Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/5C29BE5C5B725310C005BE30E228128C6F3193B7.mft
File:                     5C29BE5C5B725310C005BE30E228128C6F3193B7.mft (raw, json)
Hash identifier:          /V+gzkJefYM/W8w+auqRj2KJAQhyomiEEw97REh5ZZ4=
Subject key identifier:   1C:91:E0:6A:B5:61:FE:95:2D:85:5D:DA:0C:90:00:5F:66:D4:D5:48
Authority key identifier: 5C:29:BE:5C:5B:72:53:10:C0:05:BE:30:E2:28:12:8C:6F:31:93:B7
Certificate issuer:       /CN=5C29BE5C5B725310C005BE30E228128C6F3193B7
Certificate serial:       2C21784E979AF45C5A661527564B4FAD5B5BF83C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C29BE5C5B725310C005BE30E228128C6F3193B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/5C29BE5C5B725310C005BE30E228128C6F3193B7.mft
Manifest number:          69
Signing time:             Thu 08 Feb 2024 10:02:39 +0000
Manifest this update:     Thu 08 Feb 2024 09:57:39 +0000
Manifest next update:     Fri 09 Feb 2024 11:35:39 +0000
Files and hashes:         1: 3139302e3131352e3232302e302f32342d3234203d3e20323730383238.roa (hash: suJXx8AmM7TbCRx7etSCQhTfKvWXNCVlbyZmGauARqg=)
                          2: 323830343a373230383a3a2f33322d3332203d3e20323730383238.roa (hash: 9gbRgX1xpvsHCBJZcOrdlqia8cmdGjEGKtwyMlT0y8o=)
                          3: 3139302e3131352e3232322e302f32342d3234203d3e20323730383238.roa (hash: EjzGtXatYWzVBvDy2J6sXbmK6KAgvkBU/ClI1DH4sdk=)
                          4: 3139302e3131352e3232302e302f32322d3232203d3e20323730383238.roa (hash: 1a0GLQVaht1bkVEIZjJH2B9JGTRB4/UxWtdJqCNAEKI=)
                          5: 3139302e3131352e3232302e302f32332d3233203d3e20323730383238.roa (hash: 8/9g9p6badhiLWT9RwNhHsNOZpLVEGpkJpcLGc8Kvtk=)
                          6: 3139302e3131352e3232332e302f32342d3234203d3e20323730383238.roa (hash: CR9iklRrV60zJnIEklwF0tytCA4MtK2qV06wRacql7g=)
                          7: 5C29BE5C5B725310C005BE30E228128C6F3193B7.crl (hash: ORYhudjp9yyGP1ue6uZFx2KovKM4HgiHwct7oPKslgA=)
                          8: 3139302e3131352e3232312e302f32342d3234203d3e20323730383238.roa (hash: wSSpXCRQ36zXbpsM2JKVwG4Bf+V6KegD6ypakBa9Pwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:21:78:4e:97:9a:f4:5c:5a:66:15:27:56:4b:4f:ad:5b:5b:f8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C29BE5C5B725310C005BE30E228128C6F3193B7
        Validity
            Not Before: Feb  8 09:57:39 2024 GMT
            Not After : Feb  9 11:35:39 2024 GMT
        Subject: CN=1C91E06AB561FE952D855DDA0C90005F66D4D548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:10:15:67:83:05:e6:35:68:bb:09:e1:68:
                    c5:48:27:aa:2b:fd:5b:e7:58:89:ea:f9:85:f9:c5:
                    2f:e8:9d:5d:05:00:34:36:d7:7f:de:42:f1:7d:d9:
                    a4:4e:54:be:44:af:17:19:0a:00:00:e8:75:1b:2c:
                    52:97:af:63:9b:4f:da:7e:1d:54:12:6b:fa:a3:82:
                    c0:ac:16:7d:b5:de:33:d8:2b:13:d7:cb:2f:71:ca:
                    99:54:5a:cd:79:ea:6e:75:7d:e9:0d:89:15:ab:a2:
                    5d:41:11:ac:6b:16:05:f5:b8:0e:60:bc:53:ef:31:
                    c0:d1:31:6f:24:da:08:fe:b6:47:5b:b1:00:5a:7a:
                    05:cd:cf:28:a8:96:c5:b1:6b:69:1c:01:bf:fe:2f:
                    ef:db:c2:7f:a4:f6:c1:2b:1e:64:c4:5c:bd:13:2b:
                    f1:1c:04:0a:67:77:45:59:e0:bc:22:51:c5:20:ed:
                    1b:45:c9:d1:3c:b0:15:98:b5:84:93:b9:08:30:b1:
                    fb:df:12:32:ce:dd:3a:2f:07:69:79:d6:0a:9b:f3:
                    ca:39:bf:c8:9e:4a:e7:55:53:46:66:8f:0c:2c:3b:
                    48:87:9d:c3:69:34:4b:d8:cd:31:21:19:79:40:0e:
                    8e:39:88:50:93:da:d4:21:98:27:ae:5d:4b:61:81:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:91:E0:6A:B5:61:FE:95:2D:85:5D:DA:0C:90:00:5F:66:D4:D5:48
            X509v3 Authority Key Identifier:
                keyid:5C:29:BE:5C:5B:72:53:10:C0:05:BE:30:E2:28:12:8C:6F:31:93:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/5C29BE5C5B725310C005BE30E228128C6F3193B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C29BE5C5B725310C005BE30E228128C6F3193B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/5C29BE5C5B725310C005BE30E228128C6F3193B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2c:4e:84:8a:c1:81:3e:e0:00:7f:2a:a5:ca:03:16:4d:3f:
         5d:bd:c1:05:8a:49:62:f2:56:5f:20:b8:6c:36:19:9a:a8:bc:
         b8:3d:76:99:ac:8a:1c:92:32:d9:ff:ec:94:63:02:b3:9c:34:
         66:7b:3c:4c:83:89:70:39:87:61:4b:0b:7d:cb:56:48:52:71:
         67:53:53:9a:40:67:8f:4c:28:fa:ec:be:a3:eb:d2:02:38:1d:
         ae:fb:49:3b:53:36:0d:9e:fb:e9:67:3c:96:b7:02:9b:36:ab:
         42:02:70:84:46:88:91:d2:29:39:60:70:3d:ca:ce:2e:96:c4:
         a5:fd:29:07:2c:97:fa:53:2b:bc:b8:1c:e2:0f:3d:d6:49:ba:
         a0:3c:d6:27:b9:d4:9f:f0:0b:6d:1e:ba:c6:1b:09:f7:d8:59:
         5c:df:99:1f:15:9a:78:35:62:b5:57:20:0c:04:08:d2:48:e6:
         a2:36:8d:a5:e1:90:24:6f:94:54:39:16:3e:42:38:08:67:fd:
         18:18:2b:de:dd:b9:22:92:d6:15:64:95:d1:c0:5c:8f:cd:a1:
         b0:10:e3:4c:f1:ca:83:11:5f:d4:8a:cd:65:e5:99:8e:49:47:
         3f:5d:3f:8e:f7:64:a4:b1:d8:81:9c:1b:20:37:cb:e0:08:b5:
         71:61:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org