Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.mft
File:                     A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.mft (raw, json)
Hash identifier:          syikvo54/KbzKuq0JdNrL6W9fShi9H0jUHUib5tTDtU=
Subject key identifier:   11:65:E8:D9:E9:35:43:17:F9:28:6F:F3:49:A0:10:F7:27:CF:01:A4
Authority key identifier: A1:F4:39:13:0C:25:78:4C:90:BE:BE:0E:BF:DB:30:B1:57:B8:FB:DE
Certificate issuer:       /CN=A1F439130C25784C90BEBE0EBFDB30B157B8FBDE
Certificate serial:       4AB58C0D27AA41D5462020F0C669F9CCAEFD6049
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.mft
Manifest number:          02A5
Signing time:             Mon 04 Dec 2023 14:11:29 +0000
Manifest this update:     Mon 04 Dec 2023 14:06:29 +0000
Manifest next update:     Tue 05 Dec 2023 15:12:29 +0000
Files and hashes:         1: 3133382e39372e39362e302f32332d3233203d3e20323634313337.roa (hash: vWeyACD2QCrSnZe5R/H8GbDbkQtVrGxlcKmUtNNiYyw=)
                          2: 3137302e302e3232312e302f32342d3234203d3e20323634313337.roa (hash: n/0Nxvr2NJ/UsNt7kWop/wB7gNybQgr8YtPdtWTk8F8=)
                          3: 323830343a323330343a3a2f33322d3332203d3e20323634313337.roa (hash: F6bl4rXofSsFO3xzZPuinSfhxZElcUgMCFv0Q9jcHS8=)
                          4: 3137302e302e3232302e302f32342d3234203d3e20323634313337.roa (hash: 5QiTgu2cyvC4zsUey44pQ7Asyt9g2ZAq3uLO9qDfgjc=)
                          5: 3133382e39372e39362e302f32342d3234203d3e20323634313337.roa (hash: HcHQl72Wko0H/79ZbJX+/7Rx3UWzJnxYL6HY/MfUdTk=)
                          6: A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.crl (hash: Om0FAprWwMrj2dieLY+hi2a0m3uANoGUEYpdS4sFP0I=)
                          7: 323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa (hash: TM2OL8DiHM9cuiwMkNyd/HUwKf3k3ykzaqK8jfQm+CA=)
                          8: 3133382e39372e39362e302f32322d3232203d3e20323634313337.roa (hash: xRwYhk6n9SoWJYKIW8ZA658X3y9WFMrYgg0AZ5FEzhU=)
                          9: 3137302e302e3232322e302f32332d3233203d3e20323634313337.roa (hash: KZHngmXZBPrHUG6wStQo0zFdEbV1qXtQ6Ad9XFLnHtM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b5:8c:0d:27:aa:41:d5:46:20:20:f0:c6:69:f9:cc:ae:fd:60:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F439130C25784C90BEBE0EBFDB30B157B8FBDE
        Validity
            Not Before: Dec  4 14:06:29 2023 GMT
            Not After : Dec  5 15:12:29 2023 GMT
        Subject: CN=1165E8D9E9354317F9286FF349A010F727CF01A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:7d:b3:b1:f9:e7:74:45:ae:e0:ab:8e:38:
                    0f:43:bf:12:35:dd:00:1b:f2:5b:ee:f1:a2:2b:16:
                    e5:32:5a:34:be:a7:97:e1:ae:57:02:dc:22:64:e3:
                    6f:c2:01:f3:66:0a:f2:f9:4d:a0:5e:a4:81:7b:89:
                    7b:d6:77:2e:c5:25:fa:22:3a:47:2e:3f:3c:d6:34:
                    15:dc:23:b8:a7:76:35:1a:02:b6:14:69:28:f7:61:
                    56:ce:cf:71:f2:2b:35:84:b1:92:d6:ef:74:5e:78:
                    5e:fc:4d:57:9b:81:d3:22:d9:06:5b:0a:85:6a:b0:
                    aa:3c:b3:b3:d9:58:90:88:57:7a:8f:67:bf:ad:66:
                    df:c7:6e:56:a4:60:50:4d:69:bd:4b:7b:ac:23:97:
                    ad:85:82:d8:7f:e9:5c:93:38:50:2c:32:78:d9:98:
                    9f:eb:a4:f7:d2:7c:a4:02:40:cb:19:39:fc:95:5e:
                    75:2c:dd:13:d3:98:1f:db:14:62:d2:25:49:d4:f9:
                    5e:10:bf:18:d9:99:ea:cf:2a:22:c6:fa:e1:c0:e1:
                    bf:2b:38:39:25:19:db:c8:45:bf:3e:94:5d:d0:cb:
                    21:5b:24:8f:cd:30:51:77:b4:0e:28:ab:bb:9b:0a:
                    5f:d0:77:53:d6:2a:47:c9:59:e6:d6:d4:5a:db:ba:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:65:E8:D9:E9:35:43:17:F9:28:6F:F3:49:A0:10:F7:27:CF:01:A4
            X509v3 Authority Key Identifier:
                keyid:A1:F4:39:13:0C:25:78:4C:90:BE:BE:0E:BF:DB:30:B1:57:B8:FB:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/A1F439130C25784C90BEBE0EBFDB30B157B8FBDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:20:f4:1b:af:8c:74:87:ef:d4:d4:4b:7e:ab:1c:4c:71:
         b8:8e:5a:25:48:4e:f6:23:fe:42:ab:da:8f:9c:b5:d6:07:f9:
         bf:13:a3:51:c4:f5:08:22:b7:ed:a4:a8:62:76:2e:f7:67:c9:
         35:13:83:db:8d:bf:c0:63:69:56:ac:e4:12:31:76:d8:7e:13:
         83:da:2c:3f:f7:5a:08:16:aa:87:bf:9e:c6:6c:03:89:5e:cc:
         c3:6d:9d:bd:6e:5f:3f:87:76:a0:23:7e:ba:ff:36:76:fe:8f:
         3b:e3:1f:0f:29:45:64:22:f3:92:91:1d:fd:b3:f5:73:12:bc:
         8f:a7:33:13:c8:78:72:1b:4c:c5:da:76:76:c8:50:15:75:43:
         2a:41:b8:9c:85:77:aa:1f:4d:ba:31:0c:b9:df:e6:5c:31:ca:
         a7:89:e7:38:14:91:13:f6:53:f8:e8:8b:05:68:ad:04:cf:64:
         f3:8f:0e:b7:62:81:69:8a:53:5b:0b:47:8c:8c:82:46:06:03:
         4b:ac:60:cd:50:80:5d:68:7b:42:ea:91:6f:f5:80:cf:83:49:
         62:3f:3e:14:a7:cb:2b:5a:01:02:ae:b4:18:5b:54:ad:0a:ac:
         23:19:18:2d:46:74:e0:67:d8:04:d5:fe:de:a0:2f:be:45:40:
         eb:0c:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org