Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.mft
File:                     68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.mft (raw, json)
Hash identifier:          csP5uVrDvNSbnFmRhP0CflkBf0UrQoiioInpJswoC+A=
Subject key identifier:   77:16:44:06:EC:79:E5:3C:12:92:93:AD:C5:94:A3:85:A6:DD:5E:83
Authority key identifier: 68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5
Certificate issuer:       /CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
Certificate serial:       15373F736ED07F62452404A25015475C860485E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.mft
Manifest number:          0523
Signing time:             Mon 02 Jan 2023 05:10:00 +0000
Manifest this update:     Mon 02 Jan 2023 05:05:00 +0000
Manifest next update:     Tue 03 Jan 2023 05:10:00 +0000
Files and hashes:         1: 323830343a326139633a3a2f33322d3438203d3e20323634303834.roa (hash: hZbHWpkMPyQpLGlZzttY7RNKYdlHSNK61JrXG3Dp6OQ=)
                          2: 68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.crl (hash: 7VPptfZT9CvgQ4JEDONNXXZ7QAMYCYI9+KY47SN0GiM=)
                          3: 3134332e3230322e3234382e302f32322d3234203d3e20323634303834.roa (hash: 0Ooo2C/km/THmLyWndAuhMabrFGCyQN4F5CABXgA/ik=)
                          4: 3137302e38312e3138342e302f32322d3234203d3e20323634303834.roa (hash: vkT/Ll0lBhSB+Yhk71hEma9gAK6ykgwy0/2kDEwuE6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:37:3f:73:6e:d0:7f:62:45:24:04:a2:50:15:47:5c:86:04:85:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
        Validity
            Not Before: Jan  2 05:05:00 2023 GMT
            Not After : Jan  3 05:10:00 2023 GMT
        Subject: CN=77164406EC79E53C129293ADC594A385A6DD5E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:bf:ec:37:fa:54:33:0b:da:94:60:e2:fc:
                    0a:b0:f1:f7:b1:08:0f:9e:69:fd:90:ba:37:54:0b:
                    a5:cc:e0:b8:e7:21:01:e3:5a:a9:8a:17:f9:90:20:
                    ca:66:d2:60:7c:da:cd:8e:03:6e:ac:79:93:f7:9a:
                    8d:92:c7:cc:f6:f4:fc:1e:58:1d:fa:e4:f3:86:85:
                    2f:09:d5:61:29:c5:ed:68:e0:6a:d9:8f:7b:13:a8:
                    5f:e6:44:93:94:ea:ff:66:7a:1f:90:df:75:59:ea:
                    d4:20:e5:53:ce:68:73:9c:b1:8e:7f:78:0f:a2:b5:
                    10:5e:7f:e6:ae:91:cb:af:5d:c4:0a:d7:4e:86:f6:
                    14:67:61:5b:75:47:cf:a4:69:4b:fd:b4:00:fe:46:
                    42:d6:b8:bb:64:66:f9:d6:60:21:e2:2d:93:80:1a:
                    55:bf:fa:cc:1a:b3:c1:b6:a7:92:ce:1d:27:8c:de:
                    32:89:8a:c8:66:fd:d6:04:d8:44:9b:61:bd:5a:b3:
                    24:65:14:36:2e:b8:1e:96:89:3b:73:4c:e2:5e:a0:
                    1b:be:01:82:a9:74:79:1b:fa:f8:69:ac:16:5b:4e:
                    c7:33:d6:24:97:91:51:06:28:46:64:22:62:28:a0:
                    ff:2c:9a:1c:ef:43:a4:12:1d:e6:65:cf:92:f5:34:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:16:44:06:EC:79:E5:3C:12:92:93:AD:C5:94:A3:85:A6:DD:5E:83
            X509v3 Authority Key Identifier:
                keyid:68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:92:90:d1:58:b1:32:e6:96:8d:a8:7d:1d:d6:34:77:75:
         55:3f:df:de:7b:61:fb:e0:22:b0:9a:dd:5d:87:6c:a3:4c:e2:
         44:e4:99:82:e5:2e:0c:ca:99:0d:d2:f1:15:3f:21:22:6f:ac:
         ec:65:c2:eb:c2:d0:24:01:db:73:39:a1:8e:17:d8:42:ab:f9:
         7d:f5:c9:64:c8:3f:bb:d6:aa:99:f9:7e:7d:13:ed:e4:94:de:
         00:cb:f3:db:d3:ac:bf:86:ed:c2:d2:d0:10:e3:fd:88:78:b0:
         b4:2e:2f:43:23:84:4b:be:8c:31:6b:12:db:50:c1:c8:48:94:
         26:72:a3:75:80:59:ef:a8:43:1f:e2:29:52:84:89:c9:b1:9b:
         b0:8d:62:52:79:53:47:9f:c0:ab:b9:a1:bf:80:13:b9:9e:37:
         70:a6:2d:ec:9a:5f:9f:44:a6:84:2f:c9:05:32:87:70:58:e3:
         b4:21:e7:62:91:cb:68:df:30:33:84:c6:40:bc:b9:16:40:bb:
         72:47:bf:2b:2e:d5:17:ea:38:58:42:de:a7:df:70:c2:d7:bf:
         91:34:9d:cf:41:76:76:21:46:54:34:1f:f9:5f:76:e7:65:49:
         94:ca:09:30:b6:8a:bf:e2:74:85:b8:81:49:b2:70:ee:61:dc:
         5e:8c:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org