Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.mft
File:                     5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.mft (raw, json)
Hash identifier:          9YI1yIhoyk/0aId/RoKck1lTgzRHECcY9oeXB28t7Yk=
Subject key identifier:   1C:6A:99:EA:66:5B:3B:AB:25:CA:76:96:8D:41:90:BF:C5:ED:49:0E
Authority key identifier: 5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8
Certificate issuer:       /CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
Certificate serial:       1820D1E6287064B361D85BC5ECAB9B926371F564
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.mft
Manifest number:          37
Signing time:             Mon 15 Apr 2024 03:00:01 +0000
Manifest this update:     Mon 15 Apr 2024 02:55:01 +0000
Manifest next update:     Tue 16 Apr 2024 05:46:01 +0000
Files and hashes:         1: 323830343a333163633a383030303a3a2f33332d3333203d3e20323635303338.roa (hash: B3sQk2sZMp3HPBHy0BnLo26P2hJxJWcb1eIZINZ8BUQ=)
                          2: 323830343a333163633a3a2f33322d3332203d3e20323635303338.roa (hash: wH4Jtx0OQ98vRRVaXLMOzfg3MiPwdgSsder765pokn4=)
                          3: 3137302e3135302e3230302e302f32322d3232203d3e20323635303338.roa (hash: 3E4jMqdkTtErYIsk9Cx6rDE0znWyQvk/BurjxrDtJ8Q=)
                          4: 5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.crl (hash: WKA3i3jqVyWxajxbWnfmvkx7M8cgpI0lWw1ptHcXeYE=)
                          5: 3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa (hash: kaB57ZfMEurTsqfo7ToSSt+kt39hp/jGv3dmOji8sQI=)
                          6: 323830343a333163633a3a2f33332d3333203d3e20323635303338.roa (hash: G7hkbMS2kDz1928SGUq0lgl8EHkeMKTMnSQqaHFEzfw=)
                          7: 3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa (hash: bVYwEQXfm84g199rOWERtpFL4Uoe5Qd6m8SP8+mBLNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:20:d1:e6:28:70:64:b3:61:d8:5b:c5:ec:ab:9b:92:63:71:f5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
        Validity
            Not Before: Apr 15 02:55:01 2024 GMT
            Not After : Apr 16 05:46:01 2024 GMT
        Subject: CN=1C6A99EA665B3BAB25CA76968D4190BFC5ED490E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:00:83:5d:98:3f:b9:45:d0:c3:53:3a:70:
                    ea:8b:78:e1:e6:3b:b4:da:45:dc:d3:4e:0e:1d:36:
                    fe:94:d2:70:02:eb:4b:5d:d0:c0:5a:09:67:c4:f7:
                    6c:bc:85:b6:a0:2c:83:21:8b:e2:43:38:4c:b1:ac:
                    7d:b4:43:58:94:c7:58:18:28:50:9f:4f:ab:fb:e8:
                    06:0d:af:17:24:7c:b8:5e:8c:84:77:f9:ba:ba:bf:
                    e6:20:1d:63:98:4b:1d:aa:0d:85:8a:3e:60:6e:ce:
                    25:e9:d9:57:ec:cd:63:a7:73:18:00:09:04:15:7f:
                    a8:43:20:54:69:16:c8:60:59:79:05:c9:0f:b5:b7:
                    2a:c3:b4:63:3b:4d:dc:70:b2:9e:44:61:80:11:03:
                    59:ed:97:50:03:a7:b6:9e:67:d7:b5:57:db:49:21:
                    8b:be:69:a4:6b:61:db:d7:78:42:a2:16:9b:1b:89:
                    7e:53:96:5a:4d:4d:db:ce:26:de:29:f7:d4:9b:17:
                    af:76:0c:4c:d3:23:54:c8:c2:89:37:71:f3:01:1e:
                    65:5b:df:a6:09:d1:2d:64:ae:1b:74:75:45:19:8f:
                    21:88:ff:f3:cf:fa:a2:87:f9:06:ee:b6:13:9b:cb:
                    5d:5a:05:48:fb:b8:c4:49:e3:27:98:a0:f7:3d:f8:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6A:99:EA:66:5B:3B:AB:25:CA:76:96:8D:41:90:BF:C5:ED:49:0E
            X509v3 Authority Key Identifier:
                keyid:5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a6:a8:1e:60:91:f7:59:77:3c:fa:fc:09:a6:1e:8a:44:be:
         1e:87:d2:38:97:e4:f0:e0:e9:bb:43:74:f8:00:e0:8a:cb:95:
         51:5d:0a:d5:dd:a8:3a:67:e1:f2:89:95:07:08:6e:e9:3b:e5:
         e4:c0:89:83:6e:1e:89:9e:f9:b7:46:f4:e2:40:e5:a1:7e:3a:
         fe:f3:6e:ab:d9:29:2e:fc:e6:f8:1a:26:80:ea:d4:28:d3:87:
         b4:a3:bf:dc:fb:d1:38:4c:b8:6b:d9:a5:aa:7a:d3:4b:2d:d2:
         c9:f9:e6:15:e7:32:81:cb:ea:db:b2:3e:a2:9c:78:11:da:f4:
         92:7f:56:64:22:16:3b:58:5f:f5:19:66:9c:4b:15:17:d3:29:
         c4:21:ca:40:f2:2f:40:90:6c:30:6c:02:26:e0:e9:67:1b:52:
         b7:af:5b:42:06:3d:f9:2c:9e:47:4a:01:57:97:4b:d9:b4:9e:
         86:aa:e1:0a:f0:42:12:3e:7a:de:92:40:27:a3:15:77:3a:df:
         e3:f6:a1:4c:f1:03:6e:6a:0d:3f:4b:22:9e:73:d0:18:2d:6a:
         ea:74:e5:31:0a:94:43:0a:6e:f1:cd:38:3b:31:f5:3a:9a:98:
         6b:02:1f:62:74:80:ce:ac:69:8d:a9:e6:03:c5:0d:a3:c2:87:
         d0:3e:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org