Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.mft
File:                     C89720E3719923B2D8B06EF8F0B3C59247D69AF1.mft (raw, json)
Hash identifier:          mNXdwE2PbzL+SuCuXvZfXwawr43roVKNtw+awjJEGII=
Subject key identifier:   F6:24:CE:92:62:8D:82:9E:AB:70:C1:28:44:B9:93:D7:42:EA:35:C2
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Certificate issuer:       /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial:       29D4725A561C1BD0ACDD413E8D1B464A7A64EC51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.mft
Manifest number:          021D
Signing time:             Mon 15 Apr 2024 11:28:22 +0000
Manifest this update:     Mon 15 Apr 2024 11:23:22 +0000
Manifest next update:     Tue 16 Apr 2024 12:17:22 +0000
Files and hashes:         1: C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl (hash: dZj1qr9Q3R3r2ASBXAzkODTfvWuksh1GbMZHJ4khNNU=)
                          2: 34352e36352e3133302e302f32332d3233203d3e20323636353238.roa (hash: i6D6kdjjo9ZIPXRJZ8XDUHdb6R1TpZx1hGPCU82MfyY=)
                          3: 34352e36352e3132382e302f32342d3234203d3e20323636353238.roa (hash: aXfj/De4cXHAVp3d1jS+xcMjwQoESiFLKTnQbPIe1YU=)
                          4: 34352e36352e3132382e302f32322d3232203d3e20323636353238.roa (hash: FU6ALJjX6T6YWvN94kPdlnrG2KyuHc3ThmcyPeCiINc=)
                          5: 34352e36352e3132382e302f32332d3233203d3e20323636353238.roa (hash: VyDIFVoX2B81G301E/Bjh4AZVqxf0UaFjdKtMaI5zW8=)
                          6: 34352e36352e3132392e302f32342d3234203d3e20323636353238.roa (hash: QbSAjt68+JvaFUI4ghusLrOdJ7gX2G1IC4Qjscfb8oA=)
                          7: 34352e36352e3133302e302f32342d3234203d3e20323636353238.roa (hash: pMaNI7ac5KTlp+Xom+/FPhN+Bg62pD+Xm8ipQLgm6po=)
                          8: 323830343a336436343a3a2f33322d3332203d3e20323636353238.roa (hash: xdHD2yHHHmAYlpRD2OO/U7AYA5r2+CE1cB7UAGLYIvk=)
                          9: 34352e36352e3133312e302f32342d3234203d3e20323636353238.roa (hash: zDrStmHUtQzer1mq5SW+27hIIjzY1c1ejXDHPhL+fiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d4:72:5a:56:1c:1b:d0:ac:dd:41:3e:8d:1b:46:4a:7a:64:ec:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
        Validity
            Not Before: Apr 15 11:23:22 2024 GMT
            Not After : Apr 16 12:17:22 2024 GMT
        Subject: CN=F624CE92628D829EAB70C12844B993D742EA35C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:09:d4:b7:45:93:77:0e:1f:0a:78:6c:a0:
                    27:53:40:6b:1e:93:75:33:33:2f:5e:36:c2:88:b3:
                    56:7a:85:f4:69:42:6e:cd:c6:25:d3:6e:fe:12:a9:
                    4d:71:26:a9:08:1c:a7:4b:36:0a:4a:7f:6b:ee:01:
                    e5:2c:5d:e9:10:9b:5a:21:9c:c2:f1:cf:3a:d6:09:
                    87:f5:72:df:e7:a2:76:a1:d5:54:75:e6:0b:0b:ea:
                    0b:45:a7:9a:03:a7:20:be:a7:08:fd:e9:f9:e8:c7:
                    65:1e:72:5c:88:2b:21:f0:c4:1b:78:f7:44:55:9c:
                    0e:28:75:f6:c0:86:c6:38:68:e4:eb:1b:2e:99:7c:
                    fb:ed:ce:7e:d4:38:99:fe:cc:8c:c3:87:3b:77:13:
                    cd:cd:fd:c0:03:d9:bc:8b:d2:20:1d:b5:70:a7:04:
                    12:7f:c5:4d:7a:84:fa:9d:d3:a0:7c:a7:26:1a:c3:
                    20:28:5b:7d:0e:52:7d:2d:a2:68:80:bd:fb:0a:6f:
                    45:4a:e9:cb:25:82:28:13:c1:3f:4a:d7:cf:e0:be:
                    8f:92:05:c4:8e:ae:e8:6e:e5:3f:13:d9:8e:a2:dc:
                    bb:b9:a6:f9:63:7d:e0:e4:e5:3b:86:a7:4d:ed:07:
                    ff:f3:30:1d:48:37:00:a3:e7:df:71:fc:bc:6f:ee:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:24:CE:92:62:8D:82:9E:AB:70:C1:28:44:B9:93:D7:42:EA:35:C2
            X509v3 Authority Key Identifier:
                keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:15:00:b0:b5:ae:99:cd:d3:46:bc:ad:a4:f3:5f:81:9a:
         02:8b:52:cc:a9:43:26:11:a5:71:88:1e:8e:33:42:cb:b7:b8:
         1f:6b:16:35:45:c7:98:e5:38:88:c7:7d:49:9b:ef:59:c7:33:
         3e:d5:d3:9b:18:2e:10:54:09:95:6d:e8:f2:44:1d:93:53:44:
         ea:e5:a5:cf:52:f2:f2:94:eb:f9:5d:d9:16:ce:8b:b8:b7:51:
         bd:11:87:27:c4:73:5c:1a:f8:4b:bc:b1:18:bd:27:a9:99:82:
         24:d0:5f:c5:d8:2f:de:90:ee:37:a6:21:9a:08:3e:97:15:44:
         75:f3:d3:67:5b:8c:f8:c7:9f:23:53:48:19:a2:95:ad:73:8c:
         ab:c6:b5:d3:2a:48:b7:cb:67:64:90:0e:3b:86:93:71:70:c9:
         7b:70:90:3c:11:2c:82:93:46:41:56:a3:ec:0f:3a:43:66:95:
         d8:5a:58:70:44:ed:ae:2a:47:7f:cc:e8:9a:cc:05:c5:49:71:
         ee:1a:4b:9f:2d:fd:2b:7a:f4:fa:85:9d:0a:1a:f9:17:d7:3f:
         56:0e:57:f6:bb:8b:79:7b:99:e7:11:ae:b9:5e:51:79:00:58:
         c3:9e:b9:45:01:99:3a:03:23:02:08:09:09:2f:6b:50:13:96:
         82:a5:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org