Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/40E6E7B36DB8DC923ACF19220F07E156496B2B9D.mft
File:                     40E6E7B36DB8DC923ACF19220F07E156496B2B9D.mft (raw, json)
Hash identifier:          PMedcJQwbEMVJBZdpR5zMSwze1nhwaaksF5RCq7mF9c=
Subject key identifier:   49:A6:C1:11:38:F3:34:D5:E4:D8:4B:19:F1:A6:82:EF:DB:10:E4:1E
Authority key identifier: 40:E6:E7:B3:6D:B8:DC:92:3A:CF:19:22:0F:07:E1:56:49:6B:2B:9D
Certificate issuer:       /CN=40E6E7B36DB8DC923ACF19220F07E156496B2B9D
Certificate serial:       57431EA52887F6D937AEA3239BE2163BF505F01E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E6E7B36DB8DC923ACF19220F07E156496B2B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/40E6E7B36DB8DC923ACF19220F07E156496B2B9D.mft
Manifest number:          0148
Signing time:             Mon 04 Dec 2023 06:07:42 +0000
Manifest this update:     Mon 04 Dec 2023 06:02:42 +0000
Manifest next update:     Tue 05 Dec 2023 06:57:42 +0000
Files and hashes:         1: 323830343a343063303a3a2f33332d3333203d3e20323635393739.roa (hash: cLJb2JdV4bYXBVLiCa+BqL80AsTigK0wx4AO93cL0dM=)
                          2: 3136342e3136332e3235342e302f32332d3233203d3e20323635393739.roa (hash: 9YAlKMAjfNSRUE7gz5ANc/hP2vbzf3Zv2tvyTVCsB5s=)
                          3: 3136342e3136332e3235322e302f32332d3233203d3e20323635393739.roa (hash: mpblNUxn69ljAz05fn2r83zrJDihqPHYv8WZlF51iLI=)
                          4: 323830343a343063303a383030303a3a2f33332d3333203d3e20323635393739.roa (hash: Xgzv+0YxJB34xkgoneJT0DEf2rfld30c+dyJCGEUrzw=)
                          5: 3136342e3136332e3235322e302f32322d3232203d3e20323635393739.roa (hash: B/nbSGlxwIZ8J2lIRjnfFDRxdoA71lLjAdSdlQHicnw=)
                          6: 323830343a343063303a3a2f33322d3332203d3e20323635393739.roa (hash: IsTyqXKB2YUwB5BijCu4Ob96hoc1mcmmFtZzXwWGFWA=)
                          7: 40E6E7B36DB8DC923ACF19220F07E156496B2B9D.crl (hash: 0qYpVAqiEqNSMwn28c6jqDvGWYdWjP8oGI7y0FWcBwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:43:1e:a5:28:87:f6:d9:37:ae:a3:23:9b:e2:16:3b:f5:05:f0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E6E7B36DB8DC923ACF19220F07E156496B2B9D
        Validity
            Not Before: Dec  4 06:02:42 2023 GMT
            Not After : Dec  5 06:57:42 2023 GMT
        Subject: CN=49A6C11138F334D5E4D84B19F1A682EFDB10E41E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:72:ed:ac:82:65:6f:bd:bc:ab:27:08:aa:
                    ec:56:b4:f0:75:af:7a:cf:78:c1:8d:a6:38:16:12:
                    bb:01:fb:80:a9:97:5b:63:f3:0e:8a:36:07:f3:13:
                    f5:b5:e9:10:81:3e:f0:84:37:db:2e:b5:d6:74:3d:
                    2b:5b:ec:90:b2:f4:87:72:d6:d5:24:5f:8e:56:b8:
                    2e:39:85:42:27:ce:b5:20:2c:2a:ab:45:55:ca:30:
                    2a:a7:ec:d6:bf:b8:7a:1f:b4:44:57:46:4c:ef:7a:
                    f3:c5:2d:2b:ff:00:56:e9:13:03:4a:45:77:61:86:
                    83:d1:1d:8c:5c:1c:29:a4:4d:4d:d5:25:e9:31:b7:
                    59:2f:52:41:cb:d1:94:36:9e:c6:a1:95:46:ca:a0:
                    0d:56:0d:07:12:69:bd:e2:95:21:49:fc:e0:e2:18:
                    74:cb:8f:fd:f3:fd:f2:d7:1e:a2:cf:71:4a:9d:dc:
                    de:68:ab:50:90:8b:14:8b:60:cc:7e:c9:2a:1d:92:
                    be:69:48:2b:f8:d4:8b:8c:99:eb:a6:de:01:23:b3:
                    87:4b:86:04:7e:54:82:6d:b2:ed:98:6d:0d:bf:7c:
                    15:5d:ca:09:9d:b1:1e:fc:e3:5d:85:d9:82:8a:ca:
                    d5:00:8a:2a:7b:ea:f0:8e:23:90:c6:b0:61:12:1c:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A6:C1:11:38:F3:34:D5:E4:D8:4B:19:F1:A6:82:EF:DB:10:E4:1E
            X509v3 Authority Key Identifier:
                keyid:40:E6:E7:B3:6D:B8:DC:92:3A:CF:19:22:0F:07:E1:56:49:6B:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/40E6E7B36DB8DC923ACF19220F07E156496B2B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E6E7B36DB8DC923ACF19220F07E156496B2B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/40E6E7B36DB8DC923ACF19220F07E156496B2B9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e6:07:72:ef:27:49:2c:62:75:32:da:04:0f:f2:e3:f5:da:
         6e:52:fc:8b:22:2f:35:9b:5c:b2:54:d5:2a:02:2a:5d:71:9e:
         6f:33:d7:6e:87:35:6b:6c:ae:9e:47:80:c4:5d:34:e9:16:06:
         ad:76:af:b5:69:4e:50:f1:70:aa:8b:d4:65:0a:fe:df:46:e9:
         6a:6b:7b:66:03:b1:ca:d0:ba:90:0c:93:8f:14:11:9e:16:1d:
         11:1a:1c:0b:60:54:79:3d:f0:93:e1:03:63:6b:1e:68:be:14:
         27:b0:9f:7c:06:63:86:f4:9a:ae:9c:45:19:64:41:34:f6:a8:
         31:d8:73:46:6e:f1:06:5e:b1:08:a6:e3:d0:ff:99:77:d8:1f:
         22:cd:6b:38:ec:cb:13:ab:82:fe:74:ea:03:ba:46:85:92:64:
         68:e3:12:6f:46:9c:0f:72:44:1e:89:3d:88:06:ca:64:fc:40:
         20:f8:e9:f7:3b:90:05:fd:4f:a3:6d:c6:c7:56:b6:bd:a2:98:
         80:7d:a8:51:6d:12:4e:e1:1a:12:36:6a:b4:2e:52:31:40:60:
         1e:90:be:58:07:90:ec:e4:d3:8c:0f:68:d3:fd:8c:6c:05:1c:
         da:a9:39:91:ab:80:3d:ad:b9:c3:0a:e3:9f:5c:41:22:5c:c4:
         c9:65:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org