Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/D26E7859637838C307DBD25C2CD76C8A7BDA08D4.mft
File:                     D26E7859637838C307DBD25C2CD76C8A7BDA08D4.mft (raw, json)
Hash identifier:          091mGzRN/NTqrPDpk2D0p46FaE08f/DWraejuf9iGgY=
Subject key identifier:   50:9C:2A:E6:9F:D9:30:02:66:7F:3D:59:9D:AD:2F:EF:04:8F:69:30
Authority key identifier: D2:6E:78:59:63:78:38:C3:07:DB:D2:5C:2C:D7:6C:8A:7B:DA:08:D4
Certificate issuer:       /CN=D26E7859637838C307DBD25C2CD76C8A7BDA08D4
Certificate serial:       2D777644175FB452BF0F3DA9114D0BBE360D6B14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D26E7859637838C307DBD25C2CD76C8A7BDA08D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/D26E7859637838C307DBD25C2CD76C8A7BDA08D4.mft
Manifest number:          02
Signing time:             Fri 08 Dec 2023 01:07:38 +0000
Manifest this update:     Fri 08 Dec 2023 01:02:38 +0000
Manifest next update:     Sat 09 Dec 2023 01:07:38 +0000
Files and hashes:         1: D26E7859637838C307DBD25C2CD76C8A7BDA08D4.crl (hash: ILOdt60W4OqingYuN7bjJ3lxX/UyEI2M2nsZiHVCteY=)
                          2: 34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa (hash: JH5+VMinmBxWC4V4f8EeHlAdv2yk6ryxW4/qBLxBC+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:77:76:44:17:5f:b4:52:bf:0f:3d:a9:11:4d:0b:be:36:0d:6b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D26E7859637838C307DBD25C2CD76C8A7BDA08D4
        Validity
            Not Before: Dec  8 01:02:38 2023 GMT
            Not After : Dec 15 01:07:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:a2:3a:9a:3e:b9:8f:ca:01:34:e6:a8:a6:
                    b7:c0:84:f5:00:e7:d1:3f:58:f2:25:47:2d:f0:c9:
                    3c:21:43:22:2e:6a:1e:94:a4:2e:1b:d2:c5:83:22:
                    0d:f3:8a:da:8f:67:54:7f:a2:a8:11:1b:1f:5d:55:
                    fa:e9:58:db:fe:b3:3a:60:68:35:ad:29:1d:57:77:
                    e2:33:f1:4c:e4:f0:3f:81:e1:c5:fc:c9:42:29:9c:
                    dd:83:1b:df:42:6d:eb:c9:1c:c4:3f:de:ea:30:f1:
                    83:eb:f3:14:4d:1c:60:c1:b3:d5:19:b2:bf:6a:7d:
                    bf:5d:e3:d5:0d:03:5e:cd:ee:6c:b3:eb:11:96:91:
                    3e:31:82:31:e2:ba:d2:29:ce:4b:d2:85:89:ac:3f:
                    5b:3d:49:e5:4b:ca:8f:4f:47:bd:7b:81:d7:0f:65:
                    81:19:04:24:69:6a:38:4f:03:64:10:26:69:ad:bf:
                    96:7b:98:77:ce:d4:73:23:a4:80:eb:ae:c2:20:bb:
                    f7:ff:b7:90:e5:36:7d:36:6f:47:ed:56:98:e6:ab:
                    91:70:04:05:b3:7c:38:63:fa:24:b0:f2:61:38:85:
                    e1:c3:a5:2d:ff:f9:4b:f4:5d:40:44:99:cd:54:ed:
                    b9:b0:6a:a5:0c:9a:12:e6:f7:12:53:fd:57:5d:58:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9C:2A:E6:9F:D9:30:02:66:7F:3D:59:9D:AD:2F:EF:04:8F:69:30
            X509v3 Authority Key Identifier:
                keyid:D2:6E:78:59:63:78:38:C3:07:DB:D2:5C:2C:D7:6C:8A:7B:DA:08:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/D26E7859637838C307DBD25C2CD76C8A7BDA08D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D26E7859637838C307DBD25C2CD76C8A7BDA08D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/D26E7859637838C307DBD25C2CD76C8A7BDA08D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:c0:a7:a2:62:a0:b7:ec:03:17:13:11:41:73:7f:6f:ed:
         ee:76:db:be:4f:4c:32:af:ea:58:61:b6:7b:7d:fa:51:99:5b:
         fe:64:75:05:43:31:85:fa:5f:53:3e:c6:4f:d5:6c:3d:ea:d3:
         40:4b:43:00:f2:83:eb:ac:b0:3e:c7:dc:1d:c3:a3:fe:7c:4d:
         63:fb:d2:cf:ee:83:96:8a:f7:68:05:58:52:9e:b3:7a:74:f7:
         9e:df:db:ba:fc:6f:00:ea:8b:eb:af:2b:70:2a:88:b0:92:c4:
         4a:0a:c3:36:a4:1f:ea:a5:a6:99:50:c2:03:21:9c:65:56:79:
         23:ba:0c:bb:59:3c:80:fc:68:f9:86:39:bc:16:eb:be:4c:2e:
         7f:43:d2:f9:71:18:49:3a:a3:5d:5f:88:27:f4:38:75:16:51:
         1e:d4:8a:29:b5:94:42:aa:1b:67:8d:95:c4:f8:a6:c9:81:01:
         ea:ed:36:92:92:c0:55:6a:9e:9b:c0:cf:5f:27:c1:5a:d0:ee:
         64:70:c3:49:bd:35:be:c4:64:f3:1c:13:42:21:39:6d:06:61:
         9a:14:b7:89:b4:80:2f:85:9b:5b:a5:e3:91:cd:f2:06:fd:4e:
         8d:1f:54:6c:0b:a5:ba:f7:fb:2c:44:48:b7:22:df:36:d4:9b:
         2f:06:88:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org