Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/4276B533F3F7C999A8C2148429BF062754CDA501.mft
File:                     4276B533F3F7C999A8C2148429BF062754CDA501.mft (raw, json)
Hash identifier:          ermXWcRkU3KSEw04HOTqGllN8qE9EjsfRGpesNjC/m8=
Subject key identifier:   DB:41:7C:81:C7:C6:F0:D2:32:A4:30:A3:1F:C8:EA:D6:45:4B:C1:B8
Authority key identifier: 42:76:B5:33:F3:F7:C9:99:A8:C2:14:84:29:BF:06:27:54:CD:A5:01
Certificate issuer:       /CN=4276B533F3F7C999A8C2148429BF062754CDA501
Certificate serial:       4DED893E68823ACF1C3A26182D3B5FD6D5D82393
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4276B533F3F7C999A8C2148429BF062754CDA501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/4276B533F3F7C999A8C2148429BF062754CDA501.mft
Manifest number:          0D
Signing time:             Thu 22 Feb 2024 11:51:56 +0000
Manifest this update:     Thu 22 Feb 2024 11:46:56 +0000
Manifest next update:     Fri 23 Feb 2024 12:36:56 +0000
Files and hashes:         1: 3137372e38362e3134342e302f32312d3332203d3e20323632383531.roa (hash: hW1uHyIXQEOnyKWo11LfAAzPW1GYbfAbrDBd5TaXzvI=)
                          2: 323830343a313237303a3a2f33322d313238203d3e20323632383531.roa (hash: LXyYr15T7HzUWdfm2Oh3vbL6eZU8ps3vDjtG/tAwWec=)
                          3: 3137372e31302e3134342e302f32312d3332203d3e20323632383531.roa (hash: OOTqVHagAbZNayupu11hhaop2RTrMRTI3pAiEwccZ1s=)
                          4: 3139312e3234322e3131322e302f32302d3332203d3e20323632383531.roa (hash: hXSLiQVcrYhfQnLMdHpqybVqx5PhnM6XT7ByEft2pN0=)
                          5: 4276B533F3F7C999A8C2148429BF062754CDA501.crl (hash: /v08XGhWGzL/ypO9aPXej5QI+jfRZJcozcjNWphWnwA=)
                          6: 3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa (hash: HegYdI0Dl7EB7y174ClNuRsLx3zpcZA2TxAgLA7f3nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ed:89:3e:68:82:3a:cf:1c:3a:26:18:2d:3b:5f:d6:d5:d8:23:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4276B533F3F7C999A8C2148429BF062754CDA501
        Validity
            Not Before: Feb 22 11:46:56 2024 GMT
            Not After : Feb 23 12:36:56 2024 GMT
        Subject: CN=DB417C81C7C6F0D232A430A31FC8EAD6454BC1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:6e:53:73:48:f1:01:dc:29:91:da:5c:2b:
                    5f:70:e7:00:21:9e:f1:02:3d:b8:25:6d:ca:a1:62:
                    df:44:a0:7a:bf:0a:d3:f8:44:5b:8b:5d:fa:d7:02:
                    3d:a0:57:90:a5:66:50:64:a7:52:c7:74:3f:f5:bd:
                    ed:21:25:14:a8:ef:ee:4c:ca:cc:86:c7:99:e3:f9:
                    e9:93:a6:e6:d4:20:f3:e6:4f:34:f4:90:11:c9:16:
                    a1:6f:f0:54:9e:9b:74:3d:cf:40:10:bd:3a:1c:d8:
                    a8:c7:8a:8f:4d:87:24:cb:32:e0:01:73:bc:95:25:
                    6a:bc:00:1c:51:44:d2:07:ea:18:62:28:7e:be:55:
                    e9:45:e1:f7:22:e9:cb:28:9b:b2:6e:f7:f8:af:92:
                    d1:75:56:18:d0:0c:58:26:b3:da:2f:bc:81:e7:65:
                    47:80:0c:00:42:37:01:20:33:c1:7e:03:6e:f2:f9:
                    ad:9d:00:37:7b:b7:d9:47:a5:85:52:57:4f:52:b5:
                    b7:7d:87:57:2e:45:c3:e4:8f:e6:d7:91:7a:6f:a7:
                    6a:2c:1a:f0:0a:96:0f:7d:e3:8d:eb:f4:b7:72:ba:
                    3b:b7:92:3a:fa:bb:b7:37:81:aa:ea:ba:95:db:7a:
                    03:8a:bf:ee:6f:94:53:bf:cf:a7:f5:a5:9f:f8:e6:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:41:7C:81:C7:C6:F0:D2:32:A4:30:A3:1F:C8:EA:D6:45:4B:C1:B8
            X509v3 Authority Key Identifier:
                keyid:42:76:B5:33:F3:F7:C9:99:A8:C2:14:84:29:BF:06:27:54:CD:A5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/4276B533F3F7C999A8C2148429BF062754CDA501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4276B533F3F7C999A8C2148429BF062754CDA501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/4276B533F3F7C999A8C2148429BF062754CDA501.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:67:0c:04:62:9e:2e:4a:86:ac:8c:5a:26:6a:f3:81:2d:15:
         b7:4e:66:d6:fb:7f:bf:56:f3:a7:de:8c:03:84:6a:1a:46:98:
         05:90:3c:c8:44:2f:37:60:b3:df:8f:5b:d1:2f:df:53:97:58:
         a2:b7:b8:07:c3:5d:2f:63:a6:a3:c7:3d:f1:93:8c:c7:c5:d7:
         8f:52:4e:c9:0b:01:6a:ed:90:bc:aa:31:7f:1e:b1:86:8e:d4:
         21:01:d4:ab:93:7e:6e:9d:ca:c4:1f:07:21:7f:e1:ed:f3:c8:
         f7:6f:a4:3e:4b:d0:cb:70:a6:5a:28:97:d3:79:53:71:15:91:
         e8:1b:8f:5f:05:61:a9:92:40:8e:d6:1f:78:22:36:50:7d:4f:
         94:f5:4e:19:2e:83:38:69:91:5e:84:11:4f:17:d0:08:45:7b:
         8e:4f:0c:20:33:c2:69:76:7b:1f:d8:ca:e1:fb:96:1b:d9:81:
         ec:8f:61:b8:67:e0:b7:22:cd:03:ee:f6:3e:b1:4a:29:27:52:
         6f:62:a9:64:25:6a:14:78:09:86:32:b0:c4:8f:59:ae:65:e7:
         e1:09:e0:6a:de:a8:47:75:a7:41:c1:31:4e:9d:4f:4f:aa:83:
         44:d4:51:63:90:b0:b5:e5:72:2c:30:12:13:35:98:e6:2e:1b:
         69:ba:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org