Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.mft
File:                     2A3395C823AA389CE6DCA952BCF1B97769252F8F.mft (raw, json)
Hash identifier:          4PEDSPEPHXmYNFnQx4y70ffIsJqwGtGO+wCAH+4Hj4Q=
Subject key identifier:   42:D1:2E:AE:A9:80:6B:3D:32:95:3A:5B:3A:BA:F6:92:A1:70:46:49
Authority key identifier: 2A:33:95:C8:23:AA:38:9C:E6:DC:A9:52:BC:F1:B9:77:69:25:2F:8F
Certificate issuer:       /CN=2A3395C823AA389CE6DCA952BCF1B97769252F8F
Certificate serial:       05A5159ABD57D8FDA67B6F34591CFD34A28D0B90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.mft
Manifest number:          02C9
Signing time:             Sat 29 Oct 2022 20:33:50 +0000
Manifest this update:     Sat 29 Oct 2022 20:28:50 +0000
Manifest next update:     Sun 30 Oct 2022 22:16:50 +0000
Files and hashes:         1: 323830343a366536383a3a2f33322d3332203d3e20323730353935.roa (hash: Xp2di4c8Mw9LILYEjIDlVh6rouWLCGhQopGIg1Q4bXU=)
                          2: 3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa (hash: gP4OT77KTs7pOdWTsD4PTL/eY5WYMWnG8P0H4doJzMg=)
                          3: 3137372e3135322e3130382e302f32332d3233203d3e20323730353935.roa (hash: 5iYMNfKphVJb7aXoIpb13U2hDr5aT9caCiieMQbwe0Y=)
                          4: 3137372e3135322e3131302e302f32342d3234203d3e20323730353935.roa (hash: ZGpG09tFVHRy3pvqCr+fxP+SJaPDcJCk7vnvZWXjg5A=)
                          5: 2A3395C823AA389CE6DCA952BCF1B97769252F8F.crl (hash: B2bbdep2uI0JhIonX6qb19XKXglNvzbrsJD/Ud0qzNw=)
                          6: 3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa (hash: ycMVU6YCHM/caKYQMgPZwB0ZYISPXX36thu1SlcmSFA=)
                          7: 3137372e3135322e3130392e302f32342d3234203d3e20323730353935.roa (hash: UHSe0nqBdJoI+BW5KYmZmmZX3xWViB8jwgbpdMNVZvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a5:15:9a:bd:57:d8:fd:a6:7b:6f:34:59:1c:fd:34:a2:8d:0b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3395C823AA389CE6DCA952BCF1B97769252F8F
        Validity
            Not Before: Oct 29 20:28:50 2022 GMT
            Not After : Oct 30 22:16:50 2022 GMT
        Subject: CN=42D12EAEA9806B3D32953A5B3ABAF692A1704649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:10:45:26:41:c3:cc:a8:7c:a6:3b:f4:67:d7:
                    be:79:65:ba:23:47:df:e9:8d:cb:cb:e4:db:fa:5d:
                    c0:bb:35:bd:10:7e:0a:97:c1:01:db:1b:57:2b:ca:
                    2d:55:18:1f:14:07:fa:e0:c2:c5:39:d9:30:61:85:
                    db:cb:c8:bd:76:88:f2:ff:b9:ef:16:8c:78:a1:42:
                    54:f6:75:24:52:27:18:d1:d7:9d:84:df:14:d8:65:
                    5a:bb:7a:00:32:1b:ab:37:3c:45:c5:78:c9:5b:32:
                    91:bf:56:92:18:51:2c:5d:26:bd:12:1d:10:10:68:
                    3c:03:04:ed:ef:6c:4e:52:39:25:9e:8b:f5:9c:96:
                    42:6d:f0:2d:95:3e:89:9c:3f:7a:e7:8e:90:0c:72:
                    cb:d2:f7:2d:85:34:57:70:16:c6:65:c4:9d:3c:2e:
                    5e:22:4e:ec:1c:ac:15:c4:4f:7c:72:65:2b:29:c3:
                    dc:ab:6c:1c:fb:85:d8:d1:2d:6d:81:b6:8a:7f:9c:
                    b7:78:37:27:67:aa:2d:45:0d:17:c1:5c:13:6d:2c:
                    0f:10:e9:ff:7f:4c:b8:f3:62:f4:b6:d7:cd:8c:5e:
                    54:29:55:77:b4:8d:c4:8d:9a:b2:ee:58:5c:b7:9e:
                    ef:37:dc:89:bd:86:28:a8:d9:09:cd:ce:90:79:a7:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D1:2E:AE:A9:80:6B:3D:32:95:3A:5B:3A:BA:F6:92:A1:70:46:49
            X509v3 Authority Key Identifier:
                keyid:2A:33:95:C8:23:AA:38:9C:E6:DC:A9:52:BC:F1:B9:77:69:25:2F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6c:54:14:f4:f1:19:ef:e4:d8:84:4a:ca:43:23:a3:18:eb:
         78:21:0b:38:68:2d:93:5a:90:ae:a9:74:eb:65:9b:e4:3d:f6:
         bb:41:99:00:16:2f:db:02:dc:f3:b8:02:da:f9:8c:1d:b7:81:
         48:af:0d:de:a1:70:d3:d9:7c:f7:ff:4f:e7:44:2d:f2:6a:4d:
         9f:dc:b3:c6:f5:c2:09:f9:dd:e7:15:00:2b:73:b8:dc:df:c1:
         8a:cd:a8:b9:0e:c4:11:30:ae:22:43:ac:88:e6:30:07:62:7b:
         4e:19:0c:1c:98:fa:1e:e8:a2:91:8e:d2:12:30:b0:84:c8:74:
         ff:3c:59:fa:95:32:8a:1e:ce:15:fd:8f:87:48:51:3d:63:cd:
         e9:54:8b:c0:8b:d3:1a:33:df:49:90:14:42:3c:a6:25:60:53:
         30:e4:d8:82:eb:ff:9a:82:b7:e7:02:c8:21:a2:95:37:ad:ca:
         b6:6a:0a:1d:1a:1e:a3:4c:ad:44:d5:50:e0:2e:d3:b1:6e:fe:
         78:7f:a7:58:29:30:1e:27:b4:48:5e:87:6e:12:6a:62:a5:82:
         be:3d:53:a1:21:5e:44:45:e9:b9:31:5f:40:f4:91:70:98:43:
         05:51:1c:b0:1c:d2:d0:0d:97:49:e8:17:30:5c:ac:62:bf:bc:
         83:3e:ed:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org