Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.mft
File:                     BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.mft (raw, json)
Hash identifier:          DvChVkhNAtDUV9kcot8ogvYsctUmK5PVCLfuMiFBRtI=
Subject key identifier:   87:3A:AC:E7:B3:4D:59:01:A3:A7:CE:2B:A1:1E:2A:0F:67:BD:D2:BF
Authority key identifier: BF:E8:EA:8B:A4:57:05:88:5E:AA:A9:FF:DB:C9:8A:83:D1:1B:27:94
Certificate issuer:       /CN=BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794
Certificate serial:       687356F35FF1BF62E179BEBFE056CFD526AAEF90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.mft
Manifest number:          5F
Signing time:             Tue 05 Mar 2024 08:45:42 +0000
Manifest this update:     Tue 05 Mar 2024 08:40:42 +0000
Manifest next update:     Wed 06 Mar 2024 09:06:42 +0000
Files and hashes:         1: 323830343a346436633a3a2f33322d3332203d3e20323638313935.roa (hash: MUfCFQvEg8F0/Vz+hH+h4OpY7+aPv1DCWhjHGq8gV/Y=)
                          2: 34352e3233352e3130302e302f32322d3232203d3e20323638313935.roa (hash: OaSP3xXVDONIKwCSpXEgzY6XBVNCwwDWZXFn/42TBgk=)
                          3: BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.crl (hash: RCeNI4SMThTGiB4JGUerPpZvdPrvkGgAtskZxg0aHbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:73:56:f3:5f:f1:bf:62:e1:79:be:bf:e0:56:cf:d5:26:aa:ef:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794
        Validity
            Not Before: Mar  5 08:40:42 2024 GMT
            Not After : Mar  6 09:06:42 2024 GMT
        Subject: CN=873AACE7B34D5901A3A7CE2BA11E2A0F67BDD2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:64:38:4e:23:93:8c:3f:bb:d5:74:bc:24:08:
                    18:00:52:1a:8b:58:8b:73:6a:b6:a2:f5:4a:87:9e:
                    04:bb:0e:38:5c:fa:8d:f9:78:b2:f0:bc:e5:71:87:
                    9c:22:68:96:25:0f:ec:9e:56:e1:fd:dc:ee:9c:df:
                    d4:85:23:79:85:bd:66:d5:ea:eb:86:4c:d0:0d:43:
                    1f:e9:bd:3e:af:e4:25:ec:10:96:fa:24:aa:13:c0:
                    03:60:08:0c:8a:c2:81:4a:a5:65:8b:9d:13:42:26:
                    38:68:53:54:e4:40:97:1a:e3:8d:c4:a1:9d:2b:49:
                    ef:e3:74:80:7e:2b:72:9d:59:33:73:ed:e5:81:69:
                    71:2a:53:87:a1:24:c0:46:f8:dd:fe:da:f2:93:6c:
                    de:bd:c7:ad:1b:01:26:28:75:a6:c9:7d:14:ea:07:
                    24:2c:2c:64:6a:2f:39:fd:31:f5:bd:07:ee:6d:72:
                    89:7b:4f:6f:c4:8e:ca:b7:a9:c3:12:ff:a7:0c:6f:
                    4f:22:08:b5:83:7e:00:49:35:7b:1f:0d:c0:13:ee:
                    1a:ce:f1:2f:f5:c0:0d:c0:8a:a2:e5:ab:d0:b3:7d:
                    31:7e:0b:57:11:ef:cf:cc:01:29:4d:0f:37:68:cc:
                    a6:de:bf:ae:e2:c2:8c:3d:e7:27:c4:8e:70:61:10:
                    bd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3A:AC:E7:B3:4D:59:01:A3:A7:CE:2B:A1:1E:2A:0F:67:BD:D2:BF
            X509v3 Authority Key Identifier:
                keyid:BF:E8:EA:8B:A4:57:05:88:5E:AA:A9:FF:DB:C9:8A:83:D1:1B:27:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:96:f8:a5:b6:bc:ed:40:0f:99:67:f4:69:c9:35:ad:77:7d:
         7d:7d:94:f2:22:90:bf:95:4e:ea:3d:0f:36:9f:21:09:4e:72:
         b6:ae:86:52:52:fa:a3:90:08:84:69:88:75:17:00:92:e1:53:
         8f:d7:1b:db:f7:9e:62:e2:a5:05:9e:82:6a:8b:9e:7c:f9:42:
         e9:e0:55:bf:92:8e:6b:97:74:7f:68:c9:d6:2a:a0:64:51:45:
         04:e9:9d:71:30:ec:8c:94:6c:ee:4e:77:ba:d3:dd:9e:89:8f:
         bd:ec:9a:62:d9:7b:06:06:df:85:82:27:53:40:b9:8a:cd:95:
         54:84:5d:ef:b9:50:90:0a:64:57:d0:99:1b:88:78:06:e5:ee:
         e5:77:1d:08:43:5a:95:cb:43:d6:b0:dd:24:9b:2b:2e:61:fc:
         83:7e:bc:20:b1:1a:cd:6d:3d:db:24:1d:88:f9:20:c2:86:66:
         1e:aa:ae:d2:1e:b7:cf:47:b9:9f:31:10:f0:f2:49:7f:33:ef:
         54:59:f1:27:f8:94:2a:51:62:f1:76:f7:e7:11:f5:23:a2:58:
         52:65:94:5a:6a:98:56:d8:27:b1:58:a0:0f:38:1d:91:0b:a6:
         ff:54:02:51:28:96:20:aa:bd:da:f3:48:6f:78:74:de:94:b3:
         49:35:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org