Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.mft
File:                     21D786A9E3E9F6FD8067630222961B177E0DA001.mft (raw, json)
Hash identifier:          VPM0mDMXhwMA3eqziZwkQcDtyHD3ESWwfdtWVv7hZ2k=
Subject key identifier:   57:9A:C4:17:7A:80:3B:18:05:50:4D:0D:9E:2A:F7:60:DD:F6:EF:EF
Authority key identifier: 21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
Certificate issuer:       /CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Certificate serial:       35A51FBF2CB12850A15BED633E9271CD818FC026
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.mft
Manifest number:          0203
Signing time:             Mon 15 Apr 2024 01:42:32 +0000
Manifest this update:     Mon 15 Apr 2024 01:37:32 +0000
Manifest next update:     Tue 16 Apr 2024 02:41:32 +0000
Files and hashes:         1: 323830343a323664343a3a2f33322d3336203d3e20323633383630.roa (hash: Vge/E+yDQ0VmAdWIb+CvLQs7NbfRpkQVGVva6h9Qmgg=)
                          2: 3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa (hash: YPaNnGE3hfd6RskMNmtMn4+dMaXTYtetAUPIbFA4Z0Y=)
                          3: 21D786A9E3E9F6FD8067630222961B177E0DA001.crl (hash: TEvXMAmOT13JfvGiAFeBMxuMvl9HKuKuJCRU4x1ArNQ=)
                          4: 3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa (hash: dOrxZSCQrfkNziy1SIT/DZxY0BnqGqZBuliFFViGAC8=)
                          5: 3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa (hash: DQCLXbw/YXCdpyShAbebk3BXq4yRcL1+eiXKirkSRlQ=)
                          6: 3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa (hash: r7n+PUe3E04IYF6bB/iDFr6AqmMisa5E3a5xlC+ellI=)
                          7: 3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa (hash: 0+MUmnzH7unvoTRfvMWna9AvH6HN59OqEyu3uvZUj6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a5:1f:bf:2c:b1:28:50:a1:5b:ed:63:3e:92:71:cd:81:8f:c0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21D786A9E3E9F6FD8067630222961B177E0DA001
        Validity
            Not Before: Apr 15 01:37:32 2024 GMT
            Not After : Apr 16 02:41:32 2024 GMT
        Subject: CN=579AC4177A803B1805504D0D9E2AF760DDF6EFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:0e:28:d3:a7:32:5e:1f:a6:25:ce:5d:82:
                    e2:d5:ff:07:b1:55:8c:61:c1:dc:d7:8e:8e:0c:0e:
                    08:ea:77:9c:31:52:5d:f4:8a:c5:46:bd:f1:b5:0e:
                    da:14:af:5f:a1:7b:03:54:ba:21:fd:df:aa:63:35:
                    08:34:2c:90:27:77:1e:64:02:6e:70:d8:df:a7:e7:
                    08:a9:d1:5d:27:91:31:0f:4d:04:af:f1:fb:98:7d:
                    49:32:5e:de:19:18:10:53:67:09:74:87:09:82:1f:
                    d5:53:d4:fb:da:09:a4:9b:df:c1:fa:27:fb:8b:58:
                    fe:a1:5a:20:e2:c8:b6:cf:f6:c8:75:d8:3f:a4:36:
                    60:46:dd:c3:a1:de:dc:30:64:63:a9:6a:d2:7a:f8:
                    8c:f3:71:7c:71:05:a1:3b:2f:80:23:69:3c:1e:8d:
                    48:0d:0b:2a:e4:49:6b:29:21:ab:04:4b:fa:2a:24:
                    c6:34:9a:d1:5d:a0:2f:23:72:c7:ae:00:5c:20:82:
                    3a:a7:81:88:1c:ec:e2:32:85:c3:6e:46:04:5a:b3:
                    e9:cb:6d:b7:30:40:85:09:5c:32:9f:2f:14:7a:12:
                    d5:4e:2e:34:fb:d3:c4:fe:e8:72:08:16:bf:d8:54:
                    bb:eb:d9:a5:f7:a6:46:53:94:04:82:38:28:ec:51:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9A:C4:17:7A:80:3B:18:05:50:4D:0D:9E:2A:F7:60:DD:F6:EF:EF
            X509v3 Authority Key Identifier:
                keyid:21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:92:06:c2:cb:8d:28:e7:76:5c:b2:5f:0c:76:4e:ec:32:11:
         29:cd:d6:66:ac:f7:1e:26:74:91:66:54:29:e6:f2:ab:cf:23:
         c9:16:74:4e:a2:5a:7d:cf:fd:1d:a3:57:5b:c3:e9:98:6e:6e:
         af:a9:a8:10:2e:00:02:ff:da:65:f0:83:30:19:0c:ce:92:f5:
         61:ec:29:94:f2:34:92:a5:e7:e4:e6:67:1c:c5:44:2d:67:01:
         af:ed:64:da:78:51:19:f7:00:4f:5a:2e:ac:53:92:9f:c1:93:
         5f:bd:18:68:e3:a6:d0:18:91:b9:cf:b8:53:49:2e:2d:19:20:
         ae:20:d0:0d:d3:5f:2f:7d:3d:b7:2f:fc:23:86:63:d0:6b:a6:
         b3:d4:f7:7a:13:a9:fd:58:49:66:d8:18:54:28:6a:9b:b1:3e:
         84:d6:38:6a:4f:17:de:da:0c:06:b3:b6:e1:bf:2b:ea:1c:e1:
         73:37:d8:05:e5:18:89:5e:12:a2:09:b8:fc:a4:40:28:84:5a:
         fd:b7:52:7c:dd:2e:d4:85:f6:e2:ce:11:29:4d:89:1e:04:eb:
         d7:88:57:dd:80:92:60:e5:56:d0:ca:1e:d7:3e:a6:5d:a2:29:
         f1:61:da:7d:f3:3d:5f:53:3a:d0:71:9d:11:3b:af:94:02:27:
         69:aa:b7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org