Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.mft
File:                     098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.mft (raw, json)
Hash identifier:          U6lLcQ3wl+86My3GZIjW4DEa6GmA4/phHQ68Sc2lLIk=
Subject key identifier:   6B:75:3A:A5:08:24:2A:29:37:37:BC:D5:FC:2A:F9:64:5E:30:D0:35
Authority key identifier: 09:8C:CB:C6:E2:B1:AF:60:6C:70:E5:B3:4D:7A:0A:06:EC:1C:13:12
Certificate issuer:       /CN=098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312
Certificate serial:       2872518CB0D48F30E7DFA90AE05BFAB0E589B14C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.mft
Manifest number:          22
Signing time:             Sun 28 Jan 2024 14:57:20 +0000
Manifest this update:     Sun 28 Jan 2024 14:52:20 +0000
Manifest next update:     Mon 29 Jan 2024 15:48:20 +0000
Files and hashes:         1: 323830343a3434383a3a2f33322d3438203d3e20323632343237.roa (hash: UV5ZPw4r9I8pNpYMcywC+0T3H81yJ6E9gQbLR6X9bgU=)
                          2: 3136382e3232382e3137322e302f32322d3234203d3e20323632343237.roa (hash: x63GYcXr+YE3Le7+cMbf/hYO+kcybAnLRqoFsMyLauw=)
                          3: 3137372e33392e3134342e302f32312d3234203d3e20323632343237.roa (hash: ptx42aFJemgxZs/+WohuYto8FztKnTewHq/YwEU30Ps=)
                          4: 3137372e33392e3135322e302f32322d3234203d3e20323632343237.roa (hash: 2wKPiSMNGLIGkLmXKV1v5QR8SuJJuZLH1ls/N4p6a70=)
                          5: 3137372e37312e32342e302f32312d3234203d3e20323632343237.roa (hash: 0c++BKWeLa+MYfcq0R2EC5s4CrxcI3amJtFJrtPVdsM=)
                          6: 3133382e39392e34382e302f32322d3234203d3e20323632343237.roa (hash: UiPpNYjJ46e15ToKjgJ4fB1CZM7yjoCgcv5xoe0dW4Y=)
                          7: 098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.crl (hash: WaULxtl78bGZPOjTQ20BaNUb2GmWYzOLgvBmnMbfLM0=)
                          8: 3134332e3230322e32382e302f32322d3234203d3e20323632343237.roa (hash: yh+w70Gzs1WwGiCf/kIOI9TckPBvgkixLv3gulKhtbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:72:51:8c:b0:d4:8f:30:e7:df:a9:0a:e0:5b:fa:b0:e5:89:b1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312
        Validity
            Not Before: Jan 28 14:52:20 2024 GMT
            Not After : Jan 29 15:48:20 2024 GMT
        Subject: CN=6B753AA508242A293737BCD5FC2AF9645E30D035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:ac:6e:d0:fa:7b:45:70:e1:63:bc:67:90:
                    f1:86:59:d0:2a:e2:30:d3:bd:53:5f:7f:b8:db:5a:
                    71:e9:a5:96:42:89:52:aa:4b:69:ce:9f:0a:a7:c1:
                    65:43:7e:ef:d1:30:f7:e4:a0:26:bf:64:82:b5:87:
                    c2:58:76:44:70:a2:cd:18:7b:27:5f:7c:a6:30:86:
                    54:48:4b:81:31:d3:53:4a:cc:3f:be:a3:d3:0e:f8:
                    2b:ec:57:c1:1b:0a:2d:bc:4a:cb:f9:6b:08:01:ce:
                    8a:cc:22:60:3b:83:d4:2b:fe:0b:15:4a:51:8b:fa:
                    98:00:cf:7c:cc:2f:cf:06:77:dd:27:5d:a6:1e:f3:
                    0a:82:84:60:26:80:fa:f3:3b:33:25:89:85:64:26:
                    47:6a:0d:a5:5c:90:6b:b9:5b:e3:85:98:66:5d:28:
                    ef:dc:6a:ed:3f:78:9c:db:27:03:fe:f9:a5:97:18:
                    18:86:a3:bd:3b:2a:05:f5:ea:9e:fd:46:bf:83:5e:
                    81:b1:74:01:1a:e3:c7:12:6a:08:77:44:99:85:57:
                    43:4e:31:bc:79:81:f7:be:21:dc:2a:b8:f3:45:5f:
                    6d:b7:34:a1:81:64:aa:3d:46:c2:0b:dc:1a:0d:7b:
                    36:f4:a4:d8:fb:05:93:6f:28:1f:02:1b:3a:65:b7:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:75:3A:A5:08:24:2A:29:37:37:BC:D5:FC:2A:F9:64:5E:30:D0:35
            X509v3 Authority Key Identifier:
                keyid:09:8C:CB:C6:E2:B1:AF:60:6C:70:E5:B3:4D:7A:0A:06:EC:1C:13:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:80:05:3d:a7:be:64:9f:29:37:20:e3:a9:bc:0d:37:19:66:
         e8:8a:68:04:86:a4:43:1e:3a:06:16:a6:b9:b9:f7:89:0f:6b:
         bb:d6:d8:1c:05:3f:29:cf:fa:49:b1:51:0e:98:20:96:f5:88:
         f6:f3:b5:b9:f6:ea:52:e8:14:9f:c1:34:65:7b:aa:63:9e:bf:
         44:31:fb:51:22:48:4d:2c:d7:66:99:b3:8f:52:71:8e:7f:7b:
         7d:46:64:06:19:d5:70:3d:45:c5:13:5d:d5:8f:5f:a9:6d:2e:
         1f:6e:3b:2d:95:f0:0c:38:be:30:62:0c:e9:5f:43:3d:03:96:
         db:03:62:da:cd:ec:48:55:8b:a2:32:44:4f:6a:a3:dc:38:92:
         b1:42:09:93:01:39:d8:43:36:35:c0:c6:7c:d4:9a:00:57:98:
         61:7e:ab:ce:20:4d:53:3f:fb:4f:fe:b3:1a:75:1f:ea:97:af:
         f4:21:03:79:34:c6:8c:cd:bc:14:cb:44:88:a4:f0:f6:02:5e:
         de:aa:a4:66:7e:e5:30:b5:9d:26:34:19:4c:c0:9f:ee:ba:af:
         54:b0:31:33:a0:a7:8c:f0:25:b8:7b:95:5f:8b:97:93:b1:bb:
         80:c6:95:c8:db:08:16:a5:24:e1:29:bc:95:f7:98:34:d6:fb:
         00:26:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org