Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.mft
File:                     9AF759E568BE2FC7F28D74D12598B32A1F937C25.mft (raw, json)
Hash identifier:          W8dVXYOWi6XbDPuWmhLzkeC7ih8YAorN9AnzeGvHXis=
Subject key identifier:   29:0D:85:83:31:E4:35:CA:05:53:3C:87:3A:B0:57:32:47:D8:D9:F3
Authority key identifier: 9A:F7:59:E5:68:BE:2F:C7:F2:8D:74:D1:25:98:B3:2A:1F:93:7C:25
Certificate issuer:       /CN=9AF759E568BE2FC7F28D74D12598B32A1F937C25
Certificate serial:       71489442E76DCB87F9CFDE97BB17E149E143CAC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.mft
Manifest number:          010F
Signing time:             Mon 18 Dec 2023 01:36:06 +0000
Manifest this update:     Mon 18 Dec 2023 01:31:06 +0000
Manifest next update:     Tue 19 Dec 2023 02:05:06 +0000
Files and hashes:         1: 9AF759E568BE2FC7F28D74D12598B32A1F937C25.crl (hash: wEWkTm+dbeB4V7gQ+Tghys01QU+HH3Q332NeqZ+z50Q=)
                          2: 323830343a313164303a3a2f33322d3334203d3e20323633343431.roa (hash: 16Yi/hE1SHUHrcuDdkBDhhAChtf2cVSxlPKkyyw68wg=)
                          3: 3137302e3233332e3136382e302f32322d3234203d3e20323633343431.roa (hash: lSGnGwRnnWGMip2MfMuVGmDWx/Th1a/HucRm+4Af2xc=)
                          4: 3230302e3232352e3130382e302f32322d3234203d3e20323633343431.roa (hash: N9+7OaheN39t9Ac60Cj8hvwLjqxkrU3tjvKoIT0N2l4=)
                          5: 3137372e39312e3132382e302f32322d3234203d3e20323633343431.roa (hash: NiBYE6ffjolscC85mhxLF+DGntFfZ/3a6VMcHad1H4g=)
                          6: 3133382e3235352e3132302e302f32322d3234203d3e20323633343431.roa (hash: Lqu/cenp9Af3qKHYd1TmQNgO+bVlNJQxxy53U1dNXII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:48:94:42:e7:6d:cb:87:f9:cf:de:97:bb:17:e1:49:e1:43:ca:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF759E568BE2FC7F28D74D12598B32A1F937C25
        Validity
            Not Before: Dec 18 01:31:06 2023 GMT
            Not After : Dec 19 02:05:06 2023 GMT
        Subject: CN=290D858331E435CA05533C873AB0573247D8D9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:04:5b:ce:47:d7:d5:24:28:05:88:52:fd:
                    46:a0:53:29:86:7c:2b:77:eb:37:ef:c9:b8:9b:ba:
                    bf:db:20:e2:03:3c:16:02:36:84:fc:e5:47:0b:81:
                    18:e7:fe:e1:64:13:f4:45:58:42:d4:6f:ad:c8:fc:
                    e7:25:46:e7:6f:76:2d:4e:a9:0f:37:10:70:ad:84:
                    03:76:57:20:cc:53:97:4e:84:41:5d:84:19:2c:46:
                    e7:a9:03:2a:2c:a5:47:50:60:4a:1b:b8:08:4b:68:
                    43:51:c8:31:2f:1d:80:f4:09:fb:3c:b1:54:c4:9b:
                    a0:e4:4a:21:da:ef:6b:7a:c2:23:e3:fe:ae:b7:73:
                    cf:25:0e:21:82:6b:40:98:cc:e0:98:d7:dd:fd:b5:
                    2c:40:50:90:62:ca:b9:fa:0d:0a:e0:36:a2:b5:31:
                    78:c0:bc:3f:56:75:d5:97:dd:24:78:88:65:07:ea:
                    7c:1a:df:bc:c7:a6:60:ca:62:60:94:e1:a9:75:dd:
                    f3:96:06:95:56:c7:be:4b:67:3d:eb:a5:24:12:c6:
                    1b:db:4f:25:c8:05:b9:4b:a9:5b:87:d0:eb:bf:d9:
                    35:c0:98:03:aa:90:52:0b:73:24:2a:aa:77:aa:81:
                    be:5f:d7:b1:78:15:8c:6a:dd:b5:8c:9e:0b:68:00:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0D:85:83:31:E4:35:CA:05:53:3C:87:3A:B0:57:32:47:D8:D9:F3
            X509v3 Authority Key Identifier:
                keyid:9A:F7:59:E5:68:BE:2F:C7:F2:8D:74:D1:25:98:B3:2A:1F:93:7C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4d:5c:80:6e:d0:2e:67:78:84:05:47:05:8c:a2:75:08:17:
         51:d2:c3:98:6b:25:60:ef:08:60:ba:d3:80:38:0e:c1:9b:66:
         bd:88:20:bd:39:e1:e5:bf:03:29:a8:04:07:98:05:96:a2:8d:
         d1:d5:0a:48:04:4a:7b:ec:3f:d8:00:18:c8:d4:93:1d:72:ef:
         22:13:e3:98:5d:f8:f5:ab:6c:63:d4:8d:09:80:d3:5b:f1:e1:
         c5:09:24:bd:1f:21:f3:f3:5b:38:a2:7f:c8:1e:00:f0:ce:7b:
         cd:98:e5:8b:3e:ad:ae:1f:25:85:0a:78:09:31:e9:7a:d7:a1:
         4d:76:25:5c:11:a2:38:dc:a7:7d:5b:19:aa:f4:63:76:fe:57:
         4f:78:5c:8a:c3:43:9c:1b:3c:14:dc:f9:38:15:b5:50:4d:b4:
         96:02:1e:c2:aa:ae:b9:05:c3:70:7e:97:e1:33:35:83:4c:4a:
         fe:eb:a9:77:5c:44:31:88:80:28:93:da:0c:1a:f4:b8:a3:f5:
         bd:b0:c4:54:43:aa:77:e3:16:03:36:3a:90:0b:62:3c:83:f6:
         ae:00:54:18:75:31:96:82:08:bd:bf:c4:5a:e8:7e:91:7d:06:
         a3:ea:aa:ab:37:e6:25:38:47:d1:85:ba:f2:e5:ad:6a:32:73:
         8d:12:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org