Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/1/14D6C711A1E311952F2BBD6302D25E540534D31A.mft
File:                     14D6C711A1E311952F2BBD6302D25E540534D31A.mft (raw, json)
Hash identifier:          3QI/r5FiNn9C3IkzWHG3uiDJ27JAc57Eyh1+k4fU2+Q=
Subject key identifier:   08:58:AF:2C:6A:DF:FE:38:9F:2A:88:0C:F6:AB:31:80:BF:DA:A0:11
Authority key identifier: 14:D6:C7:11:A1:E3:11:95:2F:2B:BD:63:02:D2:5E:54:05:34:D3:1A
Certificate issuer:       /CN=14D6C711A1E311952F2BBD6302D25E540534D31A
Certificate serial:       548902128DDBFEFF846245BC0F00FBCA99032BEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14D6C711A1E311952F2BBD6302D25E540534D31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/1/14D6C711A1E311952F2BBD6302D25E540534D31A.mft
Manifest number:          3E
Signing time:             Tue 14 May 2024 11:30:00 +0000
Manifest this update:     Tue 14 May 2024 11:25:00 +0000
Manifest next update:     Wed 15 May 2024 11:30:00 +0000
Files and hashes:         1: 14D6C711A1E311952F2BBD6302D25E540534D31A.crl (hash: rMaXbA+itzLWkkL5rQc8UYxQkT0i7qKJiamP4CdQ6jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:89:02:12:8d:db:fe:ff:84:62:45:bc:0f:00:fb:ca:99:03:2b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14D6C711A1E311952F2BBD6302D25E540534D31A
        Validity
            Not Before: May 14 11:25:00 2024 GMT
            Not After : May 21 11:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:a3:a6:09:cc:de:75:9b:73:45:88:ae:15:
                    01:45:f6:51:a6:be:ea:9b:7a:ee:bc:bb:c1:70:0a:
                    f4:26:5a:96:bb:8c:a6:ef:01:b2:12:e4:61:9d:da:
                    de:d0:26:e1:c4:dd:48:f4:a3:72:d3:f7:a2:b6:7f:
                    bb:5c:49:d9:4f:ac:ad:ea:a7:63:a4:e4:9d:62:dc:
                    a7:90:7d:c1:89:66:80:a4:fc:90:d5:bb:d1:b2:fb:
                    15:5b:6b:5d:a9:21:e2:4f:c3:7c:f4:e6:f3:76:49:
                    af:7f:62:dc:5a:41:03:e2:8c:fb:bb:e0:b7:42:c7:
                    4c:7d:c0:67:c5:25:91:9f:dd:9a:43:aa:33:c0:84:
                    ee:05:31:9b:dd:f5:03:f7:2c:e4:1b:84:82:99:7e:
                    d4:e5:27:30:19:c2:d8:f9:ff:29:f6:ff:16:95:0c:
                    8d:79:da:3f:68:99:b6:13:ee:b5:17:b1:1a:f9:d0:
                    72:aa:58:bf:f2:0f:1e:9f:30:87:71:32:34:96:76:
                    1a:86:2f:81:82:32:6c:56:0d:31:e5:11:6c:67:e6:
                    f8:ea:53:83:12:71:bf:dc:f5:41:a6:11:87:12:23:
                    c0:bb:99:9e:a3:71:61:44:5d:c0:a7:ff:86:da:16:
                    ea:aa:d7:c4:b8:e4:a3:1a:52:9a:b0:04:98:ed:8d:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:AF:2C:6A:DF:FE:38:9F:2A:88:0C:F6:AB:31:80:BF:DA:A0:11
            X509v3 Authority Key Identifier:
                keyid:14:D6:C7:11:A1:E3:11:95:2F:2B:BD:63:02:D2:5E:54:05:34:D3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/1/14D6C711A1E311952F2BBD6302D25E540534D31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14D6C711A1E311952F2BBD6302D25E540534D31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/1/14D6C711A1E311952F2BBD6302D25E540534D31A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e5:21:b6:f1:44:c7:cb:84:05:ab:18:cb:ed:66:59:0c:e5:
         d8:12:4e:ca:c2:69:4f:df:32:1d:bf:b5:60:32:10:dd:50:f2:
         da:e2:5b:1b:39:85:8b:a8:f9:f2:0c:98:9a:e9:34:60:45:08:
         78:f3:05:24:6a:b0:27:ce:a1:ca:ca:1d:aa:3a:fc:ea:5b:ca:
         e8:d1:82:c6:15:0e:ee:99:7a:19:61:50:3f:fa:d7:02:4c:79:
         f9:fa:b3:02:63:7e:49:c4:c3:0a:1c:85:15:0b:96:48:75:f6:
         2a:02:2b:44:2f:7a:e3:27:bc:66:35:5e:09:27:4d:d7:6b:31:
         fd:48:0d:38:52:24:61:d0:d3:42:8f:b7:2a:0d:41:6e:bb:6d:
         e7:36:bb:cd:a7:cd:2c:3e:b6:1b:6a:ad:d4:71:ac:8d:6a:a0:
         0b:50:81:ef:0c:d7:d8:0e:88:b5:41:b4:2d:be:3c:dc:93:5f:
         d7:e6:b1:6f:8c:6d:9e:8f:cf:9c:51:31:6c:08:5b:d0:c8:11:
         00:e6:15:2b:6e:2d:0d:37:69:b7:e5:f9:db:0b:4d:e9:14:53:
         b5:b0:df:4d:67:9b:21:99:0e:7b:90:20:0e:11:b3:70:7f:94:
         22:7e:0a:31:8c:7d:68:89:92:18:9e:67:83:01:57:e9:04:32:
         2b:b1:d7:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org