Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.mft
File:                     BABF8373B6870DD3972724FADB4B240DCE99E90C.mft (raw, json)
Hash identifier:          XDwBvhkwHiB9Za+G2MqJikYl+2OjsvejHDFGJViCgu8=
Subject key identifier:   E5:E7:2D:54:92:D2:D9:2A:C8:94:40:1A:D6:4E:C4:C7:F5:B3:89:31
Authority key identifier: BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C
Certificate issuer:       /CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
Certificate serial:       72709421A626436DD4EBB6A44E183268DEE0F05F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.mft
Manifest number:          33
Signing time:             Fri 07 Apr 2023 08:03:33 +0000
Manifest this update:     Fri 07 Apr 2023 07:58:33 +0000
Manifest next update:     Sat 08 Apr 2023 08:45:33 +0000
Files and hashes:         1: 323830343a326263343a3a2f33322d313238203d3e20323635313734.roa (hash: WV90pHl71tPIemt77/d7zLDSltF3dW4YKLlhAt4mY3Q=)
                          2: BABF8373B6870DD3972724FADB4B240DCE99E90C.crl (hash: /QglE2peFYH1pFxIVtXSNr6ryLbbUR0AfLE76Kn4MRo=)
                          3: 3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa (hash: f9JLIIpYfJplYLh8qkY9a758um15CuidmQzia72NAhE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:70:94:21:a6:26:43:6d:d4:eb:b6:a4:4e:18:32:68:de:e0:f0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
        Validity
            Not Before: Apr  7 07:58:33 2023 GMT
            Not After : Apr  8 08:45:33 2023 GMT
        Subject: CN=E5E72D5492D2D92AC894401AD64EC4C7F5B38931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:53:0e:bc:e4:41:74:cc:ac:c8:25:37:db:
                    b3:7b:c9:86:8d:72:98:1b:92:16:18:4f:e5:39:e3:
                    1f:f0:ff:89:a4:45:ac:55:fb:64:63:ae:89:b9:76:
                    4e:cb:f6:5a:f6:37:49:10:3a:59:b2:be:ec:ec:3d:
                    31:bf:54:5c:86:d8:fa:c7:be:a4:d8:2e:a5:6d:83:
                    c3:52:15:00:66:b3:a4:b4:fc:9c:cc:70:3d:31:2a:
                    93:f4:fc:c6:bb:36:11:35:f7:42:9b:93:35:82:18:
                    1f:d1:52:f8:fd:d0:ec:86:07:58:c2:20:2a:bf:77:
                    42:dd:6c:c5:53:fb:bc:8f:fe:ed:4c:b3:a0:a7:a1:
                    f4:f4:57:f8:7f:48:73:75:29:9b:0e:ac:e5:1b:20:
                    58:08:84:9e:2f:28:3f:8a:c8:c1:57:48:bc:47:e3:
                    52:fb:92:8e:2f:f0:ac:12:cd:12:6f:9f:18:60:72:
                    30:12:0a:0e:b4:66:c3:f1:4f:96:41:c6:7d:f4:70:
                    75:bd:0d:58:c8:ae:9c:e5:34:d0:63:e7:10:80:0f:
                    76:41:f6:b0:9b:de:a7:e3:92:a2:e1:7f:0b:0e:3a:
                    a4:b7:4e:a6:c5:c7:c7:3b:22:bb:25:a7:5c:c2:d3:
                    23:e9:44:94:77:ea:25:2f:08:95:10:ae:53:93:e6:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E7:2D:54:92:D2:D9:2A:C8:94:40:1A:D6:4E:C4:C7:F5:B3:89:31
            X509v3 Authority Key Identifier:
                keyid:BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:68:4e:c9:e3:15:51:9d:77:f9:c3:c3:e1:64:1d:97:a9:71:
         7a:5c:f5:7c:b2:b7:5a:70:d2:71:8d:c4:da:5d:9e:83:45:2b:
         c5:83:cb:b2:51:23:8e:75:71:ef:88:99:ad:d2:5f:b9:bb:f5:
         81:95:20:35:0a:fe:a1:da:d3:22:99:fd:bb:41:93:7f:42:7a:
         5c:5d:3d:93:ad:2a:a2:28:ef:c2:74:5d:76:c7:cd:23:20:50:
         d6:fc:ab:e5:0a:4f:bd:6d:d8:83:a4:a3:ec:b1:7c:f4:f7:9b:
         89:09:34:d7:e1:11:b6:3d:14:32:24:ee:4f:7b:63:af:16:f4:
         09:f9:b7:f7:2a:a0:6f:2a:f4:3a:73:c3:73:ca:c2:5e:8b:e6:
         f9:98:80:80:a0:b0:3b:55:0e:49:ce:55:44:00:5f:77:d7:7d:
         f1:cd:01:a2:7b:01:ed:d4:2e:a3:5d:bf:1f:9f:f7:d4:64:1b:
         b3:c3:f9:5b:a3:ff:35:50:d0:38:9b:c4:a1:f9:59:54:11:7b:
         78:ec:50:1d:30:c2:15:ff:31:40:fd:b9:72:b5:4d:4b:c8:4f:
         9c:a2:f4:ac:ed:8a:fd:40:15:2e:28:45:26:a1:35:9c:0c:f2:
         e4:5a:ed:1e:cc:8a:89:48:0d:e9:0b:be:fc:da:ce:fb:87:87:
         6a:94:aa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org