Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1.mft
File:                     C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1.mft (raw, json)
Hash identifier:          8T6elmrkTJoH5oWAWR5P5JIN/lKhNL93oDnFrAoYz3I=
Subject key identifier:   D8:CA:A0:C0:15:AE:26:B9:4B:D1:B8:28:95:3D:57:9F:13:E8:55:82
Authority key identifier: C9:C2:39:BD:B8:70:4A:9C:DD:22:DD:4B:2E:ED:C1:62:0C:B1:0B:F1
Certificate issuer:       /CN=C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1
Certificate serial:       2D34E0A9ABFB10190807F39061C93533896AAA77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1.mft
Manifest number:          03
Signing time:             Mon 06 Feb 2023 11:26:58 +0000
Manifest this update:     Mon 06 Feb 2023 11:21:58 +0000
Manifest next update:     Tue 07 Feb 2023 14:05:58 +0000
Files and hashes:         1: 3137372e37342e3137362e302f32322d3232203d3e20323638323035.roa (hash: /fLQaWdVu5dXsZAuhlJqe29MAxATMyDieqTvT/+6PJ8=)
                          2: 3133382e3231392e36342e302f32322d3232203d3e20323638323035.roa (hash: sNlzfzWugsebkGjmDf/B3FWl5tBXfQef0ZtH87wfxvk=)
                          3: C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1.crl (hash: Yyyd6SUXxETK3BwmsCuAfi9yivssZfzjfulJvnxImrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:34:e0:a9:ab:fb:10:19:08:07:f3:90:61:c9:35:33:89:6a:aa:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1
        Validity
            Not Before: Feb  6 11:21:58 2023 GMT
            Not After : Feb  7 14:05:58 2023 GMT
        Subject: CN=D8CAA0C015AE26B94BD1B828953D579F13E85582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:18:b9:93:f5:77:55:93:e4:20:ad:f3:e3:
                    c8:a0:bb:a2:a5:d2:af:75:fc:cd:ae:ea:0e:b9:51:
                    78:ab:31:62:38:62:1f:7f:0a:ce:f2:d1:09:9d:a0:
                    bc:5f:61:8e:58:d8:97:28:68:3b:cb:25:2e:ca:e9:
                    17:13:4a:26:16:35:4a:51:ec:cf:bc:84:8e:bc:dd:
                    dd:0d:96:ef:32:65:de:cb:3e:51:36:86:9f:10:e8:
                    5b:6c:93:c5:27:1e:95:60:3e:0e:df:6e:7a:9b:54:
                    49:b9:0c:5f:ce:b6:c3:e6:15:90:20:9b:a2:a6:05:
                    00:0b:71:40:af:d3:75:0f:23:67:84:e7:2e:ca:2b:
                    66:df:52:b9:10:ee:7f:a1:53:a8:1b:80:2c:e4:2b:
                    b3:5a:b8:a4:1a:e6:d4:3c:e3:d6:71:8f:81:41:27:
                    ca:70:b6:f8:f6:83:9d:37:30:6b:c4:91:0e:0e:ba:
                    46:5d:d0:10:69:98:0f:5d:d5:fb:b6:6e:f5:db:27:
                    e2:3a:d2:06:41:ee:02:83:36:12:a9:4e:4a:e0:ad:
                    c5:af:9a:a5:a4:69:ad:52:e0:08:53:b2:41:4e:50:
                    6c:e4:a2:34:cc:63:20:8f:20:e2:58:d3:e2:be:3e:
                    36:07:93:3e:e1:a5:05:f6:a9:df:05:12:fe:35:2d:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CA:A0:C0:15:AE:26:B9:4B:D1:B8:28:95:3D:57:9F:13:E8:55:82
            X509v3 Authority Key Identifier:
                keyid:C9:C2:39:BD:B8:70:4A:9C:DD:22:DD:4B:2E:ED:C1:62:0C:B1:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/C9C239BDB8704A9CDD22DD4B2EEDC1620CB10BF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b5:db:78:0e:c1:a1:c3:0e:f3:54:aa:f5:b4:48:77:23:1d:
         a3:05:20:4b:8d:df:bb:6c:0d:73:9c:3d:92:88:a6:80:b6:8c:
         ad:df:b1:49:c3:94:53:7e:57:cd:e8:bc:9f:b2:c6:da:2d:b8:
         2e:fa:fa:66:ae:2e:bb:94:c6:1c:12:2a:bf:e0:bc:24:ae:2a:
         cd:92:17:4a:ed:99:96:7d:b4:3a:2f:77:ac:27:72:9b:a6:bc:
         f6:4f:a8:29:a4:a4:5e:10:62:7c:02:ca:c8:f1:b5:67:62:4a:
         31:3a:8e:ba:cc:20:35:68:7f:53:ee:84:eb:1a:8d:85:61:2e:
         e6:71:20:ed:b4:24:fd:1f:9f:61:fa:ca:e3:ac:00:37:c8:64:
         89:7f:ce:16:d3:e7:47:70:d8:37:ef:43:d7:68:44:2f:12:4a:
         e8:40:59:66:9c:bf:a3:86:d4:95:f3:32:17:93:75:18:8a:c7:
         5d:91:93:93:27:e0:eb:4e:14:37:be:4f:49:fe:e7:52:de:1a:
         43:86:f3:5b:c0:94:e6:54:06:fa:21:7b:bf:d5:4b:66:7e:74:
         e1:0a:ae:ab:c1:e5:90:81:9a:af:36:ea:34:be:ac:0d:ec:66:
         52:f1:9a:3f:d9:36:6d:9f:09:12:b2:44:7a:38:da:91:49:11:
         01:b3:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org