Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.mft
File:                     4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.mft (raw, json)
Hash identifier:          Iq0lnveC+X3b8PJ0NVGytJsJFYl1psdKTCwXyblGULg=
Subject key identifier:   BC:3B:CA:23:29:10:85:70:38:CB:1F:55:CA:31:17:1C:91:0C:CB:1C
Authority key identifier: 4C:66:98:1C:BC:4C:89:12:9E:4F:B5:EE:C6:4A:D1:AC:99:F9:00:98
Certificate issuer:       /CN=4C66981CBC4C89129E4FB5EEC64AD1AC99F90098
Certificate serial:       6024F3404BDE4C6E00DD1F9BDB25439AB62FDDDE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.mft
Manifest number:          51
Signing time:             Fri 01 Nov 2024 14:14:07 +0000
Manifest this update:     Fri 01 Nov 2024 14:09:07 +0000
Manifest next update:     Sat 02 Nov 2024 16:01:07 +0000
Files and hashes:         1: 4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.crl (hash: acXL0yW+KuYX8KAlduWLh1oXNKkqPlQKtcSuzyzg2Vg=)
                          2: 34352e3138382e36382e302f32322d3234203d3e20323639353233.roa (hash: SYdQlECC59s/2uYv1YsFr3AldPSlq8U2c5Qy1WyPLy8=)
                          3: 323830343a363565633a3a2f33322d3333203d3e20323639353233.roa (hash: 21CcGiQ/RrKda2JAfufARaY1zoV8jLpKL6xj8v39Pu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:24:f3:40:4b:de:4c:6e:00:dd:1f:9b:db:25:43:9a:b6:2f:dd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C66981CBC4C89129E4FB5EEC64AD1AC99F90098
        Validity
            Not Before: Nov  1 14:09:07 2024 GMT
            Not After : Nov  2 16:01:07 2024 GMT
        Subject: CN=BC3BCA232910857038CB1F55CA31171C910CCB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a5:a4:de:a3:fd:68:5c:d6:13:4c:1a:52:65:
                    28:7d:1d:93:1c:b4:d8:57:9c:f7:19:95:69:53:80:
                    0e:0e:bf:f6:4c:cb:1b:56:37:67:73:fa:45:69:d6:
                    07:d4:23:1f:72:3d:e6:ea:d1:0b:07:5e:0c:86:77:
                    01:81:34:0f:8b:43:f9:5a:0a:d1:07:d0:0b:9f:c1:
                    86:22:96:ac:e4:92:64:0c:ae:f9:05:bd:e6:1d:34:
                    c0:d6:af:e7:a3:49:85:a9:e9:fd:df:de:30:61:22:
                    54:29:de:7f:55:c8:d9:72:da:19:4e:e2:11:c9:7a:
                    ca:f8:24:d1:2c:c3:0d:79:17:df:94:27:5d:42:27:
                    61:96:73:3a:47:0b:a0:d2:28:05:cb:dc:a8:bf:49:
                    09:e0:06:dd:71:1c:a9:04:b5:23:29:e9:04:fa:78:
                    cd:66:7a:58:c3:7f:9a:ac:a2:b2:c5:fe:f6:ac:d3:
                    f5:de:53:4e:e8:c5:9b:16:0c:63:06:e9:e5:1c:17:
                    7e:87:a8:18:25:7c:9c:12:4f:b3:7b:6b:5a:be:5a:
                    b2:e5:3a:f8:09:dc:d9:8e:fb:b9:64:a4:b5:f4:b1:
                    3e:d7:2f:d1:92:58:b4:f7:f3:9f:5d:10:82:6c:c3:
                    ef:d5:b2:b9:06:50:7f:3d:df:31:49:57:89:6e:c4:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3B:CA:23:29:10:85:70:38:CB:1F:55:CA:31:17:1C:91:0C:CB:1C
            X509v3 Authority Key Identifier:
                keyid:4C:66:98:1C:BC:4C:89:12:9E:4F:B5:EE:C6:4A:D1:AC:99:F9:00:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d7:f1:f8:1b:c6:d3:ad:a0:a6:dd:46:69:12:11:99:fb:b9:
         37:20:af:40:72:99:84:60:fa:4d:08:75:c4:54:10:de:14:af:
         cf:14:11:dc:59:40:fe:c6:62:94:b8:e7:e7:8d:9e:40:de:2c:
         e6:fa:35:42:2b:4d:05:ef:fe:9f:99:20:bb:ad:ac:cc:01:cf:
         aa:15:59:4f:f0:ce:06:e5:f5:58:ef:ff:17:ed:b8:0f:73:1b:
         9e:a1:c8:b4:0a:7a:1a:86:bd:bf:f6:ca:2f:47:0e:2e:1a:25:
         0f:95:84:37:40:06:0c:12:6d:35:bf:e5:bf:2a:d3:4d:f6:b0:
         cb:94:a2:a6:1f:07:12:26:2e:1c:c4:26:cd:5f:60:39:d3:41:
         c4:2c:f4:d9:9c:9f:13:f7:04:73:0c:2f:4f:73:bc:fc:f2:d8:
         49:fe:50:5e:5f:3c:d1:79:fa:bd:fe:7a:f7:39:9f:e2:11:b9:
         ed:3c:87:9a:68:4e:51:fa:6e:3b:bd:6f:08:88:3c:46:6a:1c:
         0d:58:16:a3:24:ec:12:30:e5:6e:08:e5:60:6a:63:6d:50:c2:
         6e:69:7b:fe:b7:eb:6b:ac:cc:38:bd:20:22:99:dc:58:6c:0c:
         12:37:5c:22:45:b7:be:9b:9f:37:5b:09:25:e7:d7:82:73:9a:
         5f:34:4f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 18:13:00 2024 by rpki-client on console-fra.rpki-client.org