Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.mft
File:                     53895AED87F30E6ED53DB01B9DC68CA237B687F2.mft (raw, json)
Hash identifier:          DjyH0GnXtIoQSSO6uXcMh+9Cwtyut4jawcAwDXq12vQ=
Subject key identifier:   1E:DE:89:29:32:38:E4:04:33:B3:5F:27:FF:0A:5E:50:6B:F0:44:02
Authority key identifier: 53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2
Certificate issuer:       /CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
Certificate serial:       6E0CEED5F0F846BB83E86908F8E0CD245061C024
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.mft
Manifest number:          63
Signing time:             Mon 15 Apr 2024 03:50:46 +0000
Manifest this update:     Mon 15 Apr 2024 03:45:46 +0000
Manifest next update:     Tue 16 Apr 2024 05:08:46 +0000
Files and hashes:         1: 34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa (hash: /ewr+qMxuio6JXI+8t8szmd1GoHq7W15hir3fbWEeqs=)
                          2: 34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa (hash: bkI5BzPuKHZ/Fo07yM6UADMjnphaJcNMWyEBoWttdhA=)
                          3: 323830343a346134383a3a2f33322d3332203d3e20323637323239.roa (hash: MJZs/ynej/oNHl8Y255nbR+mR7hkK+59QAKD34aswCU=)
                          4: 34352e3233312e3234362e302f32342d3234203d3e20323637323239.roa (hash: g0oapj04sECMuJi+JdATAQC8WZYdJx5tlm7xugzyGzw=)
                          5: 34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa (hash: 9Ft/E6c9pCUsV1n2m3Gu5gbcI8t7oTeOLW8GhlI+v2Q=)
                          6: 53895AED87F30E6ED53DB01B9DC68CA237B687F2.crl (hash: nV+R9eRaKpgOSxzOMBfCEneshDdYTJUTKEAoSp4JnkQ=)
                          7: 34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa (hash: aEZhNl6qeYt9Qn7LNHG+llbNw995S4YzOxFkGfBav74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0c:ee:d5:f0:f8:46:bb:83:e8:69:08:f8:e0:cd:24:50:61:c0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
        Validity
            Not Before: Apr 15 03:45:46 2024 GMT
            Not After : Apr 16 05:08:46 2024 GMT
        Subject: CN=1EDE89293238E40433B35F27FF0A5E506BF04402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:56:3b:20:46:ce:7c:0b:0c:7d:29:04:a9:
                    f7:69:80:61:10:48:14:ac:02:91:d0:7f:d2:c1:56:
                    1e:5b:90:df:8d:99:60:75:ac:68:e6:bb:2a:de:eb:
                    4f:f2:b5:8c:11:30:cf:9b:56:b5:1d:8f:c2:3c:2c:
                    07:60:05:12:19:ed:ca:2a:99:3b:ca:91:be:92:e2:
                    2b:a6:77:21:00:e5:05:c2:a7:5f:8c:ee:f0:f9:05:
                    c2:6d:51:bc:64:99:ad:d6:15:35:5b:9f:00:6a:c5:
                    ec:c6:b5:9d:9c:b4:1c:32:cb:c3:66:7a:c4:6c:01:
                    df:a8:68:8f:67:33:d9:30:94:d2:76:cf:dd:81:b8:
                    ec:8d:80:65:83:52:33:bb:58:e3:44:e7:ce:53:1b:
                    4d:b2:98:d4:a9:c4:33:a6:7e:f1:7e:50:0b:8a:14:
                    ac:9d:17:8e:d8:ca:23:a8:d1:ac:80:21:94:e1:85:
                    d6:90:9a:c4:86:ec:c1:1f:7e:37:c6:8f:eb:ec:53:
                    56:69:b9:0f:c4:ce:8a:cc:2b:86:42:45:f0:6c:01:
                    c4:c3:35:5c:e7:f5:90:60:02:0f:5a:11:dc:fd:fe:
                    0e:ba:a5:b2:f1:53:0e:e1:13:d8:80:54:e6:0b:2d:
                    cf:ca:c8:de:54:d7:73:cd:e8:fa:ab:76:60:2b:da:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DE:89:29:32:38:E4:04:33:B3:5F:27:FF:0A:5E:50:6B:F0:44:02
            X509v3 Authority Key Identifier:
                keyid:53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:bd:1b:e4:9e:b4:45:5d:6c:08:a8:b2:d3:6d:08:8b:f0:
         1f:4f:7e:db:8d:7c:c1:9d:c5:fa:3f:ab:78:ca:fb:e5:c2:dd:
         00:dd:b7:62:a8:01:f2:e0:07:9c:54:9d:cd:46:7f:90:73:7d:
         8f:e2:22:7d:8f:0c:b1:33:67:08:c4:2e:75:dc:b2:8d:f0:2d:
         ce:fe:c1:e9:0d:65:1d:a9:fd:01:26:76:2f:b0:68:33:58:b7:
         4a:f1:f5:f3:13:48:5e:21:38:22:b2:f5:a6:18:27:5a:0e:77:
         27:d5:4e:66:82:06:60:40:c5:64:d4:ef:8d:e5:5e:59:17:bb:
         f0:2d:ff:ef:c2:93:b7:3a:31:80:24:60:81:b9:fe:d6:60:1a:
         86:e2:09:a7:7a:43:11:23:c4:4c:10:ff:bb:04:1a:ad:e5:cc:
         61:ca:c8:9d:1d:3b:b9:6c:e8:d9:cd:e8:58:95:a4:f5:0f:1a:
         2f:6f:47:60:ac:9a:40:b7:6c:18:7b:65:e3:bc:bb:f9:63:c9:
         f7:97:09:1a:01:fa:e9:28:2c:9a:c5:a1:ea:97:31:42:4f:56:
         24:60:ef:3b:97:67:a4:5f:e1:d7:b4:cb:99:46:c4:f2:8d:87:
         a6:e9:9e:68:b6:02:ae:ad:32:86:e3:b2:fd:7b:6f:33:9b:78:
         c5:6c:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org