Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.mft
File:                     3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.mft (raw, json)
Hash identifier:          ObWyWIqX5fv7bBQLkyntLmmwD15uOZjDhbZ6E2PFOYo=
Subject key identifier:   E5:E5:5A:19:DE:B1:24:9A:25:3B:15:E9:FE:BF:86:45:5F:85:9F:25
Authority key identifier: 3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B
Certificate issuer:       /CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
Certificate serial:       46C99954642C9A2128FC9A65244B0F8AA48975FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.mft
Manifest number:          01CF
Signing time:             Thu 22 Jun 2023 09:24:01 +0000
Manifest this update:     Thu 22 Jun 2023 09:19:01 +0000
Manifest next update:     Fri 23 Jun 2023 13:17:01 +0000
Files and hashes:         1: 323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa (hash: Wiw6y1GsRMtdy0JQ4HoQh0Tf91a3Zl62RWCzzB5BRyY=)
                          2: 323830343a333932303a343030303a3a2f34302d3430203d3e20323636303133.roa (hash: ULGg3ysqPcuavyOYny+14kyP3siDevNM898NnAENEHc=)
                          3: 323830343a333932303a343130303a3a2f34302d3430203d3e20323636303133.roa (hash: B9qLL4fPqFDTSNvBS9Ci4hBcvYpy44JQsmzFbO1WG08=)
                          4: 323830343a333932303a343230303a3a2f34302d3430203d3e20323636303133.roa (hash: sdiR0mdr+6OqJa1xYbpoE1FAFuvmTCTwsiCwzfJ36V4=)
                          5: 3137302e3234342e3230302e302f32332d3234203d3e20323636303133.roa (hash: QzRZ9yXSMiyyvFaZaJHDnxI+Y9iIx8d7khVueeAyYv8=)
                          6: 3137302e3234342e3230322e302f32332d3234203d3e20323636303133.roa (hash: iArmgGXITNqPrA9zctsrVk2jEPmmswR3A+OnI91El3Q=)
                          7: 3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.crl (hash: +zvgn9RwErVeBCbRmiKD3tN2Lb1zwZTIIZSPI8V4vBs=)
                          8: 323830343a333932303a383030303a3a2f33362d3430203d3e20323636303133.roa (hash: YKZ4fyJ9BCJl0ET9Z+Xc4IQukkS2Jml2gOQFzpSGAmM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:99:54:64:2c:9a:21:28:fc:9a:65:24:4b:0f:8a:a4:89:75:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
        Validity
            Not Before: Jun 22 09:19:01 2023 GMT
            Not After : Jun 23 13:17:01 2023 GMT
        Subject: CN=E5E55A19DEB1249A253B15E9FEBF86455F859F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:94:a0:c5:d6:83:7e:ef:00:96:77:40:06:
                    b1:c7:a3:34:2a:3f:ee:95:38:d3:b7:3f:69:05:a2:
                    e1:b5:6b:ca:a6:12:36:be:4d:27:f5:45:e6:74:41:
                    0b:1a:7a:e4:6d:47:eb:d6:b0:a9:e9:81:d2:23:52:
                    d1:4f:02:5a:86:72:f0:65:fc:83:66:23:34:4e:d8:
                    70:85:e4:9a:ff:5f:d0:e4:c3:ff:63:98:c5:dc:5c:
                    8f:1e:3f:72:c1:ba:25:a4:11:81:9a:a5:b8:c0:3f:
                    e0:cc:5f:25:b2:eb:fb:02:04:56:7e:fa:f3:58:33:
                    ab:42:f5:7d:6c:1a:39:55:3f:de:1f:4a:94:b2:9c:
                    fd:8f:e6:ed:77:05:10:44:a7:b3:4a:45:73:1d:96:
                    36:b8:2e:4e:fc:58:48:b1:02:8e:83:c7:a4:d8:5f:
                    de:9e:93:57:c6:81:d0:c3:7f:58:36:f5:20:c7:2d:
                    ea:e7:03:e8:4f:a5:3c:30:17:4e:1f:39:1e:ab:c6:
                    ca:f0:44:70:27:16:21:a2:91:2c:4b:1d:f0:03:be:
                    7b:1e:52:88:c5:f3:01:31:64:2c:ef:ff:27:a4:40:
                    e2:7e:22:40:41:3e:8d:0e:98:c4:43:59:a0:54:2a:
                    d1:3d:f0:f6:e1:a5:a7:0d:78:1b:04:f2:b4:10:66:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E5:5A:19:DE:B1:24:9A:25:3B:15:E9:FE:BF:86:45:5F:85:9F:25
            X509v3 Authority Key Identifier:
                keyid:3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:61:e2:e5:68:2e:34:ea:88:8a:67:e2:09:8f:e1:0a:5e:bb:
         c7:54:42:47:c9:b6:59:c9:e0:c6:05:10:b1:30:f7:ea:cc:3b:
         c0:b7:7c:44:17:18:1b:79:07:f6:a4:52:59:76:3f:37:83:93:
         d1:77:b8:9f:8a:93:de:b6:98:bd:8f:b5:dc:2c:ad:d5:5f:d1:
         fe:81:ac:b2:8c:97:e1:82:0a:91:1f:53:1a:13:0a:4f:9e:bd:
         81:92:b8:69:65:08:37:83:5c:fe:47:e4:97:48:4d:25:87:a4:
         b6:1b:8f:c4:29:3c:4c:57:9d:c6:e0:03:37:6d:e5:18:6d:c9:
         d5:f9:0d:b5:2c:b7:4d:ac:b3:a0:6f:f4:9d:20:af:b9:45:28:
         bd:86:ee:92:d5:91:ab:05:a4:91:7a:fa:db:bf:e3:67:f7:55:
         b0:42:0e:a8:e4:a2:25:fe:d2:ea:ec:53:c4:15:39:5d:97:ae:
         f5:59:0e:d1:93:6d:04:4d:31:a8:5e:36:2b:31:de:d2:6a:ec:
         a3:c0:ab:50:d2:c7:67:d7:de:69:82:50:72:1d:76:e2:b6:79:
         13:49:f1:00:69:b6:32:08:28:5e:5f:02:fb:c0:b5:7c:fd:54:
         d8:9e:d1:4a:5e:d7:2f:f6:74:5d:e8:a2:a9:8d:a0:00:be:4a:
         0a:7c:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org