Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.mft
File:                     D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.mft (raw, json)
Hash identifier:          AhTz9/TwQ5DcmFvKo/42UOII3NdPaGM8paB2BppMGrA=
Subject key identifier:   CE:4A:26:DB:EC:21:0B:BC:37:CD:BD:C7:FB:9C:83:0D:60:D0:EB:4D
Authority key identifier: D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9
Certificate issuer:       /CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
Certificate serial:       5F64C1BAAEDC385CD6D1C7A12E74BC1CACA77735
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.mft
Manifest number:          020A
Signing time:             Wed 17 Jan 2024 18:24:57 +0000
Manifest this update:     Wed 17 Jan 2024 18:19:57 +0000
Manifest next update:     Thu 18 Jan 2024 20:26:57 +0000
Files and hashes:         1: 3137372e33392e3230362e302f32332d3234203d3e203532373830.roa (hash: jkKrXcb7KSi47j+e/S5jGzunrvEGYKsH8Oq8Q72nyKk=)
                          2: D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl (hash: 2CnlZ2LokxjJFqKTGpnIOpPYf8IMQdNSTvAQNCg+OAU=)
                          3: 3137372e33392e3230342e302f32332d3234203d3e203532373830.roa (hash: s44tVcuz1/aJmUuXjkNeNHV89ceGo1qMyaoEYnwkpOE=)
                          4: 3136382e3230352e38362e302f32332d3234203d3e203532373830.roa (hash: hMG/Kzlblogxy/+/rwj5/9YTeaaPZMHnfmuZbrc/CJE=)
                          5: 323830343a326539343a383330303a3a2f34302d3430203d3e203532373830.roa (hash: zB93rI7pVSldojN+Ei9y0Fmk8dLpyfX4Ka3XxLk7uGc=)
                          6: 323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa (hash: /ddX3U8NXjIBjYhZo96FeZgwX0jOgNoPbcGNDwwGg8M=)
                          7: 323830343a326539343a3a2f33332d3334203d3e203532373830.roa (hash: p2vhqVRFPyHcedbaKtwu9lbMOpPO6brEajMmW4gWa80=)
                          8: 323830343a326539343a383030303a3a2f33332d3333203d3e203532373830.roa (hash: ywbbgB82O0+qSwzOEq9uEhI914mbygOMC5wywlaERqU=)
                          9: 3136382e3230352e38342e302f32332d3236203d3e203532373830.roa (hash: JygmHiFd0qTBVj+En84HnPP6U7UPqh8Yc2PM4oQYSik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:64:c1:ba:ae:dc:38:5c:d6:d1:c7:a1:2e:74:bc:1c:ac:a7:77:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
        Validity
            Not Before: Jan 17 18:19:57 2024 GMT
            Not After : Jan 18 20:26:57 2024 GMT
        Subject: CN=CE4A26DBEC210BBC37CDBDC7FB9C830D60D0EB4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:a3:7c:9c:10:87:3d:bd:01:55:67:e0:b9:
                    da:22:e7:90:aa:2e:67:51:cc:37:17:ec:93:15:c7:
                    be:eb:d9:4c:e1:62:da:50:3b:57:75:c8:4c:2b:39:
                    a6:17:83:63:18:5f:c4:82:21:fd:3b:82:05:ed:de:
                    3b:f0:b4:1e:00:42:d5:6f:f2:76:41:99:cf:ef:04:
                    e8:c8:fe:54:73:c2:51:1e:cf:e0:d3:95:8c:b8:bd:
                    d0:04:c9:ec:ba:c0:e8:c0:c7:ef:ce:af:11:db:4b:
                    91:9b:06:61:68:ea:e4:ef:88:34:98:85:3f:9a:ee:
                    77:5f:6b:53:1c:ba:20:c5:49:6e:d2:0f:d7:a1:0e:
                    f1:77:b5:11:86:52:1b:3c:f1:dd:14:99:a4:b5:96:
                    ce:da:d2:99:86:3e:0d:e4:e9:34:96:2b:de:95:c0:
                    ba:f2:a9:74:2e:a1:99:08:07:06:0c:8e:34:53:c1:
                    c2:59:32:61:22:9c:48:36:6f:ef:61:71:2b:4a:f8:
                    0a:9a:78:88:c9:1d:35:3f:25:9a:d8:cb:0c:c3:ad:
                    10:cc:b1:91:dd:98:b9:d3:43:08:b5:3c:a6:64:75:
                    76:da:e0:63:18:a5:b5:b8:95:a7:d5:26:aa:62:53:
                    b0:20:d8:16:e2:fc:74:0b:ef:05:fa:1c:0b:d1:63:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:26:DB:EC:21:0B:BC:37:CD:BD:C7:FB:9C:83:0D:60:D0:EB:4D
            X509v3 Authority Key Identifier:
                keyid:D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:29:cd:9f:0e:15:05:e3:7f:26:16:54:19:1f:42:92:58:be:
         9a:2f:54:64:6e:53:5b:bb:a3:3e:dd:25:26:7b:f9:60:eb:6d:
         3f:87:5c:0f:9b:14:f1:be:ae:85:81:63:cd:30:53:2b:2b:09:
         f8:c3:7d:5b:f9:ee:83:7e:5f:0d:a0:00:e7:dd:e1:fb:b0:87:
         81:33:b8:b9:ec:26:8c:a8:d0:57:0f:2f:3d:07:f4:9e:47:ac:
         86:a4:bd:62:ec:83:c4:a1:d9:b4:24:4e:91:36:f4:5b:8e:39:
         75:47:1c:b0:46:40:b1:06:8c:4a:1b:75:3d:55:b6:ae:9a:9c:
         52:5c:62:8d:77:5b:3c:e5:a9:e6:31:47:76:c2:d1:d9:71:24:
         00:9d:f7:4e:76:e6:59:65:5b:9a:61:5f:6a:99:e2:df:33:51:
         f8:2b:6a:44:a2:80:43:ca:d3:f9:7f:6e:aa:ed:94:03:cf:4e:
         7e:c1:ba:35:ab:dd:d5:5e:05:0f:24:f6:41:eb:6b:43:ea:32:
         f5:e3:7c:16:47:f6:82:2f:ed:0a:df:c6:c0:bf:ac:a0:96:a7:
         a7:cb:10:10:ac:ec:28:27:4b:0c:b0:a7:b3:15:eb:af:7d:ec:
         c7:24:d4:fc:9c:36:09:03:b2:db:36:a0:30:b3:ab:9d:3e:3d:
         cb:c9:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org