Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/42E7B8402497209B0548BF0E377CC2B4F498FD99.mft
File:                     42E7B8402497209B0548BF0E377CC2B4F498FD99.mft (raw, json)
Hash identifier:          SV3tg0ELl6mqcMMfp9v4hW9EHXCI5BcDiT0pFCZw3X4=
Subject key identifier:   7D:C6:9E:B8:87:63:9E:44:02:11:DC:F8:FC:9A:C9:8A:58:B5:5D:90
Authority key identifier: 42:E7:B8:40:24:97:20:9B:05:48:BF:0E:37:7C:C2:B4:F4:98:FD:99
Certificate issuer:       /CN=42E7B8402497209B0548BF0E377CC2B4F498FD99
Certificate serial:       614680F22B72662DFEBD6799BF7AB1BD2685C4F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42E7B8402497209B0548BF0E377CC2B4F498FD99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/42E7B8402497209B0548BF0E377CC2B4F498FD99.mft
Manifest number:          1F
Signing time:             Thu 15 Feb 2024 17:53:32 +0000
Manifest this update:     Thu 15 Feb 2024 17:48:32 +0000
Manifest next update:     Fri 16 Feb 2024 19:23:32 +0000
Files and hashes:         1: 323830343a3434383a3a2f33322d3438203d3e20323632343237.roa (hash: gcmEsQOvztQYKM8GSfJBLd/6mS0pEzqzbAQDpCIHhwk=)
                          2: 42E7B8402497209B0548BF0E377CC2B4F498FD99.crl (hash: YCJM00HNh+IdUBTxaD46tSrd8OHAgApesLJkQI2Z/Jg=)
                          3: 3133382e39392e34382e302f32322d3234203d3e20323632343237.roa (hash: VDecB8Gwt0qJYvHuD90/iox7QLyeacZCvTbkDbl9iWI=)
                          4: 3137372e33392e3134342e302f32312d3234203d3e20323632343237.roa (hash: Xm8+JC0oUNezQgbenqxc4aM5MqLH2dgylflN8ylE2k4=)
                          5: 3136382e3232382e3137322e302f32322d3234203d3e20323632343237.roa (hash: TeMaKgnmhMV5dpVnaYL9J0gEz62IQhQzColjY92XcF0=)
                          6: 3134332e3230322e32382e302f32322d3234203d3e20323632343237.roa (hash: Q7/9aL22IFxoXGT9t2mRrgtMVtiiKM8hVlyVs4FBtoM=)
                          7: 3137372e37312e32342e302f32312d3234203d3e20323632343237.roa (hash: 8DAbzr9D21TH/WtsMkv+SZXGucO0I4Vgj/f15eU+m3Q=)
                          8: 3137372e33392e3135322e302f32322d3234203d3e20323632343237.roa (hash: SSEyzY958aTgdVChuD5PFYq+BXc7XjhYZ/u+paGM8C0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:46:80:f2:2b:72:66:2d:fe:bd:67:99:bf:7a:b1:bd:26:85:c4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E7B8402497209B0548BF0E377CC2B4F498FD99
        Validity
            Not Before: Feb 15 17:48:32 2024 GMT
            Not After : Feb 16 19:23:32 2024 GMT
        Subject: CN=7DC69EB887639E440211DCF8FC9AC98A58B55D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:b7:ca:b0:f2:1f:b0:5c:4b:0e:25:22:9a:
                    20:f1:23:e2:fe:05:22:c5:87:c9:67:07:a0:a9:96:
                    cc:f9:76:fc:91:30:6c:8f:e5:f1:f4:3b:8d:7b:88:
                    14:99:27:72:84:11:35:be:71:50:8e:29:d2:fc:e1:
                    e0:9d:bd:7b:ad:8c:d9:8a:d6:c8:97:2f:25:a4:bd:
                    fe:4c:69:56:9c:8c:89:a3:bb:70:a2:f3:bb:05:d8:
                    a0:22:57:02:ed:61:ad:c3:2b:38:df:ff:ec:33:da:
                    97:39:d8:c2:62:15:3c:3a:79:9d:dc:b4:d8:0a:f5:
                    61:7a:9c:8c:41:5a:32:88:cc:ea:b6:f4:cb:65:91:
                    ea:6a:1a:21:de:f6:95:7a:45:1a:74:7d:8d:b2:07:
                    84:3e:a1:1f:0d:94:97:09:08:ac:71:7d:20:c8:8f:
                    39:e5:13:69:31:8f:0e:4a:4e:24:a1:17:6f:23:c4:
                    0f:c2:c9:5b:7e:c1:81:46:d7:d0:d4:11:da:ec:b7:
                    12:58:d7:0b:14:95:83:57:16:86:72:62:f2:4b:a2:
                    00:50:27:ac:71:f6:00:0d:ba:ce:e1:25:e3:75:d6:
                    5a:0a:a3:65:05:85:ee:3f:4e:18:ba:07:35:dc:5a:
                    e2:91:c6:04:fc:1a:6e:5d:b0:d0:6a:4c:eb:c7:37:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C6:9E:B8:87:63:9E:44:02:11:DC:F8:FC:9A:C9:8A:58:B5:5D:90
            X509v3 Authority Key Identifier:
                keyid:42:E7:B8:40:24:97:20:9B:05:48:BF:0E:37:7C:C2:B4:F4:98:FD:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/42E7B8402497209B0548BF0E377CC2B4F498FD99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42E7B8402497209B0548BF0E377CC2B4F498FD99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/42E7B8402497209B0548BF0E377CC2B4F498FD99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:ec:cd:e7:20:9a:85:9a:9f:1f:5f:52:d1:ee:7a:28:4b:
         be:20:b0:d8:d8:4a:fd:84:e9:a7:a3:d7:87:a0:e3:b3:d2:b6:
         bc:30:3d:0e:00:24:2b:c0:29:65:8c:e7:37:8f:69:bd:df:43:
         29:0d:87:b6:2d:d1:f8:92:27:38:2c:1a:85:1b:f5:d4:a0:4c:
         95:a4:08:66:c1:b8:27:14:38:19:24:fe:8b:90:c8:2c:eb:03:
         28:d2:46:d8:26:0b:95:09:a7:ab:b5:1d:a4:01:91:fe:44:2c:
         17:75:cd:4d:e8:e5:ec:f2:b6:c9:23:ef:8a:ff:02:ef:de:73:
         57:09:93:e5:c4:06:b4:29:06:c2:db:f9:5e:c5:55:9d:fa:5e:
         1e:d9:69:3f:e1:59:d3:ed:36:8e:60:e9:21:60:2a:d4:72:0c:
         5d:44:ef:75:e9:2e:ae:35:e7:ff:7c:00:a9:35:40:68:7a:22:
         bc:b4:2f:2a:04:b8:c2:06:15:93:da:c0:82:2a:6f:ac:97:dd:
         9a:c5:fc:c0:89:d2:86:f5:39:44:a0:d1:fa:fa:18:f4:39:b8:
         a5:db:bb:95:c4:b9:87:c7:91:cd:ec:3c:3f:45:a1:96:89:d7:
         a7:06:80:db:d2:72:99:12:cf:56:fd:07:b4:9a:03:fb:e2:ca:
         0e:28:65:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org