Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.mft
File:                     A3948DF92873B3152952F292409AE5A8EE92371C.mft (raw, json)
Hash identifier:          kDrsY6fhYQjjJ5BFR0usbgSSJH3caSU5eL6BrHXoa3Q=
Subject key identifier:   0E:E5:45:D4:B0:CE:8B:38:E5:5C:E5:E4:9E:07:18:F3:D4:51:2D:CE
Authority key identifier: A3:94:8D:F9:28:73:B3:15:29:52:F2:92:40:9A:E5:A8:EE:92:37:1C
Certificate issuer:       /CN=A3948DF92873B3152952F292409AE5A8EE92371C
Certificate serial:       1DC83B3209C15CEA49CD5A22472627B73C79A724
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3948DF92873B3152952F292409AE5A8EE92371C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.mft
Manifest number:          53
Signing time:             Thu 22 Jun 2023 04:18:34 +0000
Manifest this update:     Thu 22 Jun 2023 04:13:34 +0000
Manifest next update:     Fri 23 Jun 2023 07:30:34 +0000
Files and hashes:         1: 34352e3138352e39362e302f32342d3234203d3e20323639333732.roa (hash: duP/6nY/46ZfDg4TAWdbkgnpE8ixiynyFiN6nWLLhYE=)
                          2: 34352e3138352e39382e302f32342d3234203d3e20323639333732.roa (hash: SZvrYzyp7SpJT5sQ5QGyef38JegzrQ9VbWJq37SsHR8=)
                          3: 323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa (hash: W4AAqnSEVkE5WnReIus+QYTZWe+lruHKG8CwRKq/G2o=)
                          4: 323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa (hash: yaefXwDZN4t98adgnmq0ujC3XYQebYHwD68n3C3QErk=)
                          5: A3948DF92873B3152952F292409AE5A8EE92371C.crl (hash: GTLzy0JnLhPXRZtV6I6SBl3NSrPnv/3jjSzG7r21YPU=)
                          6: 34352e3138352e39372e302f32342d3234203d3e20323639333732.roa (hash: LSDMxTKsvIV+uCexwMVfFz7+zppW2K2mX4/zyPuqbJQ=)
                          7: 34352e3138352e39392e302f32342d3234203d3e20323639333732.roa (hash: Kn5lsE7l1Ft6dD9ioTGdaKvQ46GWT9jP5SB99pLe3yU=)
                          8: 34352e3138352e39362e302f32332d3233203d3e20323639333732.roa (hash: dzVqqRwnNw1tsFiL+CJLi4SAgbbb/xkXI1aZNlyGLrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c8:3b:32:09:c1:5c:ea:49:cd:5a:22:47:26:27:b7:3c:79:a7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3948DF92873B3152952F292409AE5A8EE92371C
        Validity
            Not Before: Jun 22 04:13:34 2023 GMT
            Not After : Jun 23 07:30:34 2023 GMT
        Subject: CN=0EE545D4B0CE8B38E55CE5E49E0718F3D4512DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:62:ea:83:30:4d:30:66:fc:f5:d9:eb:40:67:
                    d3:5f:0a:c0:7f:c9:8d:23:56:b4:4f:2b:f6:05:3c:
                    ff:3f:5b:18:ec:bc:fa:10:77:b4:bb:2a:c9:ba:e5:
                    2e:47:d8:8b:9a:a7:48:6f:60:40:7d:16:42:fd:09:
                    c2:ae:40:9f:55:62:af:02:ee:2c:e3:b8:42:cb:0c:
                    2c:41:bc:0d:34:bb:89:cb:eb:d1:ae:15:b0:f1:1f:
                    6f:d7:08:d7:6b:91:0f:33:14:70:32:a4:eb:d9:8c:
                    92:d4:44:d0:01:7b:d4:b6:61:63:e9:75:4b:19:9a:
                    f3:69:55:60:7b:4e:eb:ee:1b:5d:47:a2:8f:8a:05:
                    a9:7a:be:05:19:8f:0a:ec:41:63:f1:dd:82:62:26:
                    c7:ec:81:17:47:9f:b5:77:18:70:d6:82:be:d0:9e:
                    00:b7:71:69:04:dd:ca:c7:99:e9:4d:2f:9d:03:96:
                    73:d4:18:ea:3f:a0:c1:f3:7c:db:46:99:ea:a6:b9:
                    c5:44:4b:4e:08:7e:8e:7f:e9:e6:44:18:47:dc:d7:
                    a4:83:d4:65:3e:5e:ee:6c:55:72:6d:74:c6:cd:8a:
                    b0:25:b2:af:6f:63:0f:50:d0:98:65:e9:d0:1f:cd:
                    49:3d:ab:76:1b:f2:0e:4a:1b:ae:c9:bd:58:f6:ef:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E5:45:D4:B0:CE:8B:38:E5:5C:E5:E4:9E:07:18:F3:D4:51:2D:CE
            X509v3 Authority Key Identifier:
                keyid:A3:94:8D:F9:28:73:B3:15:29:52:F2:92:40:9A:E5:A8:EE:92:37:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3948DF92873B3152952F292409AE5A8EE92371C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e9:1f:8f:53:c1:62:e1:d4:2a:36:bf:fe:64:49:38:70:9e:
         75:d8:a8:de:0a:f8:20:fb:dd:da:82:47:14:1b:9c:42:0a:bb:
         63:a7:6b:ab:1b:0c:63:4c:a3:c5:84:34:2b:38:65:c9:3b:8c:
         79:b8:5a:1c:0a:13:f0:77:f5:03:4e:f8:0e:24:d0:e9:ae:88:
         f8:0e:f3:b7:4b:e9:39:e2:b7:94:80:75:a4:e9:e3:03:ce:2c:
         8f:1a:4f:74:1a:bb:00:ad:c3:37:09:56:20:ef:86:77:16:61:
         4f:22:6e:14:c0:af:e6:56:f8:b6:27:47:85:73:7b:d1:c5:d6:
         f0:59:89:47:72:12:9c:11:bb:7a:4a:a5:fa:46:1b:18:a0:3f:
         8b:cf:e2:41:5b:a2:43:1e:d2:ff:61:ee:62:74:a2:57:7b:0e:
         a2:3d:dc:39:6f:60:5d:1d:c1:32:84:f9:a6:4a:2a:f7:a4:c0:
         ad:84:af:98:bf:c6:8a:cc:d4:c7:c3:99:67:1b:05:25:ed:76:
         c1:c1:9c:92:13:ee:4d:3f:15:38:1c:81:ad:68:a5:ae:64:c4:
         ae:d1:16:82:da:58:1d:4c:86:6a:32:14:9d:dd:66:2c:a1:d1:
         cc:55:43:6b:1c:d1:9c:8b:c6:9b:88:76:f4:6e:d3:70:90:ec:
         f4:6a:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:33 2024 by rpki-client on console-fra.rpki-client.org