Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/6C3972290384988354FA7378BDD841EEC2CED3A7.mft
File:                     6C3972290384988354FA7378BDD841EEC2CED3A7.mft (raw, json)
Hash identifier:          9EMjz/cdD3G2jrL4FnPgQH0Y7QLnjkJSCb8Dt3ZKi7g=
Subject key identifier:   E0:17:A3:DB:B2:09:77:0E:9B:E6:21:69:29:75:9E:48:1C:72:BF:B8
Authority key identifier: 6C:39:72:29:03:84:98:83:54:FA:73:78:BD:D8:41:EE:C2:CE:D3:A7
Certificate issuer:       /CN=6C3972290384988354FA7378BDD841EEC2CED3A7
Certificate serial:       467BB14290B2461CDEC4FBD9430DE550599D7F45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C3972290384988354FA7378BDD841EEC2CED3A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/6C3972290384988354FA7378BDD841EEC2CED3A7.mft
Manifest number:          6E
Signing time:             Mon 05 Feb 2024 22:08:20 +0000
Manifest this update:     Mon 05 Feb 2024 22:03:20 +0000
Manifest next update:     Wed 07 Feb 2024 01:14:20 +0000
Files and hashes:         1: 32342e3135322e372e302f32342d3234203d3e20323730343934.roa (hash: 9SeY0CAlFMhmdTWcGMDwuaj63pQy/IqHXOGHMfqLOvg=)
                          2: 32342e3135322e362e302f32332d3233203d3e20323730343934.roa (hash: 0BkKBCl5p0o3CloRyNrKbTB6xpAqAG91DuKdDCvI5Dg=)
                          3: 323830343a366364303a3a2f33322d3332203d3e20323730343934.roa (hash: YMElqYsvFyLrFlWah8Uyt5FJBl2vLOTOwMNgHpbc8Ao=)
                          4: 32342e3135322e342e302f32332d3233203d3e20323730343934.roa (hash: QSe9HxKfsM2OkgQLQClSQDkxTUCNHHFTm22D42q6kdA=)
                          5: 32342e3135322e362e302f32342d3234203d3e20323730343934.roa (hash: oAr5Q2z7+fNO8w7HuiHWy8eces0q4cU1bC2nObQLX+Y=)
                          6: 323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa (hash: OccEebh7ONIFg/ZXZuUsTPRvYUGAOKy/oP8Bhl8eqIU=)
                          7: 32342e3135322e342e302f32322d3232203d3e20323730343934.roa (hash: eQp5wohXeMdR0Xce3y/QtY/TUFfEYlTl9qgnT4+5kvY=)
                          8: 6C3972290384988354FA7378BDD841EEC2CED3A7.crl (hash: peMgy1PtnbqIG4Orldy9YnzEpUmZetVCIq27tQuPVTU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7b:b1:42:90:b2:46:1c:de:c4:fb:d9:43:0d:e5:50:59:9d:7f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C3972290384988354FA7378BDD841EEC2CED3A7
        Validity
            Not Before: Feb  5 22:03:20 2024 GMT
            Not After : Feb  7 01:14:20 2024 GMT
        Subject: CN=E017A3DBB209770E9BE6216929759E481C72BFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:ce:ce:2d:ad:53:39:f3:da:95:09:10:12:
                    9b:40:7c:cc:24:79:74:91:40:b3:0d:cf:81:46:84:
                    a3:26:4e:ff:67:f7:52:2e:dc:f4:57:4a:2c:52:fb:
                    50:2b:d8:ec:af:8d:b6:51:64:d1:9f:b5:4d:ea:fb:
                    74:02:8d:43:7d:fe:a5:14:59:b0:e4:d6:fb:cd:f4:
                    4f:e7:bf:1c:72:15:0c:4d:51:71:53:80:4f:cd:70:
                    39:a0:f2:f1:14:7b:8b:25:7e:46:81:a6:55:1c:93:
                    a9:68:c4:db:0b:93:b1:1c:cb:13:1f:f1:8b:d6:99:
                    54:b8:06:94:1b:bf:66:3e:68:07:af:6f:40:e3:16:
                    9b:db:8d:85:33:c5:b6:17:d6:7e:1d:ec:47:9b:7d:
                    a5:22:29:8b:0c:41:d3:0e:de:54:a9:d6:ce:ef:b4:
                    5a:1b:bf:3d:4e:93:cf:a4:19:22:2c:55:96:6a:27:
                    99:88:7b:79:0b:04:ef:7e:64:30:7b:34:c5:ba:77:
                    67:51:c7:57:fd:c2:6f:31:24:30:55:17:99:aa:c3:
                    fc:2f:2d:5d:39:b1:db:62:99:33:f0:bb:91:98:1f:
                    81:fb:59:e6:0d:bd:fa:b5:c0:70:52:c2:47:79:a0:
                    a1:d2:55:c4:b9:97:aa:95:05:d7:f2:fa:ed:91:4e:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:17:A3:DB:B2:09:77:0E:9B:E6:21:69:29:75:9E:48:1C:72:BF:B8
            X509v3 Authority Key Identifier:
                keyid:6C:39:72:29:03:84:98:83:54:FA:73:78:BD:D8:41:EE:C2:CE:D3:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/6C3972290384988354FA7378BDD841EEC2CED3A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C3972290384988354FA7378BDD841EEC2CED3A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/6C3972290384988354FA7378BDD841EEC2CED3A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:b6:24:a8:40:59:66:50:e8:c4:23:d0:85:8d:46:c0:a2:
         a6:d0:1f:c9:47:46:b9:ab:1e:48:01:c5:01:03:cb:ae:8c:54:
         92:37:de:3c:46:60:4a:af:04:3e:2d:8a:20:b2:a6:1b:11:7b:
         f7:51:d0:1a:5a:58:53:ab:4d:99:50:a8:75:e5:52:82:eb:6f:
         ae:0c:0c:0f:a5:66:54:46:0d:26:cc:28:d0:9e:77:32:19:b2:
         37:46:77:fb:26:9d:0b:81:2a:3b:13:11:53:79:54:92:4d:3e:
         9b:0c:ce:c0:ec:74:b0:22:1c:fd:01:13:bc:d8:51:d7:38:63:
         44:40:be:3d:64:39:01:20:db:7b:49:68:fc:b6:82:34:27:0b:
         4e:79:cf:df:5e:32:8f:8f:59:e5:cf:b6:5d:fe:97:e3:dd:34:
         50:2f:08:e8:8b:28:12:86:99:9c:aa:f3:aa:f6:9a:74:62:0b:
         37:cd:74:bb:a7:7d:54:b7:ba:91:8c:57:f9:8f:c3:61:4d:65:
         c5:f8:2c:5e:a1:50:49:7e:52:5d:e8:2c:8a:3d:f8:86:e8:e0:
         60:5a:fb:89:ae:5b:28:8e:0f:85:2c:83:a9:08:63:82:e0:6a:
         27:59:f2:c4:fd:d2:36:b9:08:7e:8e:3c:92:ca:65:05:ec:e8:
         9c:81:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org