Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.mft
File:                     3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.mft (raw, json)
Hash identifier:          VZe8wryBvOXT9+ff0B2P0p+fwRAN3llpzxVzj5pr9ss=
Subject key identifier:   8F:23:A1:64:09:F8:30:94:85:34:D7:2D:0D:CB:94:FD:04:4F:4D:67
Authority key identifier: 3E:8C:3E:20:04:59:1E:04:09:96:F1:A3:A5:BF:95:7E:E6:1B:FE:BF
Certificate issuer:       /CN=3E8C3E2004591E040996F1A3A5BF957EE61BFEBF
Certificate serial:       669829C22A2687841F0F098EBFE9261BEF3A7915
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.mft
Manifest number:          23
Signing time:             Mon 28 Oct 2024 10:42:55 +0000
Manifest this update:     Mon 28 Oct 2024 10:37:55 +0000
Manifest next update:     Tue 29 Oct 2024 13:53:55 +0000
Files and hashes:         1: 3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.crl (hash: xpxRqN6hZ4YCWLykaJGzwjLeDwGT8wyGzhZXXBLFuYk=)
                          2: 3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa (hash: FwM7BXB8jxX6eURBOyULTQ23p8r43RdjJw4NRpfSro4=)
                          3: 3137372e3230302e3133392e302f32342d3234203d3e20323730393137.roa (hash: 9VT98O8AkEvXPAXwQ5Go6dZ/JZ+WnKXMRsz5WLi0jQU=)
                          4: 3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa (hash: wr35rMOkBEYJlu9dn0aPgM5syUcjY8fqQxU+9rKIwPo=)
                          5: 323830343a373337383a3a2f33322d3332203d3e20323730393137.roa (hash: cF0O5DkkKwOpXwejnPkXovdB7EJHoxDyUhy6jkauYqk=)
                          6: 3137372e3230302e3133362e302f32332d3233203d3e20323730393137.roa (hash: gR4rvNsMWsW0ciT6M62jUH6lz4z2YA7k/vdlba9HMhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:98:29:c2:2a:26:87:84:1f:0f:09:8e:bf:e9:26:1b:ef:3a:79:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E8C3E2004591E040996F1A3A5BF957EE61BFEBF
        Validity
            Not Before: Oct 28 10:37:55 2024 GMT
            Not After : Oct 29 13:53:55 2024 GMT
        Subject: CN=8F23A16409F830948534D72D0DCB94FD044F4D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:89:51:e2:4a:4f:82:bb:89:c9:3d:27:b0:
                    1f:d0:fd:87:30:fa:9d:2f:6c:5f:8e:4f:8c:b7:3a:
                    40:0e:f6:d2:20:84:22:5a:d1:a3:10:36:17:06:46:
                    73:51:af:b4:35:37:84:59:29:ee:16:fd:b6:9d:34:
                    19:d7:4b:5a:93:fe:86:50:45:27:40:61:62:ad:e6:
                    43:71:f6:d7:b7:93:a2:f5:91:15:0e:0c:ae:a1:c1:
                    9b:21:2f:4c:cf:73:49:4a:9f:ba:c1:15:34:00:64:
                    99:ea:67:db:93:db:8f:fd:0a:16:4f:7e:9b:6e:d3:
                    e4:c2:33:41:c4:f1:c0:bd:16:b1:23:aa:4a:39:7f:
                    58:79:e1:74:65:1b:b4:27:8f:c1:6d:9a:d0:4a:46:
                    26:ac:a4:7e:30:6d:f8:78:c2:ce:3b:34:79:01:4b:
                    37:a2:6b:ad:69:3c:68:66:7c:02:7e:6f:5a:9e:73:
                    ff:93:39:dc:f7:13:2c:c8:c3:38:40:f9:74:33:53:
                    67:86:69:7e:04:8e:0a:6f:75:a6:d7:b8:79:cb:28:
                    a8:a8:34:0f:44:c5:7e:98:7c:e5:ab:52:1a:e2:a8:
                    cd:a5:82:0f:89:a7:22:ea:25:12:14:ad:aa:44:bc:
                    01:de:f4:54:97:f7:3b:90:51:95:bb:1a:91:25:bf:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:23:A1:64:09:F8:30:94:85:34:D7:2D:0D:CB:94:FD:04:4F:4D:67
            X509v3 Authority Key Identifier:
                keyid:3E:8C:3E:20:04:59:1E:04:09:96:F1:A3:A5:BF:95:7E:E6:1B:FE:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3E8C3E2004591E040996F1A3A5BF957EE61BFEBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:83:81:37:14:54:22:ae:e4:29:98:22:8e:ae:fb:9b:f5:bb:
         e6:0f:14:b6:52:28:36:3a:34:e0:5c:8d:f9:57:da:21:8c:33:
         b9:fa:bd:8c:29:c2:ed:04:f0:d4:bc:10:4e:c5:c6:b8:c4:18:
         20:eb:8b:52:84:7e:63:ad:2b:40:00:f1:96:59:03:f7:63:9c:
         5a:9f:26:5f:76:ce:0a:e9:2c:b5:01:38:61:8b:99:1d:0f:f0:
         2f:ab:36:9f:5d:6e:74:15:5e:46:41:66:83:53:69:4b:66:95:
         b1:6a:3a:b8:0a:49:0a:cf:36:55:9b:82:43:8e:a4:fb:3e:02:
         be:3a:12:50:88:32:af:d0:7c:a3:0a:ed:ce:9e:e0:5f:f7:ec:
         bd:13:ad:15:93:ba:2d:05:56:92:e1:94:13:fa:d5:cd:5b:26:
         85:9b:4d:4c:ff:a2:6b:4a:72:cf:31:13:6d:39:5a:08:c0:bb:
         14:ff:3e:a1:f0:f6:8c:ee:ec:1e:48:4c:cd:f3:23:0a:1a:87:
         83:ae:2a:e8:13:4a:7f:4d:87:40:d1:6f:3a:83:f2:1d:89:14:
         2b:87:d2:3f:d0:2f:12:94:7f:f2:dc:77:3e:66:55:ff:1e:af:
         e7:b3:52:6b:5c:25:26:d0:79:97:34:fd:1c:9c:ba:f7:43:e3:
         b3:b6:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 09:10:16 2024 by rpki-client on console-ams.rpki-client.org