Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.mft
File:                     2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.mft (raw, json)
Hash identifier:          0Uni24Is9nApS0tRIR2cow/V8tNGx5bQdUd4sA6SHck=
Subject key identifier:   3B:4A:CD:53:8E:BF:86:23:5D:35:52:48:51:0E:EF:DC:EF:71:96:B9
Authority key identifier: 2F:D7:B1:A4:09:FE:8A:CD:19:8B:1C:3F:43:BC:61:24:D2:15:95:DD
Certificate issuer:       /CN=2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD
Certificate serial:       38F8E07BECF84E18B348C0B77660680F6255BDE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.mft
Manifest number:          49
Signing time:             Mon 15 Apr 2024 05:48:06 +0000
Manifest this update:     Mon 15 Apr 2024 05:43:06 +0000
Manifest next update:     Tue 16 Apr 2024 06:31:06 +0000
Files and hashes:         1: 3137302e38342e3134322e302f32332d3233203d3e20323635303137.roa (hash: LL9NsCk7HryyIwqdq3hs9ZGg9nzjhkJuugBIcRAESIg=)
                          2: 2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.crl (hash: jWHHrN95uT16ey9745mW576Cluen+3yeF7G9dLKqiPo=)
                          3: 3137302e38342e3134302e302f32332d3233203d3e20323635303137.roa (hash: F55saj0Puw+JoyHyc200HfWrXxbhR5oaxks7AkS7YhE=)
                          4: 3137302e38342e3134322e302f32342d3234203d3e20323635303137.roa (hash: RyAqILiK9k/pdLx2PZaQLINXOoJOkSbRaB+b9UM8Fh8=)
                          5: 3137302e38342e3134332e302f32342d3234203d3e20323635303137.roa (hash: BDKIml5ysPfRC76H4jdlWdDjv+hAdWf8iFun6hiEW28=)
                          6: 3137302e38342e3134302e302f32322d3232203d3e20323635303137.roa (hash: 69W/k6Bh7JAM5juJnJQu+Zy5SaSZsrVFHJCp6tbyx5s=)
                          7: 323830343a333137383a3a2f33322d3332203d3e20323635303137.roa (hash: +aPFSf915xwGQCxsbug6LukT0tWevlMidLo0pF2dYMk=)
                          8: 3137302e38342e3134302e302f32342d3234203d3e20323635303137.roa (hash: q4p3Z+4bv4inecM46ExPATERwlQtW6RPlKHiB1069GY=)
                          9: 323830343a333137383a3a2f33332d3333203d3e20323635303137.roa (hash: iNYfr4euT6s2HtWKy6JXWArQbqcBnBE5qtV01l7mzFQ=)
                          10: 3137302e38342e3134312e302f32342d3234203d3e20323635303137.roa (hash: 2lKsTla4GoZLo+y+ZjvJBL501HwOjLUvQGQYW/yK15g=)
                          11: 323830343a333137383a383030303a3a2f33332d3333203d3e20323635303137.roa (hash: Ba0KSEw476xNRIlDWGGo0/vyP2GAyD34xE9L7ZHXFvE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f8:e0:7b:ec:f8:4e:18:b3:48:c0:b7:76:60:68:0f:62:55:bd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD
        Validity
            Not Before: Apr 15 05:43:06 2024 GMT
            Not After : Apr 16 06:31:06 2024 GMT
        Subject: CN=3B4ACD538EBF86235D355248510EEFDCEF7196B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:f2:46:45:a0:97:6d:4f:bb:6e:b8:b6:25:
                    87:14:05:9c:81:fd:a6:1e:fa:0e:88:c7:bc:66:3d:
                    1e:c2:db:69:c9:f5:83:e7:8d:fc:5c:c1:f2:ed:e3:
                    20:3d:40:14:a8:fa:86:bd:c9:d8:5f:af:e4:5f:31:
                    03:ef:70:42:43:e7:6a:d8:a0:d4:a4:db:a4:82:b2:
                    2b:ea:27:e5:a3:bb:b5:74:f4:db:0d:71:a2:a6:9f:
                    6c:ae:4d:59:44:eb:ac:97:e1:53:34:47:1d:89:5a:
                    78:83:e6:46:20:e7:82:f4:f6:86:d6:b4:1e:5e:88:
                    53:12:51:2d:98:97:8f:b3:02:34:0f:aa:fd:8d:61:
                    a8:56:31:9a:02:fb:ea:69:bd:02:ae:9c:39:64:89:
                    af:e1:c5:a2:53:e3:42:e4:f5:b3:79:fa:12:c8:b0:
                    c6:9d:70:43:09:39:9b:c2:b1:7b:17:b0:0a:8e:47:
                    3d:0a:30:bb:79:9b:b3:6a:3e:79:aa:46:ca:3a:8b:
                    b1:13:70:ad:34:25:53:56:52:95:a8:c8:e3:88:7d:
                    78:47:0d:cd:f0:ec:f3:93:cc:6f:55:dd:14:bc:8d:
                    9e:ac:56:8b:3c:c2:89:81:3c:07:74:4b:81:9b:fd:
                    df:03:71:0f:d2:94:25:fb:9b:98:58:22:8a:7a:15:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4A:CD:53:8E:BF:86:23:5D:35:52:48:51:0E:EF:DC:EF:71:96:B9
            X509v3 Authority Key Identifier:
                keyid:2F:D7:B1:A4:09:FE:8A:CD:19:8B:1C:3F:43:BC:61:24:D2:15:95:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ce:84:07:5d:e1:16:d1:40:dd:c3:f8:43:b0:e4:93:11:8a:
         96:b3:c7:9d:82:74:8a:ff:ad:af:85:c2:83:83:56:38:5e:52:
         b1:95:b0:6a:92:68:02:e5:54:e1:d4:f2:32:bd:ee:9f:6c:e7:
         07:12:df:59:5d:d6:f4:ec:ab:d2:08:56:3c:37:cb:88:1e:f2:
         2f:f4:c1:2d:16:46:ae:2c:80:49:49:12:1e:97:6a:48:2d:3c:
         8f:0b:02:9d:24:57:be:04:df:ba:8e:10:0d:d9:11:b4:d3:67:
         e5:43:a1:8b:03:44:2d:00:db:bd:07:29:e2:c2:ea:3b:10:0b:
         91:38:d7:31:c9:e9:e2:af:61:9b:26:26:03:2f:fb:cb:c0:fb:
         c5:35:5f:27:2b:d0:87:53:91:9c:de:3a:56:84:bd:57:22:b2:
         4a:e9:c7:0d:a2:de:f4:c7:91:10:f6:02:68:30:f1:ed:f0:cb:
         21:09:0a:a4:00:d7:ff:bc:9e:6a:3c:77:bf:22:2c:e2:b5:9b:
         80:ec:25:5d:82:b7:65:33:0e:77:f0:97:c0:61:7a:17:7b:75:
         6e:57:ae:01:8e:a8:dc:82:1e:2d:14:60:c3:f9:6f:39:8e:47:
         3c:d2:8a:8c:b6:c9:73:13:9c:ff:93:9b:97:9a:01:7b:d6:fc:
         c1:bc:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org