Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.mft
File:                     17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.mft (raw, json)
Hash identifier:          mtym1ZcV9Bp7qnTBrB4eNvVSVhwpEN7FxLfiLU2gxG4=
Subject key identifier:   60:98:FD:71:FD:DB:0C:08:FE:E2:48:3B:E3:73:94:12:AC:F1:16:B0
Authority key identifier: 17:AA:76:BA:7A:1A:D6:7A:50:01:A6:D4:2C:CE:A5:33:CB:30:F0:E4
Certificate issuer:       /CN=17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4
Certificate serial:       15C55040E554422ECD938F3027B76BFC5E0B19B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.mft
Manifest number:          3C
Signing time:             Tue 20 Aug 2024 02:48:22 +0000
Manifest this update:     Tue 20 Aug 2024 02:43:22 +0000
Manifest next update:     Wed 21 Aug 2024 05:30:22 +0000
Files and hashes:         1: 17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.crl (hash: GIhPdYbYMJWwwwFMpejfWz/l6IGx//nzs6Rzd7PbqXI=)
                          2: 323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa (hash: Dy4cvsepVbZyIlTTyQgkKn2ItamYZq0GjOH6+Q3xXEA=)
                          3: 323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa (hash: xuWX3uxvYyJ0NhIX/oAJqDCF6iZpp8hbHvfP8cDxT4U=)
                          4: 323830343a323539633a3a2f33322d3332203d3e203532373732.roa (hash: GImsEDUm+DhZ6FDT9IwGVbZG9GnOfeamDYgJm1OFSMg=)
                          5: 3137372e33392e3135362e302f32322d3234203d3e203532373732.roa (hash: baHWVG/mZmchWBZefpl7EO3d3Uhj83J8T+dZGJ9+4yY=)
                          6: 323830343a323539633a3a2f33332d3333203d3e203532373732.roa (hash: 0mgEvrrmEG/+iSf/OByXG+TnB3V5XBFk6v/yGNwTu6A=)
                          7: 323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa (hash: 4Jxq2qUQ3TI66BEVUWOgr/X9uNT6dn15XCFZG93pWr4=)
                          8: 323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa (hash: oY2SLZIKqZI9VMgTS0Ti1aEGcSFC1+fV/riI/0Xqu54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c5:50:40:e5:54:42:2e:cd:93:8f:30:27:b7:6b:fc:5e:0b:19:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4
        Validity
            Not Before: Aug 20 02:43:22 2024 GMT
            Not After : Aug 21 05:30:22 2024 GMT
        Subject: CN=6098FD71FDDB0C08FEE2483BE3739412ACF116B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:e4:7f:f2:6a:9e:58:6e:cb:8d:02:20:fd:
                    33:73:55:82:dd:53:75:85:d4:6b:b5:1a:8d:29:67:
                    f7:86:6d:14:d3:5e:15:7d:97:13:7e:db:fe:06:c2:
                    9d:01:ff:9f:20:e5:de:64:51:27:e0:b0:d8:40:45:
                    57:a5:8a:26:7f:8e:af:81:73:4b:1a:7f:16:53:24:
                    e6:5f:1d:61:56:6d:ae:1c:88:c1:57:9d:2e:f0:36:
                    10:e2:95:96:c2:52:97:10:d3:a1:34:c3:2a:1a:ee:
                    b4:b1:c9:cc:02:0a:eb:09:77:a8:ff:a6:af:97:ac:
                    42:6b:f8:50:a7:2e:e4:3d:bb:14:75:86:46:0c:50:
                    e6:7f:e5:88:1c:2f:f9:47:08:d3:72:4b:62:ea:6f:
                    59:f2:70:40:b0:9c:f0:a5:25:59:f6:c9:22:e7:3f:
                    38:48:68:99:14:d7:72:85:ac:d5:78:7c:89:b5:76:
                    02:c0:be:e4:b6:08:cc:11:3a:42:14:04:bd:91:7b:
                    72:c2:ed:ba:2b:f3:80:cb:d9:e8:9d:d8:ac:71:1f:
                    35:62:af:5a:cd:61:e5:8a:db:ae:62:0f:59:7d:f6:
                    dc:2b:5a:8c:42:4e:aa:83:80:c5:84:18:d1:39:0b:
                    69:43:cf:b9:a9:a4:47:46:9d:3a:c1:55:c4:66:f1:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:FD:71:FD:DB:0C:08:FE:E2:48:3B:E3:73:94:12:AC:F1:16:B0
            X509v3 Authority Key Identifier:
                keyid:17:AA:76:BA:7A:1A:D6:7A:50:01:A6:D4:2C:CE:A5:33:CB:30:F0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:51:d0:96:bb:10:84:a8:2b:bc:25:62:9d:0e:0c:bd:66:
         e7:10:4e:65:a2:b5:87:56:1a:93:2f:b7:ae:85:02:11:03:1b:
         08:75:ae:90:59:b3:2e:53:9c:dd:1f:eb:78:17:67:2f:de:e6:
         d6:f2:81:72:61:aa:05:10:5b:dd:77:c7:d2:a0:08:86:95:d7:
         4d:2d:91:f6:48:b4:31:93:b8:74:39:12:bf:eb:30:82:f5:d0:
         99:48:dc:34:10:86:bc:be:c7:6f:4a:5b:3b:6a:db:cf:0e:69:
         e8:c4:3b:a7:e2:fe:bb:d2:b9:c2:c2:70:76:ea:71:fb:33:f7:
         1b:67:1e:53:d1:e0:3c:5f:b2:d0:71:22:73:ec:1e:09:a5:d0:
         b8:b6:ed:c4:5f:02:78:cb:28:ee:fd:a1:09:b0:ce:88:12:32:
         86:ba:2b:38:b4:20:21:c1:be:62:21:11:9c:df:f7:44:c1:56:
         60:23:04:4c:2f:a9:81:7d:ba:df:c2:df:97:c4:53:90:d6:71:
         f7:bc:c8:04:00:e5:a3:e4:2d:99:a3:07:c9:78:07:64:9f:ea:
         97:d6:d8:67:63:53:7f:cc:e2:2b:86:b4:5f:49:3a:f3:c6:1f:
         4c:d6:9a:07:6c:1e:1c:aa:b5:99:84:ea:d0:48:5f:24:78:a2:
         82:d5:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 01:56:14 2024 by rpki-client on console-ams.rpki-client.org