Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.mft
File:                     4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.mft (raw, json)
Hash identifier:          ejHrjUIDQ0GB+c05KkO6ptJqV8Vuk336Vb7ZJvmYm/w=
Subject key identifier:   97:21:91:D3:F1:23:39:9E:EB:B1:24:02:C1:AE:D5:B9:7D:C6:E7:6B
Authority key identifier: 4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B
Certificate issuer:       /CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
Certificate serial:       229CB4EA3817AF851EA91D3082FEE82EEB3766B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.mft
Manifest number:          0201
Signing time:             Wed 17 Jan 2024 19:10:12 +0000
Manifest this update:     Wed 17 Jan 2024 19:05:12 +0000
Manifest next update:     Thu 18 Jan 2024 21:28:12 +0000
Files and hashes:         1: 323830343a6235343a323330303a3a2f34302d3430203d3e203532373635.roa (hash: MdwdjWZb4D9TqvqPJFyFaFsgTtVxVt21unLCWb9+0XU=)
                          2: 323830343a6235343a323230303a3a2f34302d3430203d3e203532373635.roa (hash: RfczIXv7LGNhRZgIdzmcTk/2qPcnyyXa6QOWGtQsUq4=)
                          3: 323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa (hash: S9SnI5ZnwqfAZRZ0eYE3gF74i9060x13XMXGVorflP8=)
                          4: 3137302e3233392e37322e302f32322d3234203d3e203532373635.roa (hash: 3gXWiQOWxdjkLbHhMnMykoXoihGOJNhu6bQMlpwLxKo=)
                          5: 323830343a6235343a383230303a3a2f34302d3430203d3e203532373635.roa (hash: sfcjKjNK7waoPbn2HXIq3paLx3sLaSwpQf0EjCX/eiI=)
                          6: 323830343a6235343a3a2f33322d3332203d3e203532373635.roa (hash: pAVnOpkUPDqWvifMeo3rdb4SQ+cKNgF+cMQP3dZk/00=)
                          7: 4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl (hash: jjlMZCG1hpagPFX6CD+DZom9+1V8weuj0HAl6VPrjgw=)
                          8: 3137372e33392e3132342e302f32322d3234203d3e203532373635.roa (hash: Ar2fxbS/+J2w1UiYiP2rIuYZ8+qjjDuyo2CgNIw0BRY=)
                          9: 3137372e33392e3132302e302f32322d3234203d3e203532373635.roa (hash: c4T4Wv3XD7IChx2GzjNw++VfBo4rqMqw4RM9oRYeAgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9c:b4:ea:38:17:af:85:1e:a9:1d:30:82:fe:e8:2e:eb:37:66:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
        Validity
            Not Before: Jan 17 19:05:12 2024 GMT
            Not After : Jan 18 21:28:12 2024 GMT
        Subject: CN=972191D3F123399EEBB12402C1AED5B97DC6E76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:4e:9c:1e:ca:35:d3:32:85:ed:89:f7:f7:
                    5d:7d:0f:10:34:58:b0:1f:5b:db:cb:1a:19:c5:61:
                    db:cf:cf:88:34:ae:71:2e:62:98:95:a0:2d:7e:07:
                    94:bc:8d:97:47:0d:9a:2d:82:18:fb:c6:50:49:63:
                    da:5d:55:1b:43:03:48:a9:d7:66:0a:b8:60:8f:7c:
                    97:69:9c:5e:66:54:8b:fa:02:8b:fc:9d:c5:1c:38:
                    f2:89:e7:ca:61:41:1c:60:61:39:fa:91:47:15:25:
                    4a:3a:13:73:0b:e7:fe:dc:67:e7:3c:88:db:c7:ae:
                    88:1c:d3:d4:b5:64:98:65:98:f9:b7:ab:96:40:5c:
                    dc:56:5d:54:6b:8f:06:af:08:93:a3:80:5d:8e:82:
                    11:95:c6:d5:17:9e:fe:b7:c9:06:c4:ff:37:d9:35:
                    06:fe:e2:bf:ff:01:e5:f4:c3:f3:b5:80:32:25:25:
                    56:8c:1a:3d:0a:af:4e:c3:42:45:f5:1a:09:6e:04:
                    f7:3b:74:bc:7d:e4:cf:29:20:45:87:44:00:c2:28:
                    75:26:24:ff:83:75:e7:e0:72:3e:78:da:b6:fc:5e:
                    53:c5:29:a5:33:7e:0f:ad:e0:32:b9:c2:1d:8c:90:
                    51:7b:54:58:e7:74:8e:a0:d8:7d:f3:d5:a1:fc:84:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:91:D3:F1:23:39:9E:EB:B1:24:02:C1:AE:D5:B9:7D:C6:E7:6B
            X509v3 Authority Key Identifier:
                keyid:4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:41:a1:4e:a3:06:02:34:55:dd:16:4c:87:34:97:e4:1e:21:
         ee:07:93:7c:88:3f:e1:d3:c1:85:59:8c:a7:e7:a8:15:71:7a:
         ad:04:97:bf:9d:0e:02:1b:18:01:aa:74:06:9b:c8:cd:99:d3:
         b1:72:32:57:30:19:92:15:a7:a9:3c:50:d2:a8:00:47:68:e8:
         4e:d1:25:ca:a2:86:5e:57:59:4b:b8:b2:43:64:6d:42:70:2f:
         66:84:11:45:00:bc:35:ca:fd:5f:a8:5f:4d:71:ad:8f:49:13:
         81:d5:4f:2d:c6:63:f8:72:a2:35:db:4b:db:e9:ba:87:e3:b4:
         f5:35:41:0b:65:dd:a5:08:20:08:60:86:9a:c6:40:40:9d:25:
         3c:6f:96:66:b3:89:47:49:13:c4:77:91:f6:a1:90:a0:02:72:
         73:74:f8:2e:7d:13:c1:72:bf:6d:ee:49:f8:60:b1:a8:41:15:
         c7:36:ff:9a:dc:c5:d6:e6:40:1a:bb:70:2c:6c:af:28:63:8a:
         ec:17:50:1f:f0:7e:ff:24:1e:47:17:c8:2b:e8:e7:50:86:07:
         c6:c1:a8:7c:05:86:d8:30:fd:cc:e5:10:b8:dd:85:85:de:17:
         bb:48:28:5f:65:15:2c:2b:b1:3d:99:40:c5:12:91:1b:f9:8e:
         6f:e5:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org