Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.mft
File:                     2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.mft (raw, json)
Hash identifier:          b/g9sTd2+IWRjpCn7387TAlvyUj1SO/BKdDZC9n+czg=
Subject key identifier:   28:40:21:8D:39:21:2A:51:A4:CB:9D:FB:60:71:E0:57:78:2D:5F:D7
Authority key identifier: 2A:33:1F:F1:DB:9B:9F:1C:7A:D2:7A:FE:FD:FD:15:6E:6B:B2:4D:99
Certificate issuer:       /CN=2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99
Certificate serial:       4A79854573F9E486DD6FD3497FDDD5445D1C728A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.mft
Manifest number:          68
Signing time:             Tue 10 Sep 2024 20:40:30 +0000
Manifest this update:     Tue 10 Sep 2024 20:35:30 +0000
Manifest next update:     Wed 11 Sep 2024 23:19:30 +0000
Files and hashes:         1: 3137302e37382e3136302e302f32322d3332203d3e20323633383931.roa (hash: Nk/hzXeERZJJdG0gJemOK+UCLryAmPQq7/mfrg42zIw=)
                          2: 2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.crl (hash: h0odkHiOiNy2aXDmbGwZMXId9fl6EcwTxdTWuGZSZN8=)
                          3: 3133382e3230342e34382e302f32322d3332203d3e20323633383931.roa (hash: PRyM7rp4iOVXQIlJtTe3QVEiVdMkBGQ+wYqoCwmW4iQ=)
                          4: 323830343a323734383a3a2f33322d313238203d3e20323633383931.roa (hash: JevXfCSaSRwqQ9a5OvFhZdcXx94M8rfoa5nSi8IGF8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:79:85:45:73:f9:e4:86:dd:6f:d3:49:7f:dd:d5:44:5d:1c:72:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99
        Validity
            Not Before: Sep 10 20:35:30 2024 GMT
            Not After : Sep 11 23:19:30 2024 GMT
        Subject: CN=2840218D39212A51A4CB9DFB6071E057782D5FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:f8:3c:01:4d:d1:fc:5a:04:e0:e8:8d:a8:
                    2a:3d:c9:37:b2:99:13:51:da:6a:61:7a:c6:9f:cb:
                    71:02:92:d0:15:f9:1e:aa:31:47:a9:a3:d4:6d:25:
                    17:2a:5b:e3:8d:cd:3b:45:43:20:9e:a3:5d:d3:e9:
                    22:44:c8:56:0a:74:65:9c:ec:dd:ff:00:75:1a:13:
                    71:05:19:78:a1:7d:00:93:b0:d8:fb:dd:24:9a:51:
                    03:34:73:79:ca:60:00:5e:a1:e6:71:74:b5:67:bf:
                    c1:37:63:ad:55:ad:3c:6f:34:53:81:e8:2b:ea:17:
                    54:01:10:f5:42:c2:a9:07:20:00:de:10:9e:72:8a:
                    23:19:09:fd:b3:0a:ad:48:60:14:ab:d6:5b:1a:61:
                    46:bd:7d:2e:93:e0:36:62:7c:6c:2b:20:d9:a3:1b:
                    d0:4f:c2:db:40:b7:87:c4:c7:2a:81:46:12:e3:6c:
                    6b:67:77:ed:1a:0b:76:30:50:05:c2:9c:fc:7c:2f:
                    94:27:4e:d2:41:1e:ca:3b:32:59:7f:19:14:07:f9:
                    37:fa:ac:10:e6:1f:92:39:f9:f9:fc:54:5e:1b:58:
                    a2:d6:8e:47:9f:f9:0d:5e:8a:6a:d3:34:89:56:0d:
                    8d:3c:fa:39:e4:fe:3a:3c:6a:cd:0b:33:bc:4a:cb:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:21:8D:39:21:2A:51:A4:CB:9D:FB:60:71:E0:57:78:2D:5F:D7
            X509v3 Authority Key Identifier:
                keyid:2A:33:1F:F1:DB:9B:9F:1C:7A:D2:7A:FE:FD:FD:15:6E:6B:B2:4D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:6e:b7:cf:31:6a:08:d9:dc:07:d4:23:5f:78:76:89:32:
         bc:94:e5:d0:3a:80:85:b2:69:80:f2:38:9c:d8:fc:b1:07:ae:
         f7:16:44:f9:aa:5a:48:c9:a7:18:8c:55:eb:7d:0d:16:ef:9e:
         14:96:c8:27:39:4e:a5:4e:34:b1:89:3e:cc:f3:3a:f7:7c:bb:
         12:31:25:be:8d:ff:87:e3:4e:7f:21:59:d1:34:07:f6:92:07:
         4d:e4:32:cf:ff:98:2f:b0:3c:0f:c4:bb:07:05:cd:bb:55:e5:
         9f:e0:7f:0a:47:54:8f:8e:fc:d6:9f:48:73:0c:4a:51:29:b3:
         c6:1e:1b:36:2d:27:68:0a:5d:ed:cd:4f:9f:64:60:94:94:3d:
         a5:54:c8:3c:13:22:f4:a4:9c:8e:ad:70:1b:67:43:d3:e4:43:
         4e:f7:99:03:5a:25:7b:c6:f6:5a:f9:57:cf:88:f9:91:d6:a4:
         48:7c:14:43:a6:72:9c:3f:49:36:70:1d:df:e9:ee:e7:0b:6b:
         75:b9:12:75:6e:fc:12:0a:aa:e6:bb:ee:79:b2:8f:db:03:23:
         f7:25:1b:83:59:45:f3:2a:5a:3e:17:47:dd:5d:82:b2:e1:45:
         fa:30:05:c9:c5:c2:90:68:aa:67:e3:46:e2:40:32:eb:19:6b:
         db:78:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 18:35:54 2024 by rpki-client on console-ams.rpki-client.org