Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.mft
File:                     C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.mft (raw, json)
Hash identifier:          DISIiCpxsaqffEeKX22sbuTjzIaHz/5NXuiWZgNnpPI=
Subject key identifier:   55:20:A7:BD:AF:9D:D3:D0:AE:49:72:8D:25:03:F9:7D:73:1D:10:F3
Authority key identifier: C2:D5:EA:1A:04:A1:54:20:BD:5D:50:11:F0:BE:F6:13:5F:B0:8E:FD
Certificate issuer:       /CN=C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD
Certificate serial:       2A9BAB8CBD3D6FDCBFC23E8CACB06DBC8BE2264F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.mft
Manifest number:          39
Signing time:             Mon 15 Apr 2024 10:54:58 +0000
Manifest this update:     Mon 15 Apr 2024 10:49:58 +0000
Manifest next update:     Tue 16 Apr 2024 12:02:58 +0000
Files and hashes:         1: 3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa (hash: N4HRcGN/xTW3KBHfJQ9GnUGDg0H0fypIdJ6hMR0BOe0=)
                          2: C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.crl (hash: EDxry3WiYurY7JZRakzcuI6RMtNui4ii5jISHxseRjk=)
                          3: 323830343a366262303a3a2f33322d3332203d3e20323730343137.roa (hash: PODeU+frjaGYsUpWCNcO6OIPlxToEw+zr8GfrMa53oI=)
                          4: 34352e3232352e3234342e302f32322d3232203d3e20323730343137.roa (hash: fSW2ErEf6/5sFYg/jVYlQRytD+amMtVML/EecTklCsk=)
                          5: 34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa (hash: v2eC8ASy2IoEqVoiRt4/0X2pRtsTth+sLL+4RFjVktI=)
                          6: 34352e3232352e3234342e302f32332d3234203d3e20323730343137.roa (hash: gDBodRPGSNH6Ra6WfbUTsK78PslzWavczoitKEnuNPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9b:ab:8c:bd:3d:6f:dc:bf:c2:3e:8c:ac:b0:6d:bc:8b:e2:26:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD
        Validity
            Not Before: Apr 15 10:49:58 2024 GMT
            Not After : Apr 16 12:02:58 2024 GMT
        Subject: CN=5520A7BDAF9DD3D0AE49728D2503F97D731D10F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:b0:ff:36:78:45:c0:46:fd:c4:7f:7a:f5:
                    dc:86:ed:57:e1:d4:a8:8e:55:e8:0c:6c:df:3b:ff:
                    15:3d:45:4d:a2:5a:f1:0e:91:14:48:45:37:34:77:
                    cd:ce:4f:86:eb:96:f3:d0:4d:42:8b:c0:f7:13:d5:
                    dc:0b:ff:ac:31:81:43:07:ef:60:c1:e0:7f:6b:e9:
                    bc:7a:04:47:ca:1d:cb:94:d9:d1:3b:74:03:78:26:
                    a1:62:89:d5:1a:7d:0f:a0:4f:9b:8c:79:2a:0c:61:
                    66:54:fe:72:d1:03:67:c9:3f:9d:3b:2c:6c:1f:92:
                    79:53:a1:f2:1f:0f:ae:5e:98:ff:57:f6:1f:e8:a1:
                    89:f1:3c:7a:b3:b6:d6:e4:33:0a:78:fa:c4:c0:66:
                    23:04:10:77:5e:bf:a5:c8:df:22:62:ba:77:73:4b:
                    ff:04:33:eb:38:ff:1d:cf:83:45:85:fa:b5:88:72:
                    aa:d8:9f:fe:4c:b4:df:7e:83:03:06:80:f8:9d:78:
                    c4:a0:0b:31:4c:18:af:73:09:3a:dd:21:f6:31:c9:
                    5b:da:32:29:71:aa:52:6c:ba:6a:a4:3a:c3:c2:e6:
                    42:26:ee:ed:b7:ee:48:5b:c7:95:38:02:ce:4c:0e:
                    78:4d:bc:b0:2c:1f:24:fe:3a:41:ae:2b:f5:7d:ac:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:20:A7:BD:AF:9D:D3:D0:AE:49:72:8D:25:03:F9:7D:73:1D:10:F3
            X509v3 Authority Key Identifier:
                keyid:C2:D5:EA:1A:04:A1:54:20:BD:5D:50:11:F0:BE:F6:13:5F:B0:8E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:59:be:a6:03:4f:a0:1b:6d:db:01:53:91:1a:cf:06:bb:13:
         0e:52:e4:5c:40:bc:ff:3b:61:fb:f9:0a:02:24:cc:df:64:fe:
         6c:00:b0:5a:26:0a:cd:87:9a:fb:22:f1:64:63:65:4c:56:b7:
         ee:ea:1a:0a:68:86:38:71:c1:a0:0f:7c:a4:ee:ba:06:79:12:
         b6:97:5c:5d:10:1f:91:ba:ba:4b:c2:f9:a3:a6:6b:33:92:d5:
         1f:13:93:15:72:7b:66:37:0f:d9:0f:a8:15:90:70:0d:40:cf:
         11:e4:94:16:93:4d:1d:c6:c9:83:e1:1e:14:e3:42:c1:4a:4b:
         9f:9f:c2:57:fa:22:e6:6c:da:c8:d2:71:63:50:1d:ee:c7:ab:
         b6:0e:e3:cc:2b:d8:96:da:fb:43:cc:ba:43:5e:79:51:87:8a:
         8a:22:dc:17:ab:85:e3:87:d9:82:71:35:e9:05:a9:a0:89:58:
         26:12:90:6f:84:c6:0b:ef:60:58:33:1f:1b:f9:ec:50:de:11:
         41:c6:ad:41:bc:03:93:ad:d0:dd:04:69:1b:a6:15:57:4d:b4:
         4d:b7:0f:e5:e2:7b:ee:8d:64:29:3b:49:8b:6a:d3:de:f3:3f:
         3a:56:4c:3d:c0:8e:be:d0:f4:3c:80:9b:0f:a5:3d:76:9b:00:
         6b:e9:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org