Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.mft
File:                     BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.mft (raw, json)
Hash identifier:          B5FCy83tqkl1T2tMTCTlc3OJx4pxD26DV+oj5u+USYE=
Subject key identifier:   6A:01:3D:51:29:FB:38:BE:25:B9:46:D4:08:68:01:26:06:33:96:4A
Authority key identifier: BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB
Certificate issuer:       /CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
Certificate serial:       23ED4EF78DEF864570FD504475909AAF094EA1E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.mft
Manifest number:          0A
Signing time:             Sun 23 Jun 2024 04:23:13 +0000
Manifest this update:     Sun 23 Jun 2024 04:18:13 +0000
Manifest next update:     Mon 24 Jun 2024 07:48:13 +0000
Files and hashes:         1: 34352e3233332e3138302e302f32342d3234203d3e20323637333437.roa (hash: 1RXj4LBzHKvFILB/iEPnM6tMlU68elZEQQAuksfjyBE=)
                          2: 34352e3233332e3138322e302f32332d3233203d3e20323637333437.roa (hash: 42H1GNuh4/uDKdmfB5xh6m/fvZdzbXb6Kf5Nu2dlf74=)
                          3: 34352e3233332e3138312e302f32342d3234203d3e20323637333437.roa (hash: HFawliRt9tqK3wmIYe6Mpseya9PI8CRqbLDi+vBfv6Q=)
                          4: 34352e3233332e3138302e302f32332d3233203d3e20323637333437.roa (hash: mcM+szzAJfaLBt/NmjmW6lh7XuDtrcTY+1F8aJatlfY=)
                          5: 323830343a346331303a3a2f33322d3336203d3e20323637333437.roa (hash: Oc3ZRqfb4OKd0nj9dkr6EXXmVriv8a8rEB1Dfj+rpwQ=)
                          6: BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.crl (hash: apz50qKXGgaYT9NFiic0O86X7my7h21GF3HCQUD5zzg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ed:4e:f7:8d:ef:86:45:70:fd:50:44:75:90:9a:af:09:4e:a1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
        Validity
            Not Before: Jun 23 04:18:13 2024 GMT
            Not After : Jun 24 07:48:13 2024 GMT
        Subject: CN=6A013D5129FB38BE25B946D4086801260633964A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:8c:50:bd:0a:a0:49:4e:c5:8e:b6:64:8c:
                    0f:8c:0f:75:c2:61:47:d9:38:67:25:f9:4b:12:f2:
                    80:4f:bc:3d:d4:f2:2f:ba:71:c2:e9:3b:13:0c:24:
                    a0:9c:cb:30:9a:c9:e8:3e:96:93:52:b8:d9:ee:e3:
                    13:24:33:1a:3f:4a:02:57:43:bb:01:7a:c6:63:b9:
                    8f:20:5e:64:27:0f:21:b3:1c:a5:45:9a:59:b4:61:
                    c8:97:51:38:ec:f2:80:57:6b:60:ce:11:4b:d4:f3:
                    93:38:96:9a:63:05:43:59:90:cc:83:3c:3f:9a:56:
                    42:0e:5d:72:90:68:c0:28:7d:9c:43:bb:c4:2a:39:
                    45:3f:8f:0e:30:2e:71:3a:a4:76:7f:e7:b2:63:17:
                    9a:c4:c4:43:74:10:2a:56:88:59:1c:b9:e5:f3:8d:
                    a4:8c:27:dc:90:c8:51:d0:5d:69:12:03:84:e8:ac:
                    73:36:58:7d:3f:ea:4d:df:4e:cc:c9:f9:1e:bf:a9:
                    99:72:a2:c3:47:d7:9d:a0:e2:9a:a6:a2:8f:7d:d0:
                    f3:6b:12:b6:d2:92:89:14:82:b3:c5:72:12:02:55:
                    3c:2f:49:cb:db:ba:52:c0:3d:ee:ec:05:93:dd:77:
                    ee:bb:1a:f3:ef:9a:a3:06:43:db:eb:b9:3e:49:78:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:01:3D:51:29:FB:38:BE:25:B9:46:D4:08:68:01:26:06:33:96:4A
            X509v3 Authority Key Identifier:
                keyid:BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1a:67:af:ce:87:9e:12:25:2c:1f:6f:f6:05:b6:db:4a:91:
         71:00:b4:58:51:09:3c:33:ba:c0:77:6e:5f:63:77:90:5c:37:
         d8:91:5f:f6:98:e2:84:60:44:aa:6c:7d:5e:d5:c5:63:61:77:
         b5:c2:ee:1c:24:cb:95:e4:67:7f:9f:da:be:82:bb:f7:b4:4c:
         60:85:10:c9:ec:9f:9f:42:50:b7:8a:14:04:d7:6a:67:d2:55:
         88:80:af:1f:c6:6a:0c:b6:ec:3f:0a:9a:5a:c5:90:c6:60:be:
         4f:99:7f:5d:06:a9:a7:d7:17:f7:71:ed:0b:06:52:0a:c5:76:
         5e:fd:a6:7a:5b:16:ba:00:ba:3b:bd:f8:9a:8b:cf:c9:0a:33:
         e1:cd:77:f1:42:ae:17:4a:b7:b4:5c:fd:a2:58:ef:db:33:eb:
         8e:7d:c2:61:76:ef:2d:0c:04:2a:bd:40:fe:bd:6b:c4:e6:8c:
         ae:c6:f8:be:60:d4:5a:06:0f:a1:8e:c9:f6:72:a1:35:2c:7a:
         93:5f:a6:6e:9e:9a:7b:60:04:fa:08:38:6c:60:0a:92:a9:38:
         68:75:0a:d5:4d:23:50:be:79:99:c9:06:10:26:bf:78:d4:d8:
         8e:c2:2a:45:f8:d7:0b:cd:3c:c7:64:ef:af:f2:dc:d2:57:90:
         7a:dc:17:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 05:50:12 2024 by rpki-client on console-fra.rpki-client.org