Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.mft
File:                     25B1765BE1196A916D606610E67447F8241DF008.mft (raw, json)
Hash identifier:          x12voLJcvCdtu3MKGZ8uS9c6FyWs47NclThdUqjltms=
Subject key identifier:   E2:35:02:62:07:57:D2:1A:C6:07:84:E7:81:EC:26:0F:86:29:2D:A3
Authority key identifier: 25:B1:76:5B:E1:19:6A:91:6D:60:66:10:E6:74:47:F8:24:1D:F0:08
Certificate issuer:       /CN=25B1765BE1196A916D606610E67447F8241DF008
Certificate serial:       35389CA8718123F6643569C39DF72E7F69BC2CCA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B1765BE1196A916D606610E67447F8241DF008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.mft
Manifest number:          0521
Signing time:             Sun 14 Apr 2024 20:00:00 +0000
Manifest this update:     Sun 14 Apr 2024 19:55:00 +0000
Manifest next update:     Mon 15 Apr 2024 20:00:00 +0000
Files and hashes:         1: 25B1765BE1196A916D606610E67447F8241DF008.crl (hash: R4pVaR/yDZCKBT70KPCGec7rYLg23afEUTpSkJ5oxnQ=)
                          2: 323830343a383437383a3a2f33322d3332203d3e20323732323632.roa (hash: YsqSGMd9O9R5yrZ0xUPQergCZgeRsTGZ82P9lLa88Fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:38:9c:a8:71:81:23:f6:64:35:69:c3:9d:f7:2e:7f:69:bc:2c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B1765BE1196A916D606610E67447F8241DF008
        Validity
            Not Before: Apr 14 19:55:00 2024 GMT
            Not After : Apr 15 20:00:00 2024 GMT
        Subject: CN=3082010A0282010100F5DC421F3951A049472EE86A083EC02A173778542D81B08B4A24FCFDD5E8EE77ECCFDE4A066A0C55AC9770C3AFB65747A34364352B98094787647C583375BD5E285AF71EFB8569057B20AB4BE5C68A316DD3F98D57E655DD6C3B20E079900371629EF1BDE11F5DAB793804903A0A6A818815B9F2D1B8EA2C37D513F3D52A02B2B25328ED46E8B516CFBFC73EE4EEAB03ECCEAC2BD2459AD8CA4B018714CAA4A2138845E5AF2F928C6E0DB6DE3CC3B42708700C34D960A162E96235224CF926612DB68C10042BE3B01FC8DBB295D960B86FCE6A396E71522FCCF9ECC1C243B21C268AD54D4B9BFC9F4B1E9E9F6B2B113B374EB1189A8E6333EB14523F41B509D70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:dc:42:1f:39:51:a0:49:47:2e:e8:6a:08:3e:
                    c0:2a:17:37:78:54:2d:81:b0:8b:4a:24:fc:fd:d5:
                    e8:ee:77:ec:cf:de:4a:06:6a:0c:55:ac:97:70:c3:
                    af:b6:57:47:a3:43:64:35:2b:98:09:47:87:64:7c:
                    58:33:75:bd:5e:28:5a:f7:1e:fb:85:69:05:7b:20:
                    ab:4b:e5:c6:8a:31:6d:d3:f9:8d:57:e6:55:dd:6c:
                    3b:20:e0:79:90:03:71:62:9e:f1:bd:e1:1f:5d:ab:
                    79:38:04:90:3a:0a:6a:81:88:15:b9:f2:d1:b8:ea:
                    2c:37:d5:13:f3:d5:2a:02:b2:b2:53:28:ed:46:e8:
                    b5:16:cf:bf:c7:3e:e4:ee:ab:03:ec:ce:ac:2b:d2:
                    45:9a:d8:ca:4b:01:87:14:ca:a4:a2:13:88:45:e5:
                    af:2f:92:8c:6e:0d:b6:de:3c:c3:b4:27:08:70:0c:
                    34:d9:60:a1:62:e9:62:35:22:4c:f9:26:61:2d:b6:
                    8c:10:04:2b:e3:b0:1f:c8:db:b2:95:d9:60:b8:6f:
                    ce:6a:39:6e:71:52:2f:cc:f9:ec:c1:c2:43:b2:1c:
                    26:8a:d5:4d:4b:9b:fc:9f:4b:1e:9e:9f:6b:2b:11:
                    3b:37:4e:b1:18:9a:8e:63:33:eb:14:52:3f:41:b5:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:35:02:62:07:57:D2:1A:C6:07:84:E7:81:EC:26:0F:86:29:2D:A3
            X509v3 Authority Key Identifier:
                keyid:25:B1:76:5B:E1:19:6A:91:6D:60:66:10:E6:74:47:F8:24:1D:F0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B1765BE1196A916D606610E67447F8241DF008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:40:12:05:27:54:1c:75:89:5f:87:98:fd:db:b8:50:52:
         fa:e7:df:59:a4:77:c9:32:4f:79:74:f6:eb:9d:ec:bf:99:ba:
         47:d7:c9:1c:71:96:4a:d1:4f:c2:1d:ea:f6:2b:a4:81:db:8d:
         b6:79:42:62:a8:59:d4:5b:c5:66:a6:f3:1f:38:df:3c:2b:3c:
         4f:cd:2f:2a:7e:0c:d7:71:fe:f3:c0:59:33:2f:60:33:c3:c0:
         32:10:85:2f:8b:15:df:9e:b9:e7:e2:bf:7c:68:3b:6e:a1:ee:
         43:2b:d3:39:b3:d7:a6:54:80:fb:95:00:26:1f:63:21:72:74:
         7d:36:8f:18:49:02:e6:9b:71:00:ab:ce:c3:b8:32:a3:0b:1c:
         d2:61:bc:ad:9a:e0:53:4a:35:57:1d:04:c8:81:45:0c:98:3f:
         e6:70:5c:19:da:f5:fa:29:09:06:02:1c:7e:ce:90:16:f4:21:
         5b:0f:2f:62:86:ee:d1:ac:70:30:09:52:93:aa:67:65:44:e1:
         e6:c6:d6:89:41:96:57:b0:aa:0c:fc:78:bc:16:2f:fc:6f:67:
         32:be:1b:24:a5:7c:7b:a4:52:0b:03:0f:c0:9f:4e:14:03:93:
         ab:1b:ae:6f:da:ac:66:8c:96:93:0f:5e:4e:8f:ea:d1:ff:0e:
         5c:d2:25:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org