Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dgqbbj1TFCmGXPTeU8nfuN6iSkwLkHYjdrVWpM6fHeRt/0/28B1145835559C99231C2C909D01409CF3D71842.mft
File:                     28B1145835559C99231C2C909D01409CF3D71842.mft (raw, json)
Hash identifier:          ZaOCE4omvaiQoNKrZvvZTUVPxP9FlNl+Va2Vigdh+L0=
Subject key identifier:   B4:0C:0B:FC:E2:11:64:89:2A:6F:D9:9C:96:59:BA:28:16:ED:4A:06
Authority key identifier: 28:B1:14:58:35:55:9C:99:23:1C:2C:90:9D:01:40:9C:F3:D7:18:42
Certificate issuer:       /CN=28B1145835559C99231C2C909D01409CF3D71842
Certificate serial:       62A2FBDF675B0EB66A8B178E517467CB3157B6C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28B1145835559C99231C2C909D01409CF3D71842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dgqbbj1TFCmGXPTeU8nfuN6iSkwLkHYjdrVWpM6fHeRt/0/28B1145835559C99231C2C909D01409CF3D71842.mft
Manifest number:          04CC
Signing time:             Tue 05 Sep 2023 09:47:55 +0000
Manifest this update:     Tue 05 Sep 2023 09:42:55 +0000
Manifest next update:     Wed 06 Sep 2023 10:15:55 +0000
Files and hashes:         1: 323830343a376234343a3a2f33322d3332203d3e20323731343231.roa (hash: mgkrWd6XjJj1OgZcYvQpq0AQW1tCT/Jw7XtcDkNuN2M=)
                          2: 28B1145835559C99231C2C909D01409CF3D71842.crl (hash: b1K9QnQGUqRYJAZO7gqaAd3/kr8zriQbjZ6AGLFzf/M=)
                          3: 3133322e3235352e3232302e302f32322d3232203d3e20323731343231.roa (hash: aWwnigWtQFc0PdIq6kwH/PhVlvTN6iKLQ6NfCqoCr+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a2:fb:df:67:5b:0e:b6:6a:8b:17:8e:51:74:67:cb:31:57:b6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28B1145835559C99231C2C909D01409CF3D71842
        Validity
            Not Before: Sep  5 09:42:55 2023 GMT
            Not After : Sep  6 10:15:55 2023 GMT
        Subject: CN=B40C0BFCE21164892A6FD99C9659BA2816ED4A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:a4:51:60:16:d4:1b:61:58:b4:25:a9:b1:
                    4f:00:92:0d:3e:9c:65:82:fb:cb:ad:28:03:55:09:
                    52:b2:76:be:44:71:10:3c:9d:40:5b:6d:92:50:8e:
                    53:c9:74:69:8a:26:9e:54:2e:07:dc:07:a2:30:57:
                    d1:a4:d5:ac:30:f0:4e:66:9f:c5:d5:d8:6c:2d:a5:
                    a3:03:47:6d:8f:31:41:bc:5d:81:02:a1:ab:82:bc:
                    ae:19:fd:a6:2e:26:0f:87:23:5f:a1:ed:8a:88:44:
                    c8:ac:93:b2:b7:c9:25:8a:e6:7c:69:a3:5a:03:76:
                    aa:8d:8e:6b:d7:c2:12:e4:17:31:be:89:a1:af:4a:
                    20:a2:68:0c:d2:e8:da:df:87:ed:99:49:8b:1c:31:
                    59:6d:af:8a:4f:46:63:f8:26:4a:0d:a0:1b:82:1b:
                    6d:59:12:87:3a:0b:0c:96:d0:b7:75:a7:fa:f8:c3:
                    fd:a8:6d:9d:87:f3:2a:a4:bd:12:84:ff:b3:0c:cc:
                    c7:5e:13:b7:9f:0c:81:fc:66:b5:ce:55:f8:6d:04:
                    58:84:2e:47:ea:30:9c:05:d2:ac:13:a4:38:bc:0f:
                    7f:4d:ae:9c:ca:aa:10:fc:54:e3:7e:19:1d:da:21:
                    14:f9:56:0e:1a:50:40:9e:5c:61:5d:44:04:cc:18:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0C:0B:FC:E2:11:64:89:2A:6F:D9:9C:96:59:BA:28:16:ED:4A:06
            X509v3 Authority Key Identifier:
                keyid:28:B1:14:58:35:55:9C:99:23:1C:2C:90:9D:01:40:9C:F3:D7:18:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dgqbbj1TFCmGXPTeU8nfuN6iSkwLkHYjdrVWpM6fHeRt/0/28B1145835559C99231C2C909D01409CF3D71842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28B1145835559C99231C2C909D01409CF3D71842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dgqbbj1TFCmGXPTeU8nfuN6iSkwLkHYjdrVWpM6fHeRt/0/28B1145835559C99231C2C909D01409CF3D71842.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:7c:f0:37:50:68:8a:a1:e8:9f:32:01:cc:21:6c:b6:93:
         6a:94:cf:4b:ef:9a:c8:01:1d:ee:63:66:16:67:2a:23:ee:c1:
         d7:a7:f5:d3:04:88:77:ef:66:e2:82:6f:8e:4a:ec:70:ed:51:
         70:92:b9:8d:c1:29:56:ba:17:9b:83:18:c2:f8:a9:e8:11:27:
         2e:ea:f0:cb:f8:85:56:05:fe:9e:b1:99:01:eb:9f:f3:90:08:
         c0:78:b4:a9:37:d8:84:9e:f0:d3:2b:43:37:f4:21:6c:83:03:
         d1:5c:44:0c:58:b3:1f:ec:6f:64:38:00:8e:46:37:16:b3:62:
         22:64:b3:cc:80:31:71:f5:ec:ff:5e:47:b3:de:ee:04:6e:66:
         5b:28:bc:e4:d0:fd:59:a1:11:0a:e8:d6:b0:53:31:26:46:2a:
         c3:cb:73:11:19:75:7a:f8:ad:7d:96:d4:f0:94:5a:7a:50:8c:
         8c:fe:5a:96:e4:9b:ec:85:db:d9:64:7f:56:94:26:5c:a2:ad:
         58:78:93:fc:f2:7b:42:a9:91:a5:22:e5:23:40:bf:5b:b1:2f:
         30:30:c7:fd:90:3f:e9:e5:5b:1e:0e:5a:cb:3d:09:bd:ab:e8:
         46:d1:09:c5:34:3b:de:ce:d5:ba:c8:b6:fc:84:8e:e5:24:e3:
         e6:f9:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org