Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.mft
File:                     122A0906A85BBC298F8098D0F553D11D5DA374D5.mft (raw, json)
Hash identifier:          pcNEpAgln+6vvCKfjX0WfNiGB6ayAS/sM3h/baIjHhM=
Subject key identifier:   68:7A:06:B2:A4:60:30:5C:B4:D8:56:22:59:32:2E:63:13:C3:EE:0A
Authority key identifier: 12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5
Certificate issuer:       /CN=122A0906A85BBC298F8098D0F553D11D5DA374D5
Certificate serial:       73057818250986909422AE1A119533F8D435D531
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.mft
Manifest number:          16
Signing time:             Fri 19 Apr 2024 04:35:19 +0000
Manifest this update:     Fri 19 Apr 2024 04:30:19 +0000
Manifest next update:     Sat 20 Apr 2024 05:58:19 +0000
Files and hashes:         1: 3137372e35342e38382e302f32322d3234203d3e20323632323932.roa (hash: O82bCBewZ3GDzP20cgBFwEvnunmmycEII2Y0KQZFvXI=)
                          2: 3137372e35342e38342e302f32322d3234203d3e20323632323932.roa (hash: VFDFav6ItG4dWhd3oBXHdlnXJluXgqFIuO4kqTBnTKU=)
                          3: 3137372e35342e38302e302f32322d3234203d3e20323632323932.roa (hash: CdKXFrHdq5ZoeHsZrWwrZqWx1VCIrlsNRgM9Jk8ANQI=)
                          4: 122A0906A85BBC298F8098D0F553D11D5DA374D5.crl (hash: o2fTAXqXQYnd5PH/3CzQr8LFFgaS+XbCCcKeEs5dnLk=)
                          5: 3137372e35342e39322e302f32322d3234203d3e20323632323932.roa (hash: JBen431WECzFex+SbDAkPGvsuqxRDI21lxbq9vp+OX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:05:78:18:25:09:86:90:94:22:ae:1a:11:95:33:f8:d4:35:d5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122A0906A85BBC298F8098D0F553D11D5DA374D5
        Validity
            Not Before: Apr 19 04:30:19 2024 GMT
            Not After : Apr 20 05:58:19 2024 GMT
        Subject: CN=687A06B2A460305CB4D8562259322E6313C3EE0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:45:d3:14:13:c6:b3:e5:95:d4:4d:34:fb:
                    75:47:0e:d2:fb:42:5b:95:5c:0e:9c:07:05:57:4a:
                    56:3a:1e:90:52:c0:6c:bf:41:25:9c:39:e8:44:c5:
                    d7:02:40:4e:5f:87:a5:34:b3:3e:19:a7:a2:e5:a2:
                    c3:4b:2c:b1:43:24:a8:11:12:2b:a0:55:84:b4:0b:
                    c3:9b:26:3a:00:c8:9b:26:ef:90:67:76:0a:00:c0:
                    98:ab:f2:f6:52:ab:92:9a:3f:46:5d:59:f1:7a:53:
                    02:88:66:71:cb:ef:f6:80:3e:e4:a2:df:f5:31:74:
                    4e:00:5e:9e:aa:ec:ff:25:cb:f7:58:15:21:55:e0:
                    fe:a2:d2:d6:41:4f:ce:c8:8c:1b:8b:3a:1c:da:c2:
                    6f:b0:24:f6:b4:6b:ee:85:81:88:b8:75:9f:d1:d5:
                    1f:0d:4a:2f:ab:07:d1:54:1c:bb:71:39:40:d0:b7:
                    7c:bd:02:17:ed:85:80:86:0e:5b:41:2c:8b:fa:11:
                    10:1d:f8:78:60:76:f2:1c:23:bb:50:22:8c:8d:16:
                    f1:9c:66:87:18:11:6d:c6:92:b3:a1:dd:09:d0:34:
                    fd:fb:cd:b0:f1:e8:61:8e:44:0c:22:17:7a:58:bd:
                    b6:b1:3f:a0:4b:c9:0e:89:eb:28:9a:e9:b8:cd:30:
                    c9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7A:06:B2:A4:60:30:5C:B4:D8:56:22:59:32:2E:63:13:C3:EE:0A
            X509v3 Authority Key Identifier:
                keyid:12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:15:dc:51:e4:64:41:5f:91:0b:7f:e2:e3:88:16:de:e6:ab:
         8a:90:a9:c8:50:1d:7c:fb:fb:de:17:9e:17:cd:5d:6a:16:02:
         71:57:75:2e:08:06:6a:6c:07:c3:75:27:8f:17:96:f4:68:60:
         5b:11:87:17:18:5a:04:79:51:90:a7:35:f5:ab:f9:81:2a:a2:
         48:4c:d7:6a:77:69:90:b2:7d:a6:5a:ed:c0:ef:bd:8f:a7:b2:
         55:ac:f7:4d:13:f3:c0:ff:a1:36:76:48:c4:78:fb:08:ed:70:
         97:b8:20:91:e5:b0:5b:e6:fd:0e:a3:11:52:2a:77:a0:76:0d:
         e8:ca:0b:0a:74:c6:dc:5a:e7:5d:de:90:d6:36:05:3f:52:c0:
         57:81:52:26:b1:5c:67:46:b6:f7:38:a7:be:1d:6e:47:6c:8b:
         4c:3b:e8:d4:a4:03:d4:4a:59:61:c6:3a:29:29:8b:ae:fe:81:
         5d:f0:eb:68:41:52:25:cd:9a:50:19:3f:d3:2a:e4:b5:e3:ad:
         5b:36:8d:56:88:ea:ad:2d:6e:e9:11:40:46:f4:cb:04:79:37:
         d6:36:cb:da:98:f9:9e:a6:5b:cc:a6:0f:2f:1f:e9:76:82:fe:
         fa:2c:7b:93:19:86:3f:ed:7b:a5:9c:44:5e:bd:1c:89:a4:28:
         fc:c8:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org