Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB.mft
File:                     682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB.mft (raw, json)
Hash identifier:          siAcT8W598JDQsC9cmWptcSysJHSJiD0w6gckQ0wcbk=
Subject key identifier:   E5:B5:F1:28:C1:64:F9:A5:B6:1B:59:56:9B:45:DD:23:09:60:75:24
Authority key identifier: 68:2B:BB:73:E9:71:2D:42:AF:6D:FF:1D:CE:31:CE:6E:CA:BE:1A:CB
Certificate issuer:       /CN=682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB
Certificate serial:       56711EBF2D2AF63F109D2B54D2040D55D23DD774
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB.mft
Manifest number:          0166
Signing time:             Wed 01 Nov 2023 19:09:09 +0000
Manifest this update:     Wed 01 Nov 2023 19:04:09 +0000
Manifest next update:     Thu 02 Nov 2023 20:02:09 +0000
Files and hashes:         1: 3137392e3139312e31322e302f32322d3234203d3e20323635343430.roa (hash: RcE/6pRC9zFjIgpBX0RQ1eZlNgALuvStPDmaTQGAI5c=)
                          2: 34352e3232352e3138302e302f32322d3234203d3e20323635343430.roa (hash: j+h240AW2T9a7a3S4O+75LmIoUct55c1YpNs5C1Jidg=)
                          3: 3137392e3139312e382e302f32342d3234203d3e20323635343430.roa (hash: GyFQmXocfNqoTFL+GnENjTsH6BO/wKmY7HuLX6oEH+Q=)
                          4: 3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa (hash: GzdcGvcsXgubVLoxjz9aVrIF0k6OL81zpq9WKX2jDbw=)
                          5: 3137392e3139312e31312e302f32342d3234203d3e20323635343430.roa (hash: TVEb9MIEpaMOvlJArICegyINyRIxKtYRXEBXRRqGyjU=)
                          6: 323830343a333432633a3a2f33322d313238203d3e20323635343430.roa (hash: FrMxYJmdGzKm52kYnwU+IYqb7gizLB4ZuWGVEom5Yk8=)
                          7: 3137392e3139312e31302e302f32342d3234203d3e20323635343430.roa (hash: 6j3F7n0oKAs/Y8atgaDhM/AMfenJV2LJ9UfTzSk0zuY=)
                          8: 682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB.crl (hash: 5Hi2hSZBrvZf0mpcETCK3fOjCJGj6KPKY8rpRzPOxaw=)
                          9: 3137392e3139312e392e302f32342d3234203d3e20323635343430.roa (hash: V+up0F0xb40IVqTON9kyDsZSk/RnNU7kmLZkZYVvRPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:71:1e:bf:2d:2a:f6:3f:10:9d:2b:54:d2:04:0d:55:d2:3d:d7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB
        Validity
            Not Before: Nov  1 19:04:09 2023 GMT
            Not After : Nov  2 20:02:09 2023 GMT
        Subject: CN=E5B5F128C164F9A5B61B59569B45DD2309607524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:28:97:58:be:f9:a7:02:9b:be:fa:12:d4:
                    a5:1f:bd:7d:9d:21:ff:76:48:b7:bd:10:55:3a:18:
                    19:f6:9d:71:d0:14:ae:15:e0:4b:db:9b:b3:e1:dc:
                    cb:6f:d9:08:22:9d:04:a6:55:d9:d1:d9:74:bf:48:
                    d7:db:d6:b3:0f:4b:fb:c3:a2:eb:b4:1d:c7:65:55:
                    d6:11:82:c9:d2:71:da:f3:ce:62:cf:be:eb:59:55:
                    20:73:0b:ea:fc:0c:68:a3:1b:f6:63:89:a3:4b:2d:
                    0c:62:78:f8:e3:12:91:0a:cc:cb:7b:f5:f1:53:37:
                    6a:0b:36:1a:d1:f2:60:2f:24:0f:98:aa:cb:a5:39:
                    22:86:cd:30:1a:07:c0:21:ac:20:b0:5f:ac:69:70:
                    b1:76:de:d3:15:d7:9a:a5:f5:e8:ca:13:0c:8e:ec:
                    ad:de:cc:15:b1:d5:40:7e:ef:96:ab:61:10:4a:be:
                    27:bb:6a:b7:2d:ff:75:d0:6f:47:78:75:8e:ce:ba:
                    f4:ed:74:bc:d0:24:5e:f4:66:2b:7b:e0:24:84:96:
                    93:11:7c:b4:04:65:f0:81:aa:58:90:9e:fe:19:bb:
                    60:47:9a:e4:04:6b:5f:02:85:9f:4c:5f:47:f7:d1:
                    ca:be:95:a9:99:ff:5a:de:5d:d7:15:64:0d:66:09:
                    35:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B5:F1:28:C1:64:F9:A5:B6:1B:59:56:9B:45:DD:23:09:60:75:24
            X509v3 Authority Key Identifier:
                keyid:68:2B:BB:73:E9:71:2D:42:AF:6D:FF:1D:CE:31:CE:6E:CA:BE:1A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/682BBB73E9712D42AF6DFF1DCE31CE6ECABE1ACB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a8:f4:27:ba:bb:f2:3f:38:dc:1c:76:54:0e:a1:aa:fe:be:
         30:a8:5b:c5:af:66:e5:88:24:b1:94:c5:10:49:5d:33:c0:30:
         38:31:3c:46:35:1a:96:5f:6e:81:7a:ff:71:d9:6c:95:7d:f3:
         81:2b:1b:2a:a9:54:b6:d4:c1:d4:e1:47:d8:0f:3b:9a:61:e3:
         86:58:1e:11:52:21:34:c9:d3:07:14:06:38:83:dd:ed:05:2f:
         20:2e:03:9d:da:ff:09:73:21:4d:d6:a5:30:8b:e5:84:18:82:
         08:7e:9e:e3:e1:ff:b3:b6:b7:50:4e:a7:78:d1:b3:2b:b7:8f:
         9f:12:83:41:35:92:fe:ab:dd:5a:a7:2c:b4:d7:67:e6:33:23:
         c0:62:a8:3c:e8:39:b8:8e:e7:17:3d:24:2d:ee:ef:78:91:c5:
         8f:81:e7:66:65:9d:a9:89:bd:44:6b:7f:00:8f:57:aa:f9:cf:
         cf:82:3e:93:b7:52:ec:a0:77:33:24:96:d7:e7:c7:ae:c1:8c:
         79:9b:b7:33:44:1c:c7:db:33:8f:9a:90:c4:18:18:c6:82:97:
         75:cd:52:75:99:44:94:64:c3:90:1b:99:9a:3c:96:20:84:c1:
         92:bf:b6:8d:08:02:d3:3f:d7:67:24:85:38:d2:e5:32:b2:53:
         fe:e7:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org