Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/2D8EA39902F4A17533D403493176C4D0DC03805E.mft
File:                     2D8EA39902F4A17533D403493176C4D0DC03805E.mft (raw, json)
Hash identifier:          dnEkWqeP3KeqkAgwITPunmvcyh0Sx6IBSH5FigAihyU=
Subject key identifier:   02:AE:E4:67:09:A1:3C:99:92:E5:AF:E2:7D:1E:FB:D7:14:4F:6A:3C
Authority key identifier: 2D:8E:A3:99:02:F4:A1:75:33:D4:03:49:31:76:C4:D0:DC:03:80:5E
Certificate issuer:       /CN=2D8EA39902F4A17533D403493176C4D0DC03805E
Certificate serial:       66345CF5693325AAA98E953DB09EC1511F77F82B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D8EA39902F4A17533D403493176C4D0DC03805E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/2D8EA39902F4A17533D403493176C4D0DC03805E.mft
Manifest number:          03
Signing time:             Thu 07 Nov 2024 15:26:25 +0000
Manifest this update:     Thu 07 Nov 2024 15:21:25 +0000
Manifest next update:     Fri 08 Nov 2024 16:20:25 +0000
Files and hashes:         1: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: Z9tXVEZwo9iPbpdd1SpDQPQKs3+XwQ+aqlIGV75mwHM=)
                          2: 323830343a366665383a3a2f33322d3438203d3e20323730363932.roa (hash: Rg7XU81W+GOBpxG+sSrLuLZAGAyaSm8PoB6SGkYD/ZI=)
                          3: 2D8EA39902F4A17533D403493176C4D0DC03805E.crl (hash: HvXnQbxG/HSZ+4ssr18sXSTWzVI9HnoJ7OPwURL2v1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:34:5c:f5:69:33:25:aa:a9:8e:95:3d:b0:9e:c1:51:1f:77:f8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8EA39902F4A17533D403493176C4D0DC03805E
        Validity
            Not Before: Nov  7 15:21:25 2024 GMT
            Not After : Nov  8 16:20:25 2024 GMT
        Subject: CN=02AEE46709A13C9992E5AFE27D1EFBD7144F6A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:a6:27:f1:a2:1c:2d:89:a1:33:38:63:e6:
                    b2:43:f6:c9:e2:74:d7:e4:35:27:a0:36:b3:81:86:
                    e4:3e:3b:c9:ff:df:cc:29:e9:5a:5c:5b:8c:00:65:
                    c4:43:de:91:87:45:99:a5:b2:2f:90:cf:c9:9b:f0:
                    2a:0e:bc:49:9b:85:6e:97:7b:94:30:f6:3f:45:05:
                    41:46:40:e3:e9:d0:31:8f:81:5b:89:c2:97:73:b4:
                    32:67:f3:a2:12:26:05:3b:e9:9f:7f:f6:dc:40:3a:
                    47:4a:89:93:1d:94:7d:0e:4a:d9:7c:a1:a0:18:92:
                    92:3d:fd:b0:40:6e:61:7c:bc:95:d0:55:1d:d9:b5:
                    cb:80:25:5b:87:62:60:03:ae:16:f1:f2:52:7e:41:
                    66:32:78:ec:12:7a:d6:84:1e:10:f0:55:09:bd:e2:
                    3a:4c:17:63:a9:d6:d2:75:8c:fb:cd:92:a4:cb:02:
                    3a:6c:b1:f9:49:1d:cb:35:36:17:5b:1e:2d:cf:ed:
                    34:fd:74:3b:66:e2:f3:46:c1:b2:bf:96:39:2c:57:
                    cf:04:7c:b9:c4:36:79:65:95:40:4b:d6:84:55:da:
                    cd:28:f5:29:22:a5:ad:47:12:00:a7:a2:4a:a3:95:
                    15:6e:08:84:4a:af:c0:25:e6:f8:3c:61:0f:b0:a8:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AE:E4:67:09:A1:3C:99:92:E5:AF:E2:7D:1E:FB:D7:14:4F:6A:3C
            X509v3 Authority Key Identifier:
                keyid:2D:8E:A3:99:02:F4:A1:75:33:D4:03:49:31:76:C4:D0:DC:03:80:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/2D8EA39902F4A17533D403493176C4D0DC03805E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D8EA39902F4A17533D403493176C4D0DC03805E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/2D8EA39902F4A17533D403493176C4D0DC03805E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:5a:37:7c:a7:cf:5a:59:63:80:46:09:0b:06:73:47:c6:50:
         3a:40:c9:4c:88:a8:12:e9:f5:34:eb:ef:42:76:4e:f0:13:04:
         32:9b:40:f5:20:da:ab:a3:8f:0f:83:82:fc:7a:57:d3:e0:4e:
         85:b0:1f:53:58:14:5d:2b:6c:58:50:3b:72:bb:d1:9a:00:12:
         1a:f2:d4:d5:68:21:52:0c:fe:6a:d5:59:da:e0:7f:57:7a:36:
         a8:81:1c:6f:89:d0:43:f5:5d:6c:84:8b:ce:d6:90:81:4d:4f:
         06:15:c6:8e:82:78:62:73:29:cc:f8:18:16:83:52:df:c1:e1:
         73:db:d5:d4:a8:be:4c:32:82:74:d8:a9:4f:28:c7:19:47:fb:
         e5:1e:c9:da:cf:4f:f1:23:5c:af:68:6e:c4:61:53:82:79:27:
         a9:5d:ae:4b:30:e5:0c:1b:9e:1b:c7:a1:bb:4b:6b:c6:1e:ce:
         9b:eb:d3:eb:13:b6:c4:33:42:5b:ed:96:70:58:bc:73:bc:42:
         fe:29:04:a5:03:53:38:b4:ae:53:33:15:b1:db:a4:10:01:0d:
         0d:38:ba:67:90:41:67:c3:43:51:9b:8c:d5:5f:6b:d7:96:01:
         dc:a4:61:22:ee:9f:db:68:2a:db:e9:ad:05:5a:d7:67:d1:af:
         77:1d:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:25 2024 by rpki-client on console-ams.rpki-client.org