Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D7CF39F25D1116C46B57ECCFAACCFED4D14056BD.mft
File:                     D7CF39F25D1116C46B57ECCFAACCFED4D14056BD.mft (raw, json)
Hash identifier:          dzwUxUhwccw09RDrNqJy0e63Ks5Y6dUV+HOG8DIaZVs=
Subject key identifier:   EA:1F:33:50:87:1D:70:1F:C1:A5:53:38:46:1C:24:BC:C5:D1:CF:A5
Authority key identifier: D7:CF:39:F2:5D:11:16:C4:6B:57:EC:CF:AA:CC:FE:D4:D1:40:56:BD
Certificate issuer:       /CN=D7CF39F25D1116C46B57ECCFAACCFED4D14056BD
Certificate serial:       33F52C5B18939ED0E78FB7D6443011D698F42440
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7CF39F25D1116C46B57ECCFAACCFED4D14056BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D7CF39F25D1116C46B57ECCFAACCFED4D14056BD.mft
Manifest number:          EC
Signing time:             Sun 05 Feb 2023 11:57:28 +0000
Manifest this update:     Sun 05 Feb 2023 11:52:28 +0000
Manifest next update:     Mon 06 Feb 2023 13:26:28 +0000
Files and hashes:         1: D7CF39F25D1116C46B57ECCFAACCFED4D14056BD.crl (hash: ldAexppjJz2QCW8SFXBEcHkol//GP6gdsuHAYQJnc2Q=)
                          2: 3138372e36332e3230382e302f32302d3234203d3e203533303937.roa (hash: XJkz/14oCAS8zBl4f37Z5HPveyBPBQJ3cloPMH62Jqs=)
                          3: 323830343a333139303a3a2f33322d3438203d3e203533303937.roa (hash: YOvXu35X0qsiOd7hQ7Spdsq+Gy+P5B/x+sJ8t2UWr5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f5:2c:5b:18:93:9e:d0:e7:8f:b7:d6:44:30:11:d6:98:f4:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7CF39F25D1116C46B57ECCFAACCFED4D14056BD
        Validity
            Not Before: Feb  5 11:52:28 2023 GMT
            Not After : Feb  6 13:26:28 2023 GMT
        Subject: CN=EA1F3350871D701FC1A55338461C24BCC5D1CFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:ae:a0:8e:e8:6f:2e:7a:43:3d:6e:c5:ac:
                    38:fc:50:3a:0b:c8:83:0b:9e:1b:91:a2:c7:c4:43:
                    a6:d5:72:d4:da:ed:26:fb:4e:b3:5a:de:8c:2b:33:
                    41:86:c7:ea:3a:2f:09:8c:d6:a0:21:59:11:28:e0:
                    c8:f5:3b:9b:0a:d3:14:74:37:52:a5:18:c8:9b:bd:
                    de:4d:4c:68:9a:77:53:6d:3a:63:22:6c:dc:1e:71:
                    f7:11:cd:32:57:dc:3d:cf:5b:b0:e6:2a:dd:c8:db:
                    e0:48:47:00:ff:c3:c7:b0:61:a3:e0:b9:b5:35:85:
                    ce:52:ca:b3:ed:a8:ae:de:ac:38:4c:7c:af:2e:c8:
                    9d:65:79:dc:2f:49:58:c8:db:1d:bb:5a:72:2f:f8:
                    c5:50:41:60:02:99:45:2f:a2:f7:42:9d:33:6a:76:
                    dd:48:0e:aa:cf:a7:08:2a:d2:71:a1:81:f8:e8:dc:
                    47:38:f8:a0:83:8b:ae:18:c5:c2:a9:bf:b6:a9:83:
                    c1:df:e7:df:cb:ea:fa:75:fe:08:7e:90:cf:e0:a6:
                    63:ac:2a:37:d5:7d:96:bb:2a:f1:97:43:d2:8c:62:
                    c1:f0:93:39:89:f0:97:ec:03:99:61:c5:6e:89:9f:
                    74:88:2a:f8:60:9a:bb:dc:38:b7:32:75:24:7c:c0:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1F:33:50:87:1D:70:1F:C1:A5:53:38:46:1C:24:BC:C5:D1:CF:A5
            X509v3 Authority Key Identifier:
                keyid:D7:CF:39:F2:5D:11:16:C4:6B:57:EC:CF:AA:CC:FE:D4:D1:40:56:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D7CF39F25D1116C46B57ECCFAACCFED4D14056BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7CF39F25D1116C46B57ECCFAACCFED4D14056BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D7CF39F25D1116C46B57ECCFAACCFED4D14056BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:67:1e:95:2a:38:56:99:0a:f3:dc:22:90:7e:fc:f8:f7:25:
         6e:a4:05:7f:f1:aa:02:60:69:e4:27:70:93:58:de:6c:e1:d7:
         29:65:e2:a0:0d:a7:fe:c8:91:97:19:9e:45:29:05:83:fa:e3:
         4f:d8:8b:e2:f3:a7:88:eb:9c:86:03:e0:07:d2:41:1b:bb:d0:
         00:e0:6f:7e:7f:73:41:f8:8e:89:16:e2:64:7d:c2:b3:38:43:
         52:ba:e1:14:60:13:c9:6e:26:99:32:a9:ce:61:df:f3:8e:8c:
         7c:3d:04:43:b2:40:fe:cc:09:fa:6d:13:e9:59:d7:35:58:7e:
         57:98:8b:60:cb:ae:e4:d0:40:de:1f:b9:40:54:ec:47:85:05:
         91:66:91:bd:33:48:0d:ce:de:cb:e4:ba:f6:22:50:27:d3:b1:
         1b:2b:47:df:17:83:bc:ee:55:bb:4e:92:e8:52:85:77:9a:c2:
         93:e3:69:dd:b8:85:db:f9:40:9c:11:13:00:46:a2:3f:fb:36:
         e0:f8:5c:7d:e1:36:87:07:20:d4:29:4e:a5:7a:ad:44:ac:9f:
         1f:8d:01:b2:d3:51:41:c0:80:44:76:28:c3:2f:57:7f:c5:eb:
         59:68:96:01:93:a6:5f:ad:b5:2d:fb:f3:1e:da:b1:26:d2:be:
         73:fd:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org