Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/9A49CE126A8054C7466BC5D7F3443D2FE55059C6.mft
File:                     9A49CE126A8054C7466BC5D7F3443D2FE55059C6.mft (raw, json)
Hash identifier:          YN03Y/u7Aa1WF2WpxF/g6G6aPQ3IHH3IL3ZyAPVfKhs=
Subject key identifier:   8F:7E:0A:D2:F0:01:0B:FA:80:D1:86:B0:01:DC:71:A4:11:B2:01:B3
Authority key identifier: 9A:49:CE:12:6A:80:54:C7:46:6B:C5:D7:F3:44:3D:2F:E5:50:59:C6
Certificate issuer:       /CN=9A49CE126A8054C7466BC5D7F3443D2FE55059C6
Certificate serial:       41BA8EB496FB82C023AFBE2890CECC9DD719B1C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A49CE126A8054C7466BC5D7F3443D2FE55059C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/9A49CE126A8054C7466BC5D7F3443D2FE55059C6.mft
Manifest number:          025A
Signing time:             Mon 08 May 2023 12:10:00 +0000
Manifest this update:     Mon 08 May 2023 12:05:00 +0000
Manifest next update:     Tue 09 May 2023 12:15:00 +0000
Files and hashes:         1: 323830343a333537343a3a2f33322d3438203d3e20323636323837.roa (hash: 686tMh007i0yYPeT3oRpxxLkjzXk8wak9+PNiPTsphE=)
                          2: 3137302e37392e36302e302f32322d3234203d3e20323636323837.roa (hash: 9BU9uTPkRaUE2fB6VYGBcC1hfI6gbNYq51LW9eq/XrM=)
                          3: 9A49CE126A8054C7466BC5D7F3443D2FE55059C6.crl (hash: 9VEUdsFDP+a6F/0Cg6gxi4qZP8jnDb33MOT+H/9I/WY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ba:8e:b4:96:fb:82:c0:23:af:be:28:90:ce:cc:9d:d7:19:b1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A49CE126A8054C7466BC5D7F3443D2FE55059C6
        Validity
            Not Before: May  8 12:05:00 2023 GMT
            Not After : May  9 12:15:00 2023 GMT
        Subject: CN=8F7E0AD2F0010BFA80D186B001DC71A411B201B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:09:b3:57:e6:f0:db:5e:c6:62:aa:5f:ab:
                    7b:6c:e8:f3:a8:96:e0:ec:2b:5a:03:f3:69:0b:25:
                    bc:db:e6:09:98:a7:28:ac:7b:11:80:b0:63:a4:0d:
                    92:ea:21:1a:29:76:c6:ea:34:5a:d3:6a:84:65:40:
                    3a:63:86:d0:a5:47:88:0c:71:6a:36:83:59:07:c1:
                    46:d7:50:82:a5:d5:c4:fb:6c:fc:98:04:4b:8f:73:
                    7c:dc:85:51:a7:53:8c:82:08:42:53:c0:08:a6:9c:
                    ed:76:9b:49:59:c5:2d:b4:38:62:9c:b0:85:52:c7:
                    4e:1f:a2:92:e1:b5:88:b4:c2:0c:a0:42:6b:ad:63:
                    ff:90:9e:df:a1:ab:08:93:20:df:2e:4d:c5:a0:b3:
                    d0:ec:76:e3:f8:a4:ac:f7:dd:05:b2:2d:a9:db:33:
                    c9:f3:22:7d:29:63:ca:62:c6:7c:b4:91:6f:f7:c3:
                    49:ea:3a:65:a2:76:85:b9:a5:66:4c:de:56:cd:fc:
                    51:7c:0e:63:da:55:8b:50:fb:fb:aa:3a:37:98:9f:
                    78:45:66:52:c1:8c:cf:78:6c:ce:1d:2b:29:fa:73:
                    88:df:da:30:bf:b5:40:77:e2:88:cf:85:34:1e:fe:
                    f8:c2:39:13:6e:3a:6e:84:e4:4d:b8:67:fa:7c:9c:
                    f5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7E:0A:D2:F0:01:0B:FA:80:D1:86:B0:01:DC:71:A4:11:B2:01:B3
            X509v3 Authority Key Identifier:
                keyid:9A:49:CE:12:6A:80:54:C7:46:6B:C5:D7:F3:44:3D:2F:E5:50:59:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/9A49CE126A8054C7466BC5D7F3443D2FE55059C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A49CE126A8054C7466BC5D7F3443D2FE55059C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/9A49CE126A8054C7466BC5D7F3443D2FE55059C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:f9:3c:45:73:e1:be:24:cf:2e:65:13:4a:48:72:d3:1a:
         bb:46:d6:11:8f:39:68:8a:89:6f:e8:78:f8:ef:f2:a3:44:e7:
         81:80:b2:0d:1d:78:dc:9c:fc:4f:70:40:d3:b4:73:c6:42:2b:
         2d:e5:d4:88:27:8b:fb:49:b0:30:d1:28:43:37:91:5b:c3:43:
         43:fc:13:cd:71:74:4b:d2:97:41:70:a2:eb:d5:58:30:43:88:
         df:3c:99:19:3d:4c:dd:56:82:ac:03:45:6a:0d:e5:47:d8:88:
         96:dc:59:65:da:09:c5:7d:22:65:64:e4:d7:86:f8:39:ab:a8:
         7c:74:35:be:ea:12:99:b1:b0:3b:be:8f:b4:3f:1e:19:b3:94:
         69:e8:fb:21:8d:d8:1f:8a:7a:a8:06:d7:dd:7f:eb:f0:fd:a1:
         73:6c:60:b0:aa:f1:64:ce:a8:44:36:99:0d:ce:bb:6b:0a:a1:
         85:dc:07:bc:5e:ca:ad:f0:4d:a6:bd:36:71:ca:6b:8f:44:67:
         39:38:c7:aa:25:5b:db:ad:b3:d0:14:3d:f9:8f:6d:b8:d8:ac:
         55:fb:79:b7:4d:97:27:1c:56:62:42:41:e6:64:cb:77:10:2e:
         b9:b7:de:8b:1c:86:15:a9:c0:61:76:23:d1:0b:f9:37:3d:8e:
         a1:10:58:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org