Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/965C3F6319859C81532121D28A8D0F5563BB2986.mft
File:                     965C3F6319859C81532121D28A8D0F5563BB2986.mft (raw, json)
Hash identifier:          C2sV1PF29NB+6EfEQphpP3Z4YfgYEdo97gTJtEC+WAc=
Subject key identifier:   01:85:4E:49:F7:47:9A:14:CE:23:79:E5:AD:65:A2:39:9B:CF:87:26
Authority key identifier: 96:5C:3F:63:19:85:9C:81:53:21:21:D2:8A:8D:0F:55:63:BB:29:86
Certificate issuer:       /CN=965C3F6319859C81532121D28A8D0F5563BB2986
Certificate serial:       62EF3E96B32D7E8B0B50A87BEA9EE6ED8605958C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/965C3F6319859C81532121D28A8D0F5563BB2986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/965C3F6319859C81532121D28A8D0F5563BB2986.mft
Manifest number:          32
Signing time:             Fri 10 May 2024 09:10:31 +0000
Manifest this update:     Fri 10 May 2024 09:05:31 +0000
Manifest next update:     Sat 11 May 2024 12:04:31 +0000
Files and hashes:         1: 323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa (hash: vICQlPWtpkvX+9Nv4ZYx75v6MipwY4n1l8o5dz3PDDk=)
                          2: 3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa (hash: wSSRnXwtlYYM/vU9RgKonfa+pJ0Z2vmFQ7KyWVhi1TU=)
                          3: 965C3F6319859C81532121D28A8D0F5563BB2986.crl (hash: APDyy2fdab92Q3YDiSX1BvQ6E+FpN1Vua2lVU7dBN5U=)
                          4: 323830343a326162633a3a2f33332d313238203d3e20323634303931.roa (hash: cIsznuP+wFg4zwZLEOzVV+oVgqaDyKDXubCLMu+vpUw=)
                          5: 3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa (hash: 3ZI5egS6VBx2dOhmPvw2hGTvwgP0ELIhAsz1w/NdHjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ef:3e:96:b3:2d:7e:8b:0b:50:a8:7b:ea:9e:e6:ed:86:05:95:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965C3F6319859C81532121D28A8D0F5563BB2986
        Validity
            Not Before: May 10 09:05:31 2024 GMT
            Not After : May 11 12:04:31 2024 GMT
        Subject: CN=01854E49F7479A14CE2379E5AD65A2399BCF8726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:16:61:cb:9b:3b:1d:ea:9d:57:4e:12:e1:
                    1b:36:8f:9e:85:d6:74:ff:a9:9e:11:e0:05:31:91:
                    07:3b:9a:50:f5:d5:be:bf:30:3c:de:1f:68:bc:5d:
                    62:24:5c:11:f5:24:e4:31:6d:8d:d6:85:c8:75:91:
                    62:2f:57:43:17:25:3b:cb:71:c0:df:47:46:66:9a:
                    a0:7e:e9:b7:6b:0b:d2:32:54:de:77:e5:96:40:f5:
                    50:da:ee:c0:f7:f9:e8:20:e0:3a:85:54:43:b1:65:
                    04:e5:97:97:ff:be:57:a8:19:f9:cc:5e:fc:45:ff:
                    4d:9e:8f:d4:eb:b7:fb:5a:57:4a:25:fa:9b:24:b5:
                    b6:77:ec:cb:3d:e1:f7:09:12:f0:4a:de:78:29:83:
                    17:10:a4:51:a0:62:ba:c4:84:f7:87:83:78:86:ab:
                    c0:e7:11:02:25:8f:76:aa:dc:a2:59:e4:13:3d:45:
                    21:6f:29:c9:c3:5b:0b:af:41:17:18:f3:5a:07:8a:
                    49:93:9f:41:a6:d8:21:3c:6e:dd:1c:83:a7:05:6d:
                    45:20:d3:34:e5:f3:94:12:d9:8d:f7:84:62:99:19:
                    36:30:fc:cc:7b:7f:b7:c7:5f:0d:25:e8:3d:6a:e5:
                    91:d0:28:b2:34:d2:f6:fd:00:1c:a9:23:0b:53:f6:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:85:4E:49:F7:47:9A:14:CE:23:79:E5:AD:65:A2:39:9B:CF:87:26
            X509v3 Authority Key Identifier:
                keyid:96:5C:3F:63:19:85:9C:81:53:21:21:D2:8A:8D:0F:55:63:BB:29:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/965C3F6319859C81532121D28A8D0F5563BB2986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/965C3F6319859C81532121D28A8D0F5563BB2986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/965C3F6319859C81532121D28A8D0F5563BB2986.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d9:6c:1f:a8:23:ca:98:e9:73:ee:a4:be:a3:33:be:0c:e9:
         83:e7:e9:82:50:44:76:b2:b0:f9:3b:c1:90:f4:bc:1a:9e:0b:
         4f:ec:a3:01:cb:ae:b8:7c:c3:c2:84:25:5a:9c:51:4c:92:77:
         90:d8:94:ec:be:38:ab:27:ea:50:1a:f8:57:bf:63:0c:45:39:
         8c:6c:ff:1c:fe:59:ef:41:65:4f:d5:34:a0:52:ec:08:a6:1c:
         79:88:84:2f:9d:42:02:c5:60:b2:44:46:09:ea:74:21:08:9e:
         5a:57:38:20:11:27:34:b4:02:99:7a:e2:b6:04:61:33:ff:b8:
         3d:ef:95:fd:ad:da:6c:da:c1:7b:78:e6:b7:2e:9a:ae:a0:f3:
         e2:df:47:e5:7f:af:ca:99:1c:78:fc:05:9d:e4:6d:ca:84:6c:
         7c:19:d6:b9:79:2f:a4:d1:9e:71:2e:f1:a9:db:58:2b:c6:1b:
         c0:97:cc:71:79:2d:8f:b1:58:ef:f4:d6:aa:35:bc:30:13:76:
         46:d8:1a:ee:93:e6:19:04:91:d1:0d:1b:34:62:48:17:83:84:
         1d:bb:95:69:11:f7:61:c7:74:31:e5:a6:94:2d:40:85:cf:b3:
         82:6e:4b:60:96:7f:0d:9d:7e:8a:96:37:eb:3d:9c:47:4f:9a:
         f5:19:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org