Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.mft
File:                     40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.mft (raw, json)
Hash identifier:          SySpvHo/rlTneWtKr1YwtOJB4ny6oQAncl77eKiaiB4=
Subject key identifier:   DF:A1:8B:BA:75:E7:48:62:D7:92:58:4D:76:36:11:CA:63:49:98:22
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       118FFC41DB567CB666E5BF2E301EBA14ECB41EA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.mft
Manifest number:          A2
Signing time:             Wed 17 Jan 2024 18:24:59 +0000
Manifest this update:     Wed 17 Jan 2024 18:19:59 +0000
Manifest next update:     Thu 18 Jan 2024 21:06:59 +0000
Files and hashes:         1: 323830343a323037343a3a2f33322d3438203d3e20323634343931.roa (hash: IlSlGtMXftEy3jvRWU0Ti3Vp0K1KIBoblMHoWgGl7E4=)
                          2: 3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa (hash: nbb6Dx/I/tPzkkfHC/hLRSa7p8o+bnTBJQUZA+SbW+8=)
                          3: 3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa (hash: 5Gys0VjQT8mdDqfl0c5rpxwERZ3EH3o2x1EiJM09eHs=)
                          4: 40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl (hash: 6c+EOrSkMdsmQDcO/KEHw5sN8U+OKl78zndy/fmIF3s=)
                          5: 3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa (hash: uV/LvzSBQYzV34cmGxc8Oy8F8PW8E/Mj0bUrHBVUQFk=)
                          6: 3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa (hash: RuUkpPmw0jaxA4j56nhQBtyWulo4aEdXLVInQMw3xKI=)
                          7: 323830343a323764343a3a2f33322d3438203d3e20323633393234.roa (hash: mNsFh+u/eAKibQMOB7VWjr4ZhX4ks/5L01pQ3Ad8tfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8f:fc:41:db:56:7c:b6:66:e5:bf:2e:30:1e:ba:14:ec:b4:1e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Jan 17 18:19:59 2024 GMT
            Not After : Jan 18 21:06:59 2024 GMT
        Subject: CN=DFA18BBA75E74862D792584D763611CA63499822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:98:c8:3d:73:ca:b2:e6:3b:3d:7e:9e:9a:
                    33:a6:96:70:41:21:5f:a8:2d:50:14:ca:eb:a5:2f:
                    ea:19:5c:4e:7e:66:53:33:c9:87:26:6c:d3:56:89:
                    07:dd:2e:50:de:75:73:26:60:ac:b2:0f:24:77:55:
                    91:fd:f3:0b:41:81:e8:d6:af:d8:55:da:be:4e:a2:
                    28:69:ca:a7:f3:52:06:c1:3f:bd:97:aa:86:86:24:
                    47:1e:3f:17:08:45:e2:d0:b4:70:fc:52:db:83:e0:
                    b2:c0:27:1b:fd:c4:33:34:46:72:82:6f:36:ae:fa:
                    4e:c0:7b:34:63:c0:7a:9b:f7:51:ba:40:d2:c9:5d:
                    d4:28:23:26:cf:e9:05:09:5a:24:9f:aa:cf:ed:4c:
                    dc:b8:19:f2:f3:fb:04:e3:e3:9a:45:0e:4e:54:e2:
                    37:3b:5c:5a:18:5c:3f:7b:f3:c3:b4:d1:8b:c9:e4:
                    80:c6:fe:20:bb:57:cc:65:32:ba:16:5e:07:07:f5:
                    97:df:ab:df:ed:5b:08:38:04:8e:95:52:94:ee:94:
                    cc:25:34:17:1b:95:4e:0e:08:c4:00:90:31:4a:fe:
                    b8:8a:49:64:e7:4a:03:d8:8f:d5:ba:9f:cb:a4:7b:
                    3d:8c:e2:87:ba:98:1b:04:3f:b8:5f:3d:84:57:8b:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A1:8B:BA:75:E7:48:62:D7:92:58:4D:76:36:11:CA:63:49:98:22
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:db:86:7d:fa:8d:33:c8:d2:99:af:94:dd:b0:c9:b9:c2:bb:
         d8:79:0b:24:92:89:99:13:a9:9d:d8:3f:28:49:e8:55:cd:ef:
         fc:8a:ef:a0:e0:85:96:d0:ef:e9:52:a6:ee:d4:de:a5:43:d4:
         b4:72:46:e8:c7:e2:17:b9:47:20:a9:47:71:65:9b:38:c8:6e:
         c2:1d:5f:19:7c:72:b0:cf:7c:3e:4d:93:59:48:cd:d8:10:eb:
         1c:22:69:1a:6a:f0:6e:e1:2f:95:bf:53:a9:94:11:88:44:29:
         76:ee:7e:0a:70:99:22:1a:67:12:65:d8:03:cf:16:46:7b:f4:
         71:7d:70:ab:84:3e:13:9b:23:d1:fb:aa:55:ed:6b:86:f6:2a:
         8c:f6:72:ac:70:70:83:75:f6:0f:85:d9:c8:a6:d3:22:5b:f5:
         e6:88:28:77:d4:70:60:4e:db:a7:5b:7b:6c:62:b0:f4:82:d8:
         1b:dc:ac:3e:d7:21:10:4d:04:62:b6:a4:2b:9c:94:6f:04:c9:
         e5:6d:80:cf:85:79:7b:72:f3:65:72:43:ed:7d:cd:2d:99:28:
         bc:4d:ff:e4:08:a3:16:d2:cf:36:ed:a0:d4:dc:87:5c:b6:a2:
         6d:83:53:c2:74:22:d0:f2:9a:a3:2c:2e:23:35:f3:5a:15:d1:
         73:2a:14:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org