Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B5FE90FAE214413B901DF889B320926378076E6.mft
File:                     8B5FE90FAE214413B901DF889B320926378076E6.mft (raw, json)
Hash identifier:          VjIY8WV2IWhFdMfQTCKJCtNqYFjjg6r/ozFhQHgcG5E=
Subject key identifier:   8D:70:EC:BF:FA:C7:E4:24:C6:5A:27:41:5C:0B:72:A8:31:62:B6:00
Authority key identifier: 8B:5F:E9:0F:AE:21:44:13:B9:01:DF:88:9B:32:09:26:37:80:76:E6
Certificate issuer:       /CN=8B5FE90FAE214413B901DF889B320926378076E6
Certificate serial:       65E22D19803BB9193CC6BA1D0FA2F5A4F4C8E431
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5FE90FAE214413B901DF889B320926378076E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B5FE90FAE214413B901DF889B320926378076E6.mft
Manifest number:          99
Signing time:             Sat 05 Oct 2024 23:05:32 +0000
Manifest this update:     Sat 05 Oct 2024 23:00:32 +0000
Manifest next update:     Mon 07 Oct 2024 00:01:32 +0000
Files and hashes:         1: 3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa (hash: rMmQGqZIxjLtxg0DlbrSmDpI9fo650jmhjJccD+hgjg=)
                          2: 8B5FE90FAE214413B901DF889B320926378076E6.crl (hash: +PHpmsk7K4vNR54p91BnGu71lM9iNAWUycueI0HUQ4A=)
                          3: 323830343a326162633a3a2f33322d313238203d3e20323634303931.roa (hash: nmWhzP+UA5l27AaHfClwN5YcmZ0LiuP8xLbW0Mm+ZmY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e2:2d:19:80:3b:b9:19:3c:c6:ba:1d:0f:a2:f5:a4:f4:c8:e4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5FE90FAE214413B901DF889B320926378076E6
        Validity
            Not Before: Oct  5 23:00:32 2024 GMT
            Not After : Oct  7 00:01:32 2024 GMT
        Subject: CN=8D70ECBFFAC7E424C65A27415C0B72A83162B600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:a2:28:cd:91:e4:01:cc:f5:73:7c:dc:0d:
                    2c:d7:94:b1:48:b7:56:21:38:a3:3c:d7:db:a7:e2:
                    dd:8f:ab:7e:92:83:b9:29:4f:86:48:0d:00:6d:73:
                    c1:60:6f:05:31:24:b6:ca:26:92:0e:1e:6b:9a:fc:
                    80:f3:3b:0c:64:99:f4:87:d5:59:0c:bf:62:84:61:
                    24:91:dc:c9:87:6f:d1:53:5b:e5:c7:dc:49:2c:7d:
                    3e:41:64:c1:11:c4:ee:82:2c:e2:1a:f1:b1:46:c9:
                    1c:f9:66:8b:38:23:ea:48:fa:a8:fb:1e:8d:70:e1:
                    ec:1c:f8:af:81:0e:84:25:14:f2:fa:96:bf:01:3d:
                    49:5d:c1:92:87:20:68:54:b9:fd:34:0e:34:0a:9a:
                    79:31:05:36:77:98:a3:d5:1d:fb:02:9b:a0:18:13:
                    fc:e1:68:36:85:a4:a1:6f:fc:d4:3c:c0:e8:43:78:
                    0b:fc:0a:f5:23:a1:f5:80:de:0f:bd:bb:7b:6f:12:
                    82:02:d0:29:af:03:9d:ca:af:0f:d9:5b:e4:e6:2a:
                    71:6e:44:00:f0:d1:64:a0:9f:53:d7:7c:33:25:98:
                    1c:32:d4:c1:31:1e:7e:d5:05:3a:57:19:a7:c2:40:
                    e4:48:24:9e:48:d7:92:bf:38:6d:13:ab:b4:a3:91:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:70:EC:BF:FA:C7:E4:24:C6:5A:27:41:5C:0B:72:A8:31:62:B6:00
            X509v3 Authority Key Identifier:
                keyid:8B:5F:E9:0F:AE:21:44:13:B9:01:DF:88:9B:32:09:26:37:80:76:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B5FE90FAE214413B901DF889B320926378076E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5FE90FAE214413B901DF889B320926378076E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B5FE90FAE214413B901DF889B320926378076E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:38:a7:1b:f3:60:28:6c:30:67:53:dc:7a:db:5c:c0:f0:32:
         57:28:e0:04:a4:ca:e7:1a:2e:f0:4c:a2:80:c4:f3:12:e7:59:
         79:23:07:0c:71:77:94:b7:83:22:ce:d6:96:74:a0:50:a7:0f:
         45:74:c4:72:3a:22:46:9e:39:08:0a:f9:4a:20:1f:74:8e:a5:
         b0:17:20:44:f6:5d:83:b1:ea:84:cb:93:97:9a:e0:ba:64:ff:
         e6:8d:5c:6d:e5:18:a7:24:e2:80:fb:eb:f2:a0:be:6d:6b:41:
         22:d2:a9:c5:ba:9a:cc:7b:20:6d:09:5c:00:1b:06:a4:25:d7:
         f1:f5:e4:9d:70:ad:5a:bf:d2:39:50:f6:01:a1:b3:71:65:6c:
         cd:95:61:dc:66:f0:1a:91:bd:22:cf:72:4a:c6:2e:25:cb:67:
         9d:c8:b7:59:14:48:e9:65:88:30:74:85:14:50:8a:c6:71:1f:
         38:e0:41:ad:b0:59:d7:93:65:e3:9d:87:bf:ea:35:33:c1:34:
         55:0b:9a:b8:fa:7b:74:8c:ef:bd:bb:ba:dd:0c:83:af:88:b2:
         4d:a4:5a:10:11:61:72:1d:d9:3e:9a:82:de:cf:95:59:a5:d1:
         57:91:ee:04:75:48:d3:89:04:73:b7:03:7d:57:fb:61:dc:19:
         67:ae:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 20:05:57 2024 by rpki-client on console-fra.rpki-client.org