Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.mft
File:                     C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.mft (raw, json)
Hash identifier:          kXJapm56AhkMmLQRqccckNLH20+ruyLWuX74rmvlMYk=
Subject key identifier:   18:8B:0E:2B:66:65:5F:FA:51:06:41:3A:18:A0:56:17:FB:E2:C7:CC
Authority key identifier: C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4
Certificate issuer:       /CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
Certificate serial:       1E9C4231D8C15C273DEF5E95AC97025A11A6AFF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.mft
Manifest number:          011A
Signing time:             Fri 01 Nov 2024 08:47:33 +0000
Manifest this update:     Fri 01 Nov 2024 08:42:33 +0000
Manifest next update:     Sat 02 Nov 2024 11:30:33 +0000
Files and hashes:         1: 323830343a313164303a3a2f33322d313238203d3e20323633343431.roa (hash: tzMQjxsRovsLbT4XSovbPUKGmrzFCnH3Uxz2SyO7U58=)
                          2: C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.crl (hash: /UPezM2/rZr3Iqapwo60yHFL6vdbTlicxZ4osNTD0iI=)
                          3: 3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa (hash: 18LPiXHz5Khk7krN+NqvwHWMYoQUtNdHP7+9rDa00nU=)
                          4: 3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa (hash: 32dOpdYst02vAL57xMtq242VYfzID3ExI4n71AWvqoY=)
                          5: 3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa (hash: tB2L2ZXBfcikh3+7a2NN26Mkw44bUaK98kIkyNAWVG4=)
                          6: 3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa (hash: 4KUQ+PxWJ70AQ1IAaIth0SNmMPb3VFBqx7f7bf8wDDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9c:42:31:d8:c1:5c:27:3d:ef:5e:95:ac:97:02:5a:11:a6:af:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
        Validity
            Not Before: Nov  1 08:42:33 2024 GMT
            Not After : Nov  2 11:30:33 2024 GMT
        Subject: CN=188B0E2B66655FFA5106413A18A05617FBE2C7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:d4:04:2f:12:73:df:b1:d8:cb:58:e8:c4:
                    c9:d0:ba:57:6b:ee:71:09:62:59:87:7a:33:8c:c7:
                    83:29:1e:84:ab:02:d6:33:d4:ee:00:b0:e7:42:9e:
                    ea:59:31:36:f9:48:10:a8:2e:a8:f0:75:d2:b6:1a:
                    7e:d0:93:c4:65:e7:89:cd:56:52:8c:f9:e8:8a:bf:
                    b2:6e:ed:96:49:aa:92:3c:6b:2f:0c:33:84:11:ae:
                    e1:9c:ec:5d:9d:80:8c:d2:b7:40:e8:14:36:ca:9e:
                    7c:59:10:f9:0e:31:98:95:af:ec:0a:f8:8e:cb:af:
                    6f:b3:fc:06:e6:ce:f0:4c:1e:08:03:45:e1:db:06:
                    ae:40:ed:1e:0b:cf:23:55:1d:10:30:27:87:a0:58:
                    2f:b2:07:96:58:b3:95:b7:a4:ad:6e:b9:10:d9:6a:
                    2e:3c:69:bb:06:b8:3a:8b:80:e9:ad:07:36:38:91:
                    ff:74:22:53:55:93:c5:48:36:ad:d2:5c:ba:7a:82:
                    63:f3:04:c4:a6:d9:71:8f:ec:10:b1:ac:29:fc:cc:
                    06:c5:29:5e:73:6c:c0:93:78:04:f2:be:f8:11:b7:
                    5d:1d:4a:dc:32:f7:ad:a3:2f:9e:20:ed:13:c5:ce:
                    31:c6:a2:0d:ff:50:21:13:c8:45:e0:72:14:04:2d:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8B:0E:2B:66:65:5F:FA:51:06:41:3A:18:A0:56:17:FB:E2:C7:CC
            X509v3 Authority Key Identifier:
                keyid:C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4a:2c:89:b0:d4:6c:fa:cb:20:41:2b:d2:cd:ca:e8:88:e5:
         72:a5:de:02:6a:8a:a5:64:85:8d:8b:de:d9:0a:a2:bb:e8:74:
         c7:1a:e1:f4:02:0c:c6:c7:ac:1c:f4:15:39:18:0f:5d:86:6d:
         0e:2b:ad:3d:5b:7e:66:7a:d0:eb:f5:59:fa:ef:cc:1d:63:c1:
         d9:e8:bb:f3:5a:10:27:ed:fd:b6:56:b0:32:86:55:a7:bb:37:
         86:2a:aa:ce:39:96:68:35:ef:ae:97:8a:5f:cf:70:35:1e:3c:
         3a:80:c6:63:f0:e7:d7:7a:e8:3c:78:7c:dd:63:70:3e:b4:56:
         d3:17:fb:2a:f6:74:b4:56:19:1f:ef:56:4c:a7:d3:dc:17:57:
         1e:09:9c:9d:4c:2d:83:9e:14:30:ac:7b:fc:a1:c5:72:82:4f:
         ca:5c:8d:87:3c:9d:bc:40:eb:b8:14:f8:a7:4c:a0:1b:ac:74:
         88:5f:08:f9:9e:c9:10:e6:ad:30:ba:16:d9:c5:6c:06:5c:a2:
         99:5b:b6:cc:da:49:08:f3:16:73:65:44:f9:f8:57:30:a9:0b:
         81:92:d5:4b:64:a0:51:ad:31:34:79:40:ff:6e:97:fc:15:a1:
         41:05:1d:02:62:af:14:63:a3:ba:da:a0:e5:f0:b3:03:1b:3d:
         00:7d:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 08:46:54 2024 by rpki-client on console-ams.rpki-client.org