Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.mft
File:                     5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.mft (raw, json)
Hash identifier:          1Qsrfgo/3JcKvRinQKszfYlS1UwMeokpODzDxZOA+yo=
Subject key identifier:   A2:56:DF:60:3D:BC:D2:98:F6:C7:6C:53:4E:92:B2:2B:80:22:36:5D
Authority key identifier: 5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7
Certificate issuer:       /CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
Certificate serial:       0FA52E3256EA6575A81CBE13C953B372EDB3CFE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.mft
Manifest number:          D1
Signing time:             Mon 15 Apr 2024 05:00:16 +0000
Manifest this update:     Mon 15 Apr 2024 04:55:16 +0000
Manifest next update:     Tue 16 Apr 2024 05:34:16 +0000
Files and hashes:         1: 3139312e33362e3133362e302f32322d3232203d3e20323633333335.roa (hash: k3eKCy2jmetlLxKkG1/dlaA4fjQnJ3TJIbVpQMwi5n4=)
                          2: 3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa (hash: M6wxdQnk7Td8BuFPqZdfaxU7FhBUSnI1MnrJnVU3lzg=)
                          3: 3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa (hash: Byaig5EooWZHAJFqD1TnVVrXH0xdGyY+MzuoXRny1pY=)
                          4: 5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.crl (hash: HaJNBc492gTQM8lNkjQOBEK3jPeflSbBJvqyEqrO0CQ=)
                          5: 3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa (hash: V1yqsCiMAhxb7adW8OGShIq0iNhh4h2VQfUutkwKTag=)
                          6: 323830343a313438343a3a2f33322d3332203d3e20323633333335.roa (hash: nXrNZ+Gbb5i3+4UsL4XLLYrWB1VIEbLcGM9kFTjWkxs=)
                          7: 3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa (hash: Fwk6fBG0xFxQI38Mmd7pwvblM8veFwG96ChCjclytLA=)
                          8: 3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa (hash: p0Uc6rIZswoUOTXgIw/Qlf0VVgfMsbGjnXsSPQL7Vv4=)
                          9: 3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa (hash: iDmQ4mZqTZ/pUOmdlaZZ7IkxjudBM4pwgMvKuHiQRrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a5:2e:32:56:ea:65:75:a8:1c:be:13:c9:53:b3:72:ed:b3:cf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
        Validity
            Not Before: Apr 15 04:55:16 2024 GMT
            Not After : Apr 16 05:34:16 2024 GMT
        Subject: CN=A256DF603DBCD298F6C76C534E92B22B8022365D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:22:ca:c8:e5:94:df:d0:1d:5f:22:15:fe:
                    3d:a9:78:28:82:29:6c:a1:c6:cf:b9:99:59:bc:67:
                    0e:75:5d:f2:29:e6:2a:56:be:79:16:57:a5:0f:6c:
                    32:aa:4c:d9:69:d8:50:45:7a:36:5c:6c:e6:ac:ae:
                    c5:45:1c:e1:14:13:dc:11:96:99:ad:68:1a:23:31:
                    04:8d:9b:e9:93:8b:d8:0c:66:3f:92:d4:14:b1:cc:
                    3a:45:fb:d5:6f:01:dc:9b:f0:97:29:b6:f1:ed:d5:
                    3f:f5:fa:39:60:7e:36:dd:1d:24:68:c5:92:4a:2c:
                    f8:99:ad:06:cc:b7:3f:e7:ff:57:14:01:b1:d8:39:
                    f1:43:f1:7b:de:ae:e5:32:b6:e6:d8:8a:ea:17:c7:
                    b3:cd:a7:5b:71:f4:e6:dc:b4:cb:26:5a:a8:da:d6:
                    57:ad:cb:6b:8b:37:42:05:bc:6e:1c:00:18:78:e1:
                    92:79:7a:57:d4:4f:ad:92:71:05:3c:21:a2:3a:6c:
                    bc:a9:98:86:a2:b5:23:32:39:f7:9e:62:51:a7:6c:
                    29:f3:2d:43:54:11:0b:bc:67:e9:97:c4:08:56:54:
                    03:cd:2b:f9:57:fb:c7:20:06:aa:2d:bc:69:8f:49:
                    a5:71:97:11:44:c5:af:9b:38:b3:c9:fc:80:6e:7d:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:56:DF:60:3D:BC:D2:98:F6:C7:6C:53:4E:92:B2:2B:80:22:36:5D
            X509v3 Authority Key Identifier:
                keyid:5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8a:9d:5d:b1:d6:a5:bf:aa:10:77:12:f1:ed:a9:c2:af:f1:
         88:70:f0:f4:3d:56:bc:76:1c:18:47:8f:a0:12:8b:ae:dd:06:
         d3:fe:7a:24:b8:dc:9b:08:e1:60:ac:a2:36:30:96:df:36:68:
         b4:68:ed:51:cc:1f:42:ba:f7:7f:a4:7b:64:b1:0d:c5:8b:0e:
         7e:0a:3a:dc:87:f6:8f:f3:08:91:54:60:2d:09:0e:47:63:65:
         af:72:16:76:53:d2:53:c4:d3:80:42:c5:35:20:a9:7e:a4:34:
         4f:f0:2a:7f:cf:5e:e0:ff:de:d7:c1:ec:d7:2d:4d:85:e7:02:
         9e:b9:05:61:fd:61:61:7f:9c:a6:56:9b:11:97:99:3e:15:b1:
         6d:79:7c:9e:cb:dc:bb:b6:80:5d:9c:c8:6d:96:e0:f0:ca:bd:
         26:4e:8d:57:7f:a7:17:96:91:1c:97:61:d2:42:38:fc:ed:2f:
         5c:32:c4:9e:89:f3:cd:3c:7b:ae:73:6e:41:34:24:c2:42:c0:
         da:08:90:54:f5:e3:9c:36:3f:93:be:5d:7d:cb:52:4e:6d:f1:
         3d:a2:16:9f:05:14:76:c2:30:13:e3:b3:ae:8e:9a:27:ca:8f:
         2b:5e:eb:7a:99:9e:8b:8c:a6:09:e4:f9:f9:f1:af:3b:ae:56:
         97:f1:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org