Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/1/3BF0816894682D649428F5DE01F12462BBAF2CBA.mft
File:                     3BF0816894682D649428F5DE01F12462BBAF2CBA.mft (raw, json)
Hash identifier:          kT58FMSGHy6+bRp51C//RcKbB1fRB+/ePzMILH0p3b8=
Subject key identifier:   EE:6C:2D:F5:B9:0C:37:74:12:C9:92:37:D9:61:D9:EF:B9:C4:F9:E6
Authority key identifier: 3B:F0:81:68:94:68:2D:64:94:28:F5:DE:01:F1:24:62:BB:AF:2C:BA
Certificate issuer:       /CN=3BF0816894682D649428F5DE01F12462BBAF2CBA
Certificate serial:       0BDA2AF2AB5D7641A53866F022AC35631A53B588
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BF0816894682D649428F5DE01F12462BBAF2CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/1/3BF0816894682D649428F5DE01F12462BBAF2CBA.mft
Manifest number:          15
Signing time:             Wed 17 Apr 2024 03:34:00 +0000
Manifest this update:     Wed 17 Apr 2024 03:29:00 +0000
Manifest next update:     Thu 18 Apr 2024 03:34:00 +0000
Files and hashes:         1: 3BF0816894682D649428F5DE01F12462BBAF2CBA.crl (hash: xG/wEa4m4tCf0d8cDQQ1Trf49Gn8uACJkx8jE+vs0FU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:da:2a:f2:ab:5d:76:41:a5:38:66:f0:22:ac:35:63:1a:53:b5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BF0816894682D649428F5DE01F12462BBAF2CBA
        Validity
            Not Before: Apr 17 03:29:00 2024 GMT
            Not After : Apr 24 03:34:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:7c:d4:30:f1:96:9e:3e:a3:ae:7a:5a:5f:
                    dd:3a:6b:ce:b8:e8:06:24:5d:95:2f:55:d3:08:1b:
                    42:fe:8e:b8:91:6c:40:83:da:82:31:cb:f0:91:02:
                    96:03:e4:43:51:cb:5f:fc:26:4f:be:bc:6e:79:78:
                    6f:fa:d4:a8:0a:99:a2:27:46:05:d9:a9:ff:e1:66:
                    9a:59:98:40:9b:81:cf:9a:be:95:85:d2:4f:cd:db:
                    6d:f2:91:c9:56:6b:43:0a:ce:27:ce:48:80:21:44:
                    cd:75:fe:d1:fd:91:f3:d3:03:32:38:3e:49:6b:79:
                    fd:c9:cd:7e:9c:cc:25:57:2e:99:ef:bd:9f:fc:b2:
                    a4:dc:ba:db:8c:35:61:65:37:38:c0:3e:be:37:e2:
                    88:a6:50:df:3a:8f:f8:e3:34:66:bb:d2:9e:7a:e8:
                    29:32:38:37:ca:ea:22:40:9b:3a:58:a1:82:23:6e:
                    e1:2e:1b:9d:29:c4:d8:9a:c7:85:3b:f1:07:29:2f:
                    08:69:83:14:39:0c:5d:32:a6:4c:e5:f8:1a:74:d9:
                    43:70:ca:0f:46:18:b2:2f:14:b3:90:ba:62:3d:b0:
                    26:ee:e6:07:be:2e:04:e7:17:d5:d9:a6:98:11:33:
                    26:e2:40:4f:9f:12:d7:ea:e0:fc:4b:cf:af:c5:1a:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6C:2D:F5:B9:0C:37:74:12:C9:92:37:D9:61:D9:EF:B9:C4:F9:E6
            X509v3 Authority Key Identifier:
                keyid:3B:F0:81:68:94:68:2D:64:94:28:F5:DE:01:F1:24:62:BB:AF:2C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/1/3BF0816894682D649428F5DE01F12462BBAF2CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BF0816894682D649428F5DE01F12462BBAF2CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/1/3BF0816894682D649428F5DE01F12462BBAF2CBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:20:0c:fb:a8:a3:22:e0:80:bf:5c:6f:22:4f:e6:20:e2:5a:
         c8:96:82:21:62:f4:83:95:4d:9e:e9:f8:c7:46:fc:a0:08:89:
         42:04:62:ea:54:f3:77:3c:9e:51:82:04:6a:39:ee:06:d1:c0:
         17:11:03:fe:8a:87:19:65:9b:08:2f:38:1b:d5:0f:55:18:3a:
         2f:c4:86:67:63:d0:5e:9f:be:03:dc:7e:25:11:2b:f6:35:00:
         be:d7:1a:2e:e3:39:a9:0b:d4:c7:b3:eb:7f:fd:43:49:f5:42:
         c2:56:c2:bb:ed:c2:c7:7c:ab:75:c5:73:a7:a5:88:84:5d:dd:
         13:a1:9b:dc:af:9f:3a:81:24:90:c3:6d:34:38:96:71:a5:27:
         2e:0a:74:cc:3c:96:40:5a:b9:7d:8c:e3:e8:af:a0:c2:04:34:
         d7:02:65:6e:e7:d3:21:04:3f:3c:1c:7c:54:4c:97:ca:6f:f9:
         37:07:21:24:b0:0e:6b:f1:d1:17:ff:a2:b0:7e:f8:0b:1c:cf:
         e4:13:80:3c:7a:de:19:03:41:57:f8:be:bd:81:2d:6d:e1:6c:
         6b:24:1a:61:27:1c:6a:93:09:36:8a:d0:8c:03:8b:31:be:07:
         bb:f7:0e:61:59:49:13:4e:36:db:be:27:13:e6:eb:04:37:17:
         a8:db:ae:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org