Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.mft
File:                     DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.mft (raw, json)
Hash identifier:          EcWHlZi2WRbclsn+roJ0vlncPjHBxfNNZuoHf69HsWU=
Subject key identifier:   34:3B:8C:89:95:29:6D:6D:67:C4:32:89:22:A0:F1:D3:2C:87:31:D0
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Certificate issuer:       /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial:       55935E4AFBCDF2831C556A804E3AE796448710DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.mft
Manifest number:          30
Signing time:             Thu 09 May 2024 12:15:36 +0000
Manifest this update:     Thu 09 May 2024 12:10:36 +0000
Manifest next update:     Fri 10 May 2024 13:10:36 +0000
Files and hashes:         1: 3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa (hash: ewjormaXUmUuCjsWWT0psAetOwT06hhAOACFWlpKbLM=)
                          2: 323830343a326637303a3a2f33322d3332203d3e20323634383931.roa (hash: 3qd2t18iGGF+cvc1iKPZ+9QpPWaIxUn2YxQTAuhaWUw=)
                          3: 323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa (hash: lnXJvZgyujrKVDwxCwM/HhIdhh93PnAs1pmMwblXPik=)
                          4: 323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (hash: J1YF17Us6VQfkY6b4MDhubKJ5sdr9Q1e6wLnn+W763U=)
                          5: 3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (hash: kCVU4JAgr+ig1C6Ju9FN9/xe83Q1r0fSOBlJYU9Zfcw=)
                          6: 3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa (hash: YfOHE5etf8UrqXByx9oEPAOZLWIs2TvoCBx4ZL9C08Q=)
                          7: DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl (hash: kOLMnqQ8+TOCCZNy4ET/PP2py22cJbcWMCmY0x+dcx0=)
                          8: 323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa (hash: j2sCVmtS0E6KbTSN70aJRFC1Whixa57IVCROexMHVSI=)
                          9: 3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa (hash: qgT83Uo7a18rTBSza+YRwpraNOYLM+WRE7GRWVgwP9s=)
                          10: 323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa (hash: d/rlLvDrSafWjZx834Ie7LCqPALC41GsgMFBvSXEoZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:93:5e:4a:fb:cd:f2:83:1c:55:6a:80:4e:3a:e7:96:44:87:10:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
        Validity
            Not Before: May  9 12:10:36 2024 GMT
            Not After : May 10 13:10:36 2024 GMT
        Subject: CN=343B8C8995296D6D67C4328922A0F1D32C8731D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:e4:56:e4:8b:a0:97:de:e9:58:a5:f6:d3:
                    03:5d:13:4c:08:ac:d6:69:36:d7:c0:57:06:2e:06:
                    b8:6f:1f:2d:42:f7:2c:87:30:63:25:04:f5:c3:c9:
                    79:8d:2b:4e:c6:00:e7:23:58:75:e4:2b:0a:dc:54:
                    50:d0:39:f7:70:43:0d:b1:e9:01:51:4e:51:97:d2:
                    3a:60:86:78:ab:75:8a:f9:6d:7d:57:b5:45:30:f0:
                    24:3a:d6:3d:38:c9:aa:c0:ef:af:ad:62:bb:39:60:
                    20:4c:ce:1b:17:d1:a3:d7:f4:28:cf:f4:14:67:9a:
                    4d:b3:e6:dd:56:c0:9a:83:51:bc:0e:2f:1e:3b:5d:
                    de:69:f2:7e:99:00:bd:fc:78:f4:23:c8:56:b1:84:
                    0e:d2:6c:6f:3c:fd:0e:69:f5:19:05:e4:08:be:0c:
                    94:64:4f:bf:bf:2c:88:5d:e8:61:72:71:61:53:0e:
                    22:eb:4c:e3:b7:4e:27:ce:ab:2b:1b:0a:31:da:b1:
                    da:13:fe:01:3e:52:36:4b:4e:c9:54:4e:db:e3:f9:
                    e3:f3:4c:3d:82:e0:85:44:9c:2a:90:10:64:9a:34:
                    0d:6e:50:09:0d:f8:67:f9:d8:17:f3:88:c8:69:e2:
                    a2:b2:76:a3:4e:7d:38:55:cb:10:8e:c5:e3:df:b8:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3B:8C:89:95:29:6D:6D:67:C4:32:89:22:A0:F1:D3:2C:87:31:D0
            X509v3 Authority Key Identifier:
                keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:5e:51:9e:ec:23:1b:00:a5:04:e1:50:36:7d:7d:80:05:05:
         15:0c:a5:25:24:e9:a2:c9:07:53:8f:c3:8e:12:10:d0:95:cf:
         bb:c1:87:61:93:31:0b:03:a3:39:f1:f4:d1:05:b2:58:c5:db:
         4c:33:2b:21:27:50:d5:8f:0f:e9:63:c2:dc:29:c7:42:dc:e3:
         0f:7b:99:64:3f:9a:af:b6:a4:64:e3:0d:7a:44:ee:3e:6b:eb:
         d8:b0:4a:19:de:7d:d3:1a:e6:d0:35:de:81:ef:63:4e:ed:07:
         ec:3a:c2:4a:a2:7c:14:be:ad:2d:ad:6d:9d:65:19:99:54:d1:
         8a:90:ce:72:46:c1:2b:21:9c:77:36:a4:d8:0a:00:11:e6:73:
         c6:9b:b0:87:98:7f:41:35:9f:80:0f:20:e4:65:a9:5c:a4:b6:
         09:44:d0:db:9c:02:99:96:e6:60:ca:8d:da:09:86:ed:c6:a3:
         52:c9:6f:a4:24:e9:af:59:8d:b7:d7:36:db:57:9c:fd:ff:8a:
         1a:7c:8c:29:79:3c:67:b4:f7:ab:55:62:ca:0b:88:8f:7e:36:
         60:16:69:a8:03:d9:16:60:c0:ff:7a:b3:b2:08:0f:4f:56:df:
         33:70:40:8e:1d:15:af:89:1b:c0:ff:f0:a5:57:de:7a:2e:5f:
         24:9e:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org