Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.mft
File:                     A6768A6B148248844D8E04551B1998D03AB86D3D.mft (raw, json)
Hash identifier:          x3X6XO2usf1mhkKnDFLcPVGh+1kOY8eNaJZwMWGjgbA=
Subject key identifier:   65:9F:DC:47:DF:95:96:F7:E3:0B:0D:3B:B6:60:F6:DC:EC:04:9A:32
Authority key identifier: A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D
Certificate issuer:       /CN=A6768A6B148248844D8E04551B1998D03AB86D3D
Certificate serial:       4C61599A9BEADC42EACC0A95D9284EB1297BC898
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.mft
Manifest number:          7A
Signing time:             Fri 07 Apr 2023 19:25:43 +0000
Manifest this update:     Fri 07 Apr 2023 19:20:43 +0000
Manifest next update:     Sat 08 Apr 2023 22:46:43 +0000
Files and hashes:         1: A6768A6B148248844D8E04551B1998D03AB86D3D.crl (hash: iR79BcD29ZDFgx1DRVxF37MCQVfmrQBlmJdCpHJOIR4=)
                          2: 323830343a326162633a3a2f33322d313238203d3e20323634303931.roa (hash: h9ttIxBl3Ojyxc1o9yqCVrBCFI9wS2LaWD2voWBnlXQ=)
                          3: 3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa (hash: 257XkSIxHYPzUJ/LJMvhzvbACfpAtGKOpCnRphhiJes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:61:59:9a:9b:ea:dc:42:ea:cc:0a:95:d9:28:4e:b1:29:7b:c8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6768A6B148248844D8E04551B1998D03AB86D3D
        Validity
            Not Before: Apr  7 19:20:43 2023 GMT
            Not After : Apr  8 22:46:43 2023 GMT
        Subject: CN=659FDC47DF9596F7E30B0D3BB660F6DCEC049A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:2c:3c:8e:e8:ee:be:f8:fd:bd:d1:a7:33:
                    a0:9d:27:63:d8:49:27:88:4b:f6:19:9d:de:d3:59:
                    a7:1d:82:52:f1:61:48:08:d7:93:fb:c3:44:76:a3:
                    06:99:b4:5b:d0:3a:41:a3:bf:28:14:dd:53:90:87:
                    50:d1:ef:2a:b4:0b:d3:1f:8a:0e:62:a7:14:d3:03:
                    a1:fa:47:c7:27:5e:5e:4e:56:08:ae:18:23:df:bc:
                    a8:bd:aa:92:fa:ea:87:5b:2c:2f:e1:28:3b:b7:16:
                    77:12:3b:56:18:c7:06:92:0b:aa:26:4a:8d:2e:b5:
                    5f:4f:1f:bc:87:df:d5:ee:da:bb:e6:0c:e4:c6:af:
                    08:07:b8:2c:d0:e9:65:fb:cd:e7:af:c8:fa:a2:9e:
                    34:76:3f:8d:25:f6:43:ac:05:76:a8:9f:e1:2e:1a:
                    c9:71:32:78:a0:77:2c:b3:67:4f:95:47:f7:9a:75:
                    74:44:94:c2:4a:67:ad:38:34:dc:53:29:f0:6d:90:
                    4e:17:45:6b:e3:65:de:3b:43:81:b4:f6:46:91:77:
                    62:cb:ab:43:a4:b7:ad:4d:a9:07:02:48:43:45:b3:
                    fe:8e:fe:aa:ae:e6:cc:2d:9c:1d:39:d1:43:98:15:
                    46:6b:f0:84:40:01:b2:ca:5c:df:fc:9b:6b:a3:5e:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9F:DC:47:DF:95:96:F7:E3:0B:0D:3B:B6:60:F6:DC:EC:04:9A:32
            X509v3 Authority Key Identifier:
                keyid:A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:e6:4e:a7:34:29:a6:26:45:89:32:16:83:8a:1e:7c:a5:
         a9:28:4b:a2:43:c7:d1:48:23:00:80:0e:20:25:ba:fd:9f:a1:
         43:f6:82:6a:2c:01:4b:13:b7:52:b6:79:62:9f:cb:3f:47:00:
         bb:d6:4c:4f:03:c9:db:b4:61:c1:91:25:22:44:64:49:71:c3:
         fb:40:e7:7f:98:cc:b0:9c:f1:bf:67:ce:cb:1c:c6:d5:22:83:
         a1:36:7a:7f:0d:27:15:7f:ff:b9:7b:23:87:6a:3f:91:90:c6:
         b3:8f:02:77:44:85:30:ed:ee:cc:c6:bb:60:f6:34:f1:51:28:
         76:cd:a1:f9:19:dd:3c:7b:4e:87:2a:70:bb:60:52:9b:3a:e1:
         06:55:35:d3:ed:2b:5c:47:14:f5:8c:1a:dc:42:d9:8a:85:7d:
         6b:32:29:4d:fd:20:4e:a7:96:82:4a:9b:4a:d4:b5:f1:1f:90:
         b8:9e:e6:5b:f1:34:24:a7:dd:03:24:ea:0c:66:51:5d:a2:36:
         bf:f3:96:36:1e:b4:c0:05:4a:7a:bf:96:54:14:7a:42:a8:46:
         07:bf:1f:af:3f:01:17:0e:d8:24:f6:6e:38:3b:d8:f0:70:af:
         68:de:b7:fd:c3:ff:14:94:89:c3:46:f0:da:c4:bc:a3:04:d0:
         fe:49:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org