Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11.mft
File:                     BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11.mft (raw, json)
Hash identifier:          QjfKpv5nxcS+ZyD8MH1Miw4ebj8/4svvGX1Z9IVsZcs=
Subject key identifier:   C2:95:51:FD:BF:95:88:50:A5:53:5F:DD:98:B1:29:85:88:4D:91:11
Authority key identifier: BA:EF:18:D6:53:E0:C3:B6:7A:40:FB:73:EE:6E:90:73:E6:8C:7C:11
Certificate issuer:       /CN=BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11
Certificate serial:       44493F3DCEFA0775DDDBD788B8C9EF0FF2D4EE26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11.mft
Manifest number:          0138
Signing time:             Fri 05 Jan 2024 04:25:49 +0000
Manifest this update:     Fri 05 Jan 2024 04:20:49 +0000
Manifest next update:     Sat 06 Jan 2024 05:10:49 +0000
Files and hashes:         1: 34352e362e3234302e302f32322d3234203d3e20323634333836.roa (hash: ZcHF0tNkDpwA29kmWN4p5kY9ZaxmPo6gv1UIzkeaias=)
                          2: 3136382e3139372e38302e302f32322d3234203d3e20323634333836.roa (hash: EnucOyxCYII0qHSPr6X9VpoKSr2avtFmtquAeg79plE=)
                          3: BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11.crl (hash: b8ra+S9eZ9oHN8Pn7qwYItn2iRkWJ+B8xueuCKsuIi4=)
                          4: 3133312e3130382e3137322e302f32322d3234203d3e20323634333836.roa (hash: mcaZ3VImPKBMDtoSWjpsNd07madwn6Lm4XyimxptJTQ=)
                          5: 323830343a316462303a3a2f33322d3438203d3e20323634333836.roa (hash: me3G8B0N50q4EIJKC+/95EWPBq9guBm32nKKbwDB19M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:49:3f:3d:ce:fa:07:75:dd:db:d7:88:b8:c9:ef:0f:f2:d4:ee:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11
        Validity
            Not Before: Jan  5 04:20:49 2024 GMT
            Not After : Jan  6 05:10:49 2024 GMT
        Subject: CN=C29551FDBF958850A5535FDD98B12985884D9111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:39:ea:e7:44:32:a7:3d:d8:74:93:de:38:
                    92:23:78:2a:9d:ca:91:ba:0c:d2:3f:b0:78:1e:36:
                    d2:0a:75:c4:87:3b:65:ec:cc:98:71:b1:8f:b4:bf:
                    70:d6:2d:41:d3:a7:c2:05:e0:09:9b:27:7b:2f:ff:
                    ae:bd:17:45:1f:83:ff:55:e3:69:76:c4:e3:23:43:
                    f2:c8:8a:32:6a:4b:a2:56:00:8e:0c:ab:6d:4f:76:
                    b4:df:ca:25:a3:cf:c3:bf:d9:6c:79:2f:fc:65:49:
                    16:72:b1:7b:65:4e:33:af:7c:6b:85:ae:79:d7:57:
                    79:3c:59:61:7e:f9:33:21:9d:d2:f3:3d:9d:5f:c0:
                    2f:5a:7f:a0:8d:97:f2:ac:3d:ec:40:f0:c2:67:d2:
                    f5:e0:39:de:c0:b0:d9:70:7a:c4:63:dc:93:b9:70:
                    4a:49:89:2d:70:74:77:9d:08:23:b9:7c:c8:57:db:
                    f9:c6:d7:7b:b4:dd:30:43:16:39:da:71:86:85:8d:
                    97:3c:10:71:d9:97:05:8e:d7:a2:bd:27:e8:2b:13:
                    1b:5e:94:b5:02:00:79:d4:9e:44:7e:9d:e0:db:e0:
                    3d:2f:9e:59:b5:34:ff:96:60:19:79:94:b0:57:d2:
                    d4:28:f5:89:3c:97:12:ef:37:9e:4f:a4:01:4f:c5:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:95:51:FD:BF:95:88:50:A5:53:5F:DD:98:B1:29:85:88:4D:91:11
            X509v3 Authority Key Identifier:
                keyid:BA:EF:18:D6:53:E0:C3:B6:7A:40:FB:73:EE:6E:90:73:E6:8C:7C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/BAEF18D653E0C3B67A40FB73EE6E9073E68C7C11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:0e:81:26:20:d5:b8:81:76:56:8a:86:dd:e8:fd:57:66:
         79:9b:2e:ec:6e:4c:8c:32:83:75:4c:30:d3:46:f6:28:a8:de:
         f9:07:3a:b1:e5:5f:50:7e:a9:49:98:02:39:09:1b:20:be:0e:
         60:a7:86:9d:bb:67:67:8e:cc:9f:b8:1b:43:80:75:c8:97:e5:
         3d:c9:c8:53:64:a5:3e:23:0e:35:e9:21:d6:00:98:5c:aa:36:
         da:9a:41:b6:4a:03:e1:5b:54:3c:86:d1:bd:d5:6c:25:bb:8d:
         84:7e:ee:cf:27:64:1f:82:b1:d7:8d:fe:1f:d2:3d:97:9b:22:
         c4:90:59:d0:9c:dc:a5:13:c4:05:7a:d6:6c:e8:6e:1f:15:af:
         df:f5:27:f3:0c:9a:2e:68:de:a0:53:69:b1:3e:56:45:a5:80:
         35:6c:2a:49:a7:13:1c:96:5d:cf:73:3a:9b:48:ba:60:50:2c:
         c7:89:ad:31:36:83:ba:2d:6a:81:f8:33:72:74:7c:2b:02:11:
         1f:fd:cc:c7:ed:e4:d5:90:e4:8c:ec:46:f6:f0:e0:62:ba:79:
         2d:16:80:c9:a9:42:08:54:d2:47:2c:ab:9f:60:72:78:75:d5:
         7c:b4:e7:1d:40:8c:9d:dd:ca:08:0a:63:11:6d:f9:4c:e6:94:
         15:f5:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org