Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7.mft
File:                     705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7.mft (raw, json)
Hash identifier:          jNyo0D2A2vc5jSApBdQTd0fvNy0ukO7LhTiUCvhOh5c=
Subject key identifier:   3D:3C:AA:B0:BF:9A:FF:E0:B8:2F:9B:F9:73:69:18:08:D6:60:B9:CA
Authority key identifier: 70:5E:A3:E9:0F:F6:6B:F8:27:83:6B:D8:D7:FD:A3:6D:AE:3A:ED:E7
Certificate issuer:       /CN=705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7
Certificate serial:       358320460AA59E5DF508BF117CC7071E7A8D8C33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7.mft
Manifest number:          5F
Signing time:             Tue 13 Feb 2024 16:11:32 +0000
Manifest this update:     Tue 13 Feb 2024 16:06:32 +0000
Manifest next update:     Wed 14 Feb 2024 17:26:32 +0000
Files and hashes:         1: 3133312e3136312e36392e302f32342d3234203d3e20323634343032.roa (hash: /UffrgMecx7bD3F47FUQNuf75RcLFD3a9dhMtGNEEYk=)
                          2: 705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7.crl (hash: VDcExAxlmv3DUb2JqwvGMb6a9El9NmfdF//ewjcN0e8=)
                          3: 3133312e3136312e36382e302f32342d3234203d3e20323634343032.roa (hash: GdCsMen+j9bMSm6yKMWzryku0b7lEnolsiagKhdXPw0=)
                          4: 3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa (hash: PkZSBuAzhCgmerBa+MLb2tBNLUQtoxPf+f/GoitpRN4=)
                          5: 3133312e3136312e37312e302f32342d3234203d3e20323634343032.roa (hash: nzM0w4bDfhSpxShP8GQQRpkEUwfdqDKAIL6hbo6Y3NY=)
                          6: 3133312e3136312e37302e302f32342d3234203d3e20323634343032.roa (hash: FHjFFIjFCDVFW/ftrwSeBVpPNDb0ifSCyJEMGRbElb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:83:20:46:0a:a5:9e:5d:f5:08:bf:11:7c:c7:07:1e:7a:8d:8c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7
        Validity
            Not Before: Feb 13 16:06:32 2024 GMT
            Not After : Feb 14 17:26:32 2024 GMT
        Subject: CN=3D3CAAB0BF9AFFE0B82F9BF973691808D660B9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:e9:95:7c:2b:95:fb:cc:2b:87:69:e3:15:
                    d0:f0:30:37:aa:6e:a7:a7:cd:91:c6:e4:b2:8d:a0:
                    8d:e6:5e:ae:5a:7e:47:ba:66:af:63:e7:f5:2b:dc:
                    90:94:19:41:23:68:4e:62:a3:5a:82:36:be:83:56:
                    04:dd:a5:b6:a4:1e:76:18:b8:e4:c8:53:43:e4:ca:
                    24:cc:51:5b:1d:d4:89:ad:aa:5f:50:78:68:ff:7b:
                    c2:a2:22:bf:bb:ad:4c:75:ef:4b:8f:22:54:69:77:
                    a6:a2:c5:65:d2:03:ab:51:8b:56:40:5c:6b:4c:da:
                    8b:f8:79:fc:83:a6:b8:a4:64:21:ab:46:15:e2:c5:
                    81:c7:21:7a:08:cc:4f:ed:99:14:21:2d:d8:fc:66:
                    c1:b6:08:47:1c:27:cf:44:20:d9:28:60:0b:57:3e:
                    0c:3e:54:32:3e:f1:9a:03:97:06:58:fc:df:e8:9c:
                    c4:45:57:55:9f:31:05:00:e3:12:81:1c:1a:81:04:
                    1d:c7:50:fe:f2:9e:47:a5:cf:59:b1:ee:c9:df:5c:
                    77:da:43:cd:e8:48:6b:d3:e7:69:3f:74:d7:e0:c5:
                    c2:ff:76:06:7d:66:5a:42:a8:5b:81:e1:f1:8f:0e:
                    ab:62:7f:16:61:ee:4c:d5:cb:cc:e6:d6:c8:56:d0:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3C:AA:B0:BF:9A:FF:E0:B8:2F:9B:F9:73:69:18:08:D6:60:B9:CA
            X509v3 Authority Key Identifier:
                keyid:70:5E:A3:E9:0F:F6:6B:F8:27:83:6B:D8:D7:FD:A3:6D:AE:3A:ED:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/705EA3E90FF66BF827836BD8D7FDA36DAE3AEDE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3b:4a:db:c7:69:a0:20:b5:d5:df:12:26:b5:5b:8b:67:cc:
         62:07:28:a1:ce:1d:17:60:f7:5c:06:09:a7:cf:3b:3a:43:e0:
         b9:2d:28:03:90:5c:cb:e9:9b:d2:b4:df:9f:73:56:de:d5:52:
         d0:e3:e7:0e:d4:aa:c9:24:68:56:5a:97:44:31:0e:17:1a:57:
         f8:5c:14:39:79:d2:ab:c1:36:a3:d6:aa:a2:e4:63:26:83:1d:
         3b:6f:4f:16:dc:7e:3a:8d:43:97:c6:b9:09:1c:a1:71:59:2b:
         d6:67:1b:3b:91:15:c2:a2:ef:3c:da:b6:1d:b1:6a:b9:f0:99:
         2f:c5:38:37:3d:98:9b:80:0b:b2:b0:58:f3:9f:ad:c2:5c:18:
         1f:8f:6e:a8:c2:70:47:b6:49:68:73:85:7b:0e:ab:65:00:2e:
         01:95:03:32:db:cc:76:85:c1:f2:a9:f5:79:a0:4b:5b:02:14:
         92:ba:f0:a3:1a:49:b8:0d:4d:89:21:d1:5f:8b:ce:3a:31:9e:
         17:8e:dd:50:68:42:8b:ee:79:a9:66:4b:89:08:d3:eb:92:c9:
         d7:33:3b:e1:9f:ec:ed:a5:83:75:18:34:58:43:41:b0:75:ef:
         14:55:a1:52:20:4e:24:2b:66:44:d4:ac:43:6a:af:3d:85:35:
         32:65:26:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org