Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.mft
File:                     42C85A39ED0D33A761B78E8D797BDD5D476B11C4.mft (raw, json)
Hash identifier:          3JRCVXCy+FxpmStjwVUyflw9KQxEVBCyyj3p0RS8lBU=
Subject key identifier:   37:88:10:43:4A:D8:12:9B:DA:38:B4:62:04:01:A6:63:8E:AC:B3:34
Authority key identifier: 42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4
Certificate issuer:       /CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
Certificate serial:       69EC3891A7F163BF85C986401C8BF5A427A1389A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.mft
Manifest number:          013E
Signing time:             Sun 14 Apr 2024 22:21:51 +0000
Manifest this update:     Sun 14 Apr 2024 22:16:51 +0000
Manifest next update:     Tue 16 Apr 2024 01:09:51 +0000
Files and hashes:         1: 42C85A39ED0D33A761B78E8D797BDD5D476B11C4.crl (hash: 1UoglgTxZQnEEH6/B7Ka/W3pIMP3y+tyFImTvOacv4s=)
                          2: 323830343a326362633a313030303a3a2f33362d3336203d3e20323635323430.roa (hash: Sox+eJRZVQSHxZexvY/bTL6iEqilntnCT8c5mUJj/Jo=)
                          3: 323830343a326362633a3a2f33352d3335203d3e20323635323430.roa (hash: M75Vp0yAuPNrehsT5HH70T42QLXeZgNYg/Pb+q19fsg=)
                          4: 3136382e302e322e302f32332d3233203d3e20323635323430.roa (hash: rj/SnawOfbgGTZFvK8Q5T1TE7VJWMI3gsWtsE9oCqkU=)
                          5: 3136382e302e312e302f32342d3234203d3e20323635323430.roa (hash: pZfQbEHft/j2dI/U3IMQHvSE1Hai2+xj/pbbFfJHaXo=)
                          6: 3136382e302e322e302f32342d3234203d3e20323635323430.roa (hash: ld928R9AOVIiflEyxoYFZ4+PDfqeoqOvYdUvmdwqJR4=)
                          7: 3136382e302e302e302f32342d3234203d3e20323635323430.roa (hash: cN0CSO9216Kipeh/zN1lVjxwlefoTSEOfFFYRjmTCT0=)
                          8: 323830343a326362633a3a2f33362d3336203d3e20323635323430.roa (hash: cIGAWzukfq0LN6PaCI2L6Yn4H5IQueRqH4aWvyT2O/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ec:38:91:a7:f1:63:bf:85:c9:86:40:1c:8b:f5:a4:27:a1:38:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
        Validity
            Not Before: Apr 14 22:16:51 2024 GMT
            Not After : Apr 16 01:09:51 2024 GMT
        Subject: CN=378810434AD8129BDA38B4620401A6638EACB334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:63:0e:03:0d:a5:49:26:f6:d7:b0:36:0a:
                    87:55:06:3d:e8:8e:b8:18:7d:7f:92:f3:65:58:03:
                    a2:67:fe:aa:bf:33:3a:a4:c8:ed:47:55:a7:80:5c:
                    38:8c:85:57:90:33:de:3e:47:1c:c2:15:5d:f3:39:
                    d7:a6:3d:fc:cb:b0:42:45:9a:ef:15:7c:e1:8a:37:
                    0c:c9:3a:31:87:ec:6f:0a:d4:c9:10:a3:30:be:3f:
                    6a:5e:f8:05:f7:08:aa:7f:2d:dd:34:e2:b4:40:56:
                    81:ec:b0:c5:d2:4e:fb:cd:64:73:6c:c4:42:ae:fa:
                    bc:22:37:5b:55:10:72:9f:76:54:88:ff:9a:5f:a7:
                    32:b1:44:bf:19:3f:0d:21:db:6a:f3:ba:e0:65:c2:
                    d1:a5:5a:cd:ee:ee:8a:03:58:36:05:fa:ff:b7:ac:
                    c1:11:d4:82:af:51:e1:d3:60:70:44:94:c3:8b:54:
                    99:bd:e9:87:38:6e:c4:d8:fd:e8:6e:fc:11:0c:de:
                    ac:90:80:48:bc:b1:2c:be:ba:e4:81:47:13:ae:a5:
                    5f:c4:2f:39:ee:a7:34:89:44:ff:1f:4f:8e:94:eb:
                    e0:44:24:64:2c:ee:65:4f:0d:7f:1b:1b:77:46:ad:
                    00:b5:d5:14:de:d8:ae:59:89:83:7e:dc:89:72:d7:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:10:43:4A:D8:12:9B:DA:38:B4:62:04:01:A6:63:8E:AC:B3:34
            X509v3 Authority Key Identifier:
                keyid:42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:2b:5d:da:1d:2b:21:c8:2b:08:0e:ed:bc:52:74:1e:f4:e2:
         13:70:01:93:1e:2d:f8:63:6e:14:eb:ea:4d:01:52:54:bf:09:
         c2:9d:79:15:7e:b9:2f:cf:14:67:7c:6e:2c:42:7c:a7:9c:59:
         3f:c4:79:eb:b7:3c:9b:d1:10:1d:7e:cb:c1:d1:e1:e7:00:94:
         26:07:3a:4c:b0:34:0a:b7:bb:e8:91:06:23:61:53:d2:83:af:
         68:62:1d:b2:7b:6f:9b:6a:2f:24:95:e8:31:9d:f3:b3:b7:26:
         dd:af:d5:3c:12:e9:a4:6f:1e:31:e0:a9:90:3b:4c:a6:db:6c:
         db:18:48:07:cd:31:fa:f3:f3:e8:02:c6:c8:3f:b1:f6:f3:0c:
         7b:a4:9f:4a:09:91:e9:db:56:b3:84:b6:04:a4:df:a0:73:dc:
         e8:9f:14:21:91:bf:0f:85:5c:96:39:7c:a5:92:2f:08:52:e2:
         86:f8:b0:76:63:9b:1c:3e:ea:2e:96:e2:0b:3a:be:26:64:56:
         b7:be:8e:6c:12:1d:37:3e:22:fe:e3:0f:88:c0:cc:0e:8c:33:
         74:bb:55:7d:d1:a4:cc:8d:11:6f:72:11:b4:89:52:e1:0d:fd:
         2f:3c:9f:5c:4e:80:17:85:82:ac:d9:24:65:81:ad:40:0c:23:
         67:78:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org