Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7.mft
File:                     694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7.mft (raw, json)
Hash identifier:          igR/Dow4iEcbLBuzh8hFnub2TqY2Lp42vyeQ4nxb9MA=
Subject key identifier:   60:C5:28:70:2C:A2:D3:E5:7E:B4:96:A3:D7:B1:47:70:E9:2C:E6:58
Authority key identifier: 69:4D:C4:AB:23:04:55:7D:4C:26:7D:9A:1B:CA:A6:DA:85:E9:B4:F7
Certificate issuer:       /CN=694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7
Certificate serial:       07774737CE3AE8E9E8FCEF3D7EE47140CF510818
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7.mft
Manifest number:          65
Signing time:             Thu 28 Mar 2024 08:14:10 +0000
Manifest this update:     Thu 28 Mar 2024 08:09:10 +0000
Manifest next update:     Fri 29 Mar 2024 10:11:10 +0000
Files and hashes:         1: 323830343a356332303a3a2f33322d3332203d3e20323638383930.roa (hash: PybkzmMexmX7kyJ3iOdIkIzFAy55UGdERUq+gJoYEa8=)
                          2: 34352e3137352e37392e302f32342d3234203d3e20323638383930.roa (hash: m5eB4N9ie9LMMcwk+/AF6dclXEHC+mOGYL5S6zfNkXw=)
                          3: 34352e3137352e37362e302f32322d3232203d3e20323638383930.roa (hash: iziPSCTfSl2/OESXgBUE/sCBQtgYbcm4KXG+onJLONQ=)
                          4: 34352e3137352e37382e302f32342d3234203d3e20323638383930.roa (hash: DM2em9Ado6ihYG58Ss+YaJ1ZmHprv2hLdnWqfBCf2BY=)
                          5: 34352e3137352e37362e302f32342d3234203d3e20323638383930.roa (hash: fkpBmj0X7Xy3MeS6TG2CLpIJAaZcAoAnw7M1Nwcs974=)
                          6: 34352e3137352e37362e302f32332d3233203d3e20323638383930.roa (hash: i7muPXPhCs+66MHk7n0Rc5yIFemUMRVM46UL4u24VrQ=)
                          7: 694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7.crl (hash: vroyvKvugohCMT66JMieumwhfswFqCQe/98gjQJukcI=)
                          8: 34352e3137352e37382e302f32332d3233203d3e20323638383930.roa (hash: vdZOiQPGT0/PApmhVzMZV0cxZHdC5WmbvNAqhWqfgfU=)
                          9: 34352e3137352e37372e302f32342d3234203d3e20323638383930.roa (hash: ZUFUuinPpmE6uBuRx9H2he9mZ/l1J6wEQQNIuNK30YU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:77:47:37:ce:3a:e8:e9:e8:fc:ef:3d:7e:e4:71:40:cf:51:08:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7
        Validity
            Not Before: Mar 28 08:09:10 2024 GMT
            Not After : Mar 29 10:11:10 2024 GMT
        Subject: CN=60C528702CA2D3E57EB496A3D7B14770E92CE658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:ec:20:1a:3a:cd:2d:bf:8c:2e:28:88:d0:
                    c9:33:7e:d1:88:69:4c:63:61:31:74:85:95:11:33:
                    1a:3d:ea:8b:86:b6:85:30:7f:f2:38:a0:83:62:ec:
                    de:07:50:b3:08:de:52:50:07:33:99:83:31:0b:1a:
                    77:16:e2:16:1f:af:82:72:1e:96:ad:d1:0d:b2:ad:
                    68:c6:11:93:48:2e:69:38:60:ad:ed:29:1d:27:f7:
                    28:73:25:89:f4:49:56:c8:bc:35:4e:54:d3:6a:2b:
                    8c:67:d3:30:38:a7:78:7e:15:1b:e7:df:8a:b3:9a:
                    73:57:80:cb:ec:2e:fc:68:5c:94:ad:8b:db:ef:95:
                    66:0e:8b:7d:88:90:32:26:cc:94:33:07:d1:ee:11:
                    98:8c:7b:20:b0:cb:c4:b7:8d:76:fa:00:ce:40:15:
                    59:de:92:10:58:d4:a5:82:8d:a0:a4:ce:10:92:d2:
                    b8:c0:46:3a:82:35:58:a5:c4:6f:31:26:92:3d:4e:
                    14:5e:5f:15:59:b2:a7:ba:ff:ae:45:a6:10:7e:2c:
                    2d:35:39:52:a2:81:d3:e5:2f:26:fc:dc:64:fd:cd:
                    0a:2d:21:73:79:86:d7:df:47:3d:c8:23:2c:80:c5:
                    7a:b4:26:bc:3a:20:9e:e1:ca:de:eb:d7:80:d3:82:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C5:28:70:2C:A2:D3:E5:7E:B4:96:A3:D7:B1:47:70:E9:2C:E6:58
            X509v3 Authority Key Identifier:
                keyid:69:4D:C4:AB:23:04:55:7D:4C:26:7D:9A:1B:CA:A6:DA:85:E9:B4:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/694DC4AB2304557D4C267D9A1BCAA6DA85E9B4F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:6e:48:fb:91:7c:5e:50:12:97:01:a6:28:a0:86:ae:38:
         76:d9:6f:7c:fc:4a:f3:30:6b:36:7d:53:8d:30:61:5c:5d:0f:
         00:4f:26:6a:cc:3a:8d:17:98:e4:31:e1:c0:8e:18:b5:d9:af:
         24:21:d7:69:67:bb:e5:08:a1:d3:4a:9a:f4:6d:2e:40:8b:a0:
         3d:9f:ae:ce:ee:66:12:77:cd:95:83:d7:c2:e4:14:44:f7:c9:
         e6:18:e6:e5:12:6e:68:6e:a2:c2:f7:c9:c2:fb:45:f0:56:55:
         dd:10:95:14:8f:8a:7c:c2:82:11:87:e4:76:ce:dd:49:80:2f:
         e4:74:58:8f:d7:0f:9a:47:3d:e1:f6:3e:4a:69:e0:a1:e2:2e:
         55:96:1a:d6:16:28:dc:ce:69:89:dc:fa:71:38:54:58:ce:ac:
         18:6e:3d:fa:0c:68:98:dd:45:2f:22:18:85:5e:16:f3:d4:a7:
         d2:b2:7b:fc:c5:7e:e1:7b:70:a8:1d:e0:e5:2a:2a:cf:89:53:
         b0:c8:a9:f5:66:d8:21:1c:11:18:10:15:e3:9f:d5:c5:0f:7c:
         9d:0e:76:ee:d9:86:4a:8f:a7:f6:9c:41:73:30:9e:d5:ed:59:
         85:ba:ee:4a:70:ff:7b:ea:d3:d9:0a:05:bc:c6:24:5a:a5:53:
         6d:61:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org