Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.mft
File:                     4F7C6599F80B64AFC2A339651834D8FBB53C1B85.mft (raw, json)
Hash identifier:          O/N3xQ9c+h/P8LnKt7asvBS5gYkxmZ5cg18sKabddRE=
Subject key identifier:   E7:B0:49:F8:38:6D:36:CE:43:F9:BE:AC:5E:75:D5:E5:1A:70:3B:F0
Authority key identifier: 4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85
Certificate issuer:       /CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
Certificate serial:       345C6EFB057AD42115028C451F37F1E2DC13397D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.mft
Manifest number:          01CA
Signing time:             Mon 15 Apr 2024 04:30:00 +0000
Manifest this update:     Mon 15 Apr 2024 04:25:00 +0000
Manifest next update:     Tue 16 Apr 2024 04:47:00 +0000
Files and hashes:         1: 323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (hash: wcHxp7awpXw1OQsZ7HSrgckLWbyTnD+efFQD6AQnEOc=)
                          2: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (hash: VtGhkW+aexUhK/VAzk05Hnlc78i25W0Q4E/jfZEhgH8=)
                          3: 323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (hash: jYmK6jQqHX8u76YnPkdPNB1e5nt0CgA6cU1XisEa0OI=)
                          4: 4F7C6599F80B64AFC2A339651834D8FBB53C1B85.crl (hash: AJOI8dGEGbw57yJVpApkCj03b8aR3xZXMqCdGxNSOUk=)
                          5: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (hash: 0YUzO/agstS0+yh6k/epuWG47O5cQcC3BNrY99UWMJ0=)
                          6: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (hash: amAqW2svboQgRqCR/aFs86wKHWKjJOmozQZ1rIQXxlU=)
                          7: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (hash: X+BqTZGQ4JABSgns5TiBsDFGjDN2eo7DUVstU0UDpsg=)
                          8: 323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (hash: KeBYwqfjD9NZ8Uirc33kchdCNDQUhDS711lurBfyH84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5c:6e:fb:05:7a:d4:21:15:02:8c:45:1f:37:f1:e2:dc:13:39:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
        Validity
            Not Before: Apr 15 04:25:00 2024 GMT
            Not After : Apr 16 04:47:00 2024 GMT
        Subject: CN=E7B049F8386D36CE43F9BEAC5E75D5E51A703BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:11:7b:4b:83:70:7a:23:61:b2:e2:6d:7e:
                    35:73:af:2f:76:64:c8:86:fb:48:9a:6a:2c:11:b5:
                    b7:bc:79:24:16:ac:3b:60:df:f4:9f:95:14:5a:2d:
                    2e:ab:be:5a:81:2a:2d:dd:3f:9a:c1:6d:33:b7:43:
                    5d:36:42:f0:53:65:be:ca:ef:d3:63:4e:20:6c:44:
                    9c:c5:27:4b:6c:b5:a0:46:72:6a:4b:77:f8:00:9c:
                    d8:73:2d:e8:8b:be:66:a0:5c:55:23:69:24:54:3f:
                    32:11:27:bd:25:a8:43:d7:57:d0:09:18:1e:12:d6:
                    b5:ef:be:e1:98:9a:ad:15:16:3d:93:35:17:f8:68:
                    65:66:ef:dd:f5:2e:f2:76:af:ae:fc:ab:10:9d:b3:
                    6b:17:70:e5:15:45:80:8f:f9:45:a4:73:e1:90:e5:
                    02:91:5d:f6:b3:2d:c4:a4:5c:66:74:c1:85:77:48:
                    1d:c4:e5:70:f8:51:e4:56:c6:c7:aa:3c:ab:c6:b6:
                    a7:e5:be:45:3c:fd:22:c1:e8:a6:55:b0:52:76:c7:
                    c6:a8:40:20:2e:be:9a:ad:5a:1d:ac:07:82:45:52:
                    b0:12:3e:0d:53:3b:a2:38:26:27:7f:f3:25:17:ac:
                    5a:5a:84:08:93:53:a1:c7:2c:3b:72:ae:59:88:6f:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B0:49:F8:38:6D:36:CE:43:F9:BE:AC:5E:75:D5:E5:1A:70:3B:F0
            X509v3 Authority Key Identifier:
                keyid:4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:56:77:49:1d:00:aa:0a:7e:0b:f3:7b:d7:2f:87:e7:88:b9:
         5d:74:e8:7d:b5:67:2b:e0:03:62:f2:31:4d:be:81:d9:28:52:
         3f:4e:db:9c:5e:63:b5:23:53:8f:b9:4d:97:4a:6f:e3:3e:a1:
         54:28:99:62:ce:53:64:64:5f:ed:a2:3b:3e:ca:1b:b9:c4:b9:
         63:9f:48:a1:a2:f6:07:6a:8b:1b:00:67:50:7c:d9:4f:4c:43:
         f6:7c:c5:2f:c6:e2:11:50:c4:c6:f7:54:2c:90:0e:6f:70:dd:
         d5:66:2f:56:e0:81:6d:4e:c3:65:e5:6e:52:39:73:9f:07:3d:
         63:ab:f7:e0:15:df:a4:fa:60:6c:3f:eb:8c:d9:6e:fb:92:3c:
         04:2d:83:87:bc:83:d5:d3:c5:20:b2:93:22:23:88:05:bf:9d:
         82:60:1b:94:25:db:c3:c2:55:40:cf:de:a4:a5:9e:39:80:81:
         13:50:bb:26:90:b3:a2:7a:24:56:9b:07:95:3b:05:4c:33:e9:
         72:8c:cd:8e:ec:9e:f4:8c:a2:31:a3:ea:7c:88:68:8d:78:6a:
         3e:f6:28:da:fc:24:47:b9:db:d6:41:81:27:0c:80:6a:43:b3:
         98:5e:af:a3:8a:22:41:68:f3:03:53:9c:b6:cb:a5:ba:d3:3c:
         18:3f:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org