Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.mft
File:                     59BFA2FF28275A2F301C7FB1117398C02B8E40A3.mft (raw, json)
Hash identifier:          Kf532ohIUcaIg4UIFEkYykQM8iPFcINrJQuaXTmBr7s=
Subject key identifier:   67:E9:96:B3:EC:63:C8:DC:4D:50:0D:3D:46:C7:7E:56:5C:A7:6B:B1
Authority key identifier: 59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3
Certificate issuer:       /CN=59BFA2FF28275A2F301C7FB1117398C02B8E40A3
Certificate serial:       11E44B810CB08C901A93B7C0F4798E2EDB5D8C88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.mft
Manifest number:          30
Signing time:             Thu 28 Dec 2023 13:04:07 +0000
Manifest this update:     Thu 28 Dec 2023 12:59:07 +0000
Manifest next update:     Fri 29 Dec 2023 14:46:07 +0000
Files and hashes:         1: 3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa (hash: nYVfTJw0ZvPbuMrjyavRUsIzPjk8MbTzOAGJyyTqUAc=)
                          2: 3230302e3232392e3234372e302f32342d3234203d3e203532363331.roa (hash: EEqlzDlgyonb+2SY6oZRfzRsUjxBSe7vxpMU4+KC5B4=)
                          3: 3230302e3232392e3234342e302f32332d3233203d3e20323730383135.roa (hash: NvlCZEZWF6QCjXEKADo5JeJwAjIzKHgH5ZlTJhahtWA=)
                          4: 3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa (hash: IDtCiWmKLuiusKQlfZ/zrO3d36n7X/FsszhzBRqiTsI=)
                          5: 3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa (hash: bZxHHftFUW4+NkedDZgFalOjQHRrRyZRBuvqLewb1RM=)
                          6: 59BFA2FF28275A2F301C7FB1117398C02B8E40A3.crl (hash: zr6isx+j97AIZczjiIBPb3HGe8tX8LlQDUQVWZDemg0=)
                          7: 3230302e3232392e3234362e302f32342d3234203d3e203532363331.roa (hash: /Jdw7qq0LbeIFY92DZF/jCbXcky9yWPO4MZ9j5ZmzfI=)
                          8: 3230302e3232392e3234352e302f32342d3234203d3e203532363331.roa (hash: 2mgSrLUt0Ub7wsHbwDe/OspdRnN7iQYTw/iSVqu632g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e4:4b:81:0c:b0:8c:90:1a:93:b7:c0:f4:79:8e:2e:db:5d:8c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59BFA2FF28275A2F301C7FB1117398C02B8E40A3
        Validity
            Not Before: Dec 28 12:59:07 2023 GMT
            Not After : Dec 29 14:46:07 2023 GMT
        Subject: CN=67E996B3EC63C8DC4D500D3D46C77E565CA76BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:08:65:e5:79:85:16:5c:01:1a:77:0e:a4:
                    00:89:b5:f5:86:e1:16:49:4e:1c:0b:d5:64:73:55:
                    a7:0c:c4:23:ed:d9:97:9d:59:fc:c1:7d:36:76:08:
                    9d:65:af:4f:bf:31:27:db:51:a3:ac:9a:ed:e3:78:
                    28:a2:36:9f:4a:69:58:2c:a8:3b:c4:43:da:09:00:
                    58:2c:91:33:e7:b0:f9:c1:b2:d6:a0:a4:56:0c:f3:
                    17:50:a0:be:55:38:bd:fb:70:3d:6a:51:c0:26:97:
                    4a:62:4b:de:de:da:1f:7f:d6:33:85:6a:c8:3c:50:
                    c3:43:bc:7c:bf:37:25:29:0c:7b:78:25:d2:94:3f:
                    fa:25:aa:45:f6:ba:8a:e1:c3:6b:75:08:e3:3b:9c:
                    24:f3:4e:e7:eb:ff:c5:8d:82:94:d3:51:7b:f4:bc:
                    74:41:fe:9e:b9:28:b2:d3:e2:52:38:ef:f1:31:14:
                    cb:7c:50:98:8d:db:d1:58:ab:e7:ff:13:78:db:1a:
                    e9:bd:ed:e1:92:a2:b3:f8:62:f8:26:c0:6d:1f:30:
                    3e:6a:eb:9a:62:70:1a:97:81:43:d5:c9:c4:76:55:
                    55:0b:e8:df:02:ac:dd:ca:b6:70:a5:36:40:e9:ca:
                    9a:aa:cb:fc:1f:fc:9c:bb:4e:45:9e:ef:9c:c9:52:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E9:96:B3:EC:63:C8:DC:4D:50:0D:3D:46:C7:7E:56:5C:A7:6B:B1
            X509v3 Authority Key Identifier:
                keyid:59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b6:d9:6d:ed:04:0e:79:93:60:be:28:72:a5:d0:71:09:67:
         d5:5a:eb:8f:c6:12:f9:47:51:52:cf:5c:61:85:ec:84:04:66:
         03:de:76:a2:17:62:cf:d3:87:b0:15:49:dd:c5:97:b0:03:2a:
         94:cf:57:40:ed:05:4b:df:e0:16:69:89:61:f4:0b:44:8a:d2:
         14:5e:d2:a2:92:70:2e:76:4f:2b:ea:38:6b:dc:ec:9f:fb:2e:
         3b:52:5d:21:52:f6:a7:25:0a:ab:98:a6:05:7d:47:40:e8:27:
         e4:6e:51:90:82:ec:4a:14:b0:0f:95:34:66:e2:ff:ce:99:8c:
         a3:0a:9a:67:56:56:56:5f:98:f2:b1:70:db:b8:96:2f:1b:39:
         ee:52:1b:39:dd:3e:97:e5:2d:38:bb:03:b0:f4:7a:77:ae:a2:
         95:24:bb:0f:f2:7f:7e:3f:a3:48:da:1e:75:4d:93:26:8b:39:
         84:c9:8b:c1:d4:25:c0:c9:04:33:23:09:1d:de:58:58:03:3e:
         9b:cc:f6:74:1f:9f:3c:64:24:78:cb:73:e5:8b:73:f2:74:fb:
         6f:8c:3d:8c:8d:bc:75:34:9d:63:a9:8c:e6:e5:6f:a7:5c:4a:
         32:fd:0e:83:03:2b:70:42:e9:ae:e6:34:20:cb:ed:23:4c:6f:
         05:c4:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org