Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.mft
File:                     D8DC918B29E361938B8B9F2093F104E2C3CBADB9.mft (raw, json)
Hash identifier:          crY7+CoYpgphU9/348hNXklPoks+AZefz6ZYKWAC6pc=
Subject key identifier:   4C:F9:83:01:C8:1E:8F:52:C0:F4:74:B9:47:2B:98:17:45:2A:15:FD
Authority key identifier: D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9
Certificate issuer:       /CN=D8DC918B29E361938B8B9F2093F104E2C3CBADB9
Certificate serial:       5636C5B8BC4B52C2FCAE3FC6CE08983249AE750E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.mft
Manifest number:          0288
Signing time:             Mon 15 Apr 2024 05:23:04 +0000
Manifest this update:     Mon 15 Apr 2024 05:18:04 +0000
Manifest next update:     Tue 16 Apr 2024 09:07:04 +0000
Files and hashes:         1: D8DC918B29E361938B8B9F2093F104E2C3CBADB9.crl (hash: iFKRFkd3xA7J75LR4ifqBao3lb9WYwiLQO4XFVOOVfw=)
                          2: 3138392e35302e34302e302f32312d3234203d3e203238333236.roa (hash: KaFZIQmrWIWfuXT3PntVVy6DJWRZhWiAJSlTmDo2Qso=)
                          3: 323830343a383865303a3a2f33322d3438203d3e203238333236.roa (hash: SeaWMyrp5xV/FM4egKpNXuVAmp5YfNwi7FmjQldB7UM=)
                          4: 3138392e35302e34382e302f32322d3234203d3e203238333236.roa (hash: h3UrUZsTD826DvfzDICLSZbfc+tITfbxjPFcWLT8B44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:36:c5:b8:bc:4b:52:c2:fc:ae:3f:c6:ce:08:98:32:49:ae:75:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8DC918B29E361938B8B9F2093F104E2C3CBADB9
        Validity
            Not Before: Apr 15 05:18:04 2024 GMT
            Not After : Apr 16 09:07:04 2024 GMT
        Subject: CN=4CF98301C81E8F52C0F474B9472B9817452A15FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:f9:e6:4a:30:21:58:7e:7f:c2:90:73:cc:
                    5f:d2:f7:77:ba:cc:ca:ef:ff:7b:62:fe:84:91:c7:
                    ad:6d:4a:7c:60:a5:dd:9f:7c:a4:9e:ef:a0:57:58:
                    4c:ee:21:f7:db:dd:e5:c5:53:3d:3a:b2:73:25:18:
                    95:17:4f:94:56:cf:2c:5d:63:4d:45:4c:11:c1:45:
                    c7:ec:90:d3:f8:cc:48:a9:aa:db:31:a9:a0:31:5f:
                    36:26:99:8c:9f:8b:83:f9:de:38:64:69:c8:2a:0e:
                    24:dd:85:2f:a6:e7:44:1a:76:9e:80:61:6a:82:22:
                    8c:dd:3f:8f:d8:47:81:08:59:53:01:2b:82:1c:b9:
                    3a:aa:9f:a0:77:ff:cb:35:cd:4c:50:95:d1:7a:69:
                    06:d2:1d:05:eb:21:65:0e:3f:d5:d4:77:c3:c8:2c:
                    fe:62:74:3f:59:27:40:83:e4:a3:2d:83:66:af:79:
                    e2:4c:78:15:2b:99:7c:ed:77:2d:85:90:23:d9:a4:
                    ad:c3:2c:d7:c0:8d:db:51:a9:2f:02:43:ca:61:b5:
                    fe:ac:7a:8b:78:7c:64:5e:c9:ff:c5:54:aa:73:86:
                    42:2b:42:e2:93:90:85:fc:99:b0:84:a3:73:46:49:
                    6b:52:e1:af:f9:eb:b1:32:89:21:8f:fa:6f:76:b4:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F9:83:01:C8:1E:8F:52:C0:F4:74:B9:47:2B:98:17:45:2A:15:FD
            X509v3 Authority Key Identifier:
                keyid:D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:00:c6:fb:4f:34:44:6d:53:8c:33:82:e7:db:13:de:d0:36:
         6e:d4:58:07:fc:f9:51:90:8b:4b:45:f5:9f:01:55:b4:07:71:
         90:d9:84:88:9e:e0:14:8b:d8:e5:ee:d8:82:f5:f1:25:89:8d:
         8d:9f:83:04:5f:b3:4e:64:14:76:e8:0c:bb:90:4b:9e:0b:25:
         96:27:78:22:47:14:a2:c2:6d:f2:72:a0:14:e2:ff:ea:ea:fa:
         e7:06:4e:49:34:52:f1:16:ff:7e:70:16:0e:33:cb:80:08:38:
         f8:f1:78:0e:65:6a:af:e5:2f:6a:96:71:be:6b:24:e5:5a:1d:
         1f:eb:a5:1e:96:fe:66:9c:0e:12:ba:e1:03:74:b5:8e:e7:60:
         01:77:3e:a0:0d:7a:ef:a1:9e:68:9c:27:57:e3:f6:26:4c:11:
         47:9e:19:fe:85:57:ae:ee:b8:0b:9c:f6:95:88:0e:ed:bb:a3:
         39:7b:bb:ea:57:2c:dd:f6:02:19:b8:12:bb:b8:d3:69:2a:4b:
         2e:6e:33:2f:fe:4d:11:aa:c0:30:8f:81:f7:92:67:9d:6a:1b:
         67:e7:c5:cd:23:bb:c8:88:c5:14:9f:a7:ca:69:91:9c:71:ed:
         49:4d:68:a4:31:a5:89:c5:db:bc:dd:92:99:51:91:c0:54:b4:
         23:28:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org