:5a:ee:9e:be:f5:6b:36:44:46:
         fd:ae:ef:a1:be:e2:25:13:b4:fb:4b:53:6d:36:2d:82:4d:0e:
         86:69:e3:c0:03:d2:49:b3:4f:1f:5f:33:8a:be:bb:92:a8:a3:
         b0:3f:33:c6:01:3c:80:95:54:0f:51:ba:1d:9f:81:91:24:72:
         5e:21:52:3f:87:b8:eb:40:09:64:9d:12:0f:3f:6c:63:46:cd:
         dd:e7:ac:4d:52:7a:f0:5c:8a:eb:a7:83:40:ef:30:b2:77:3e:
         95:c0:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org