Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/1672ECB81F741A900DF059529857EC507B6CBA68.mft
File:                     1672ECB81F741A900DF059529857EC507B6CBA68.mft (raw, json)
Hash identifier:          mCzDscxS5zNe9guIESGnja5B+6tQ1kJBlBINWZrlvc8=
Subject key identifier:   4B:0F:25:41:C2:C2:93:A5:CD:21:6D:E1:E1:16:74:8D:6D:AD:4C:EF
Authority key identifier: 16:72:EC:B8:1F:74:1A:90:0D:F0:59:52:98:57:EC:50:7B:6C:BA:68
Certificate issuer:       /CN=1672ECB81F741A900DF059529857EC507B6CBA68
Certificate serial:       63DAA58F3B39069A7007D0D14BC0754F4552A3CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1672ECB81F741A900DF059529857EC507B6CBA68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/1672ECB81F741A900DF059529857EC507B6CBA68.mft
Manifest number:          28
Signing time:             Wed 27 Mar 2024 18:49:24 +0000
Manifest this update:     Wed 27 Mar 2024 18:44:24 +0000
Manifest next update:     Thu 28 Mar 2024 22:44:24 +0000
Files and hashes:         1: 3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa (hash: 46KQra/zBkHK1nFKp7hxw+RCoMFWAkujHwWAHhdEpkE=)
                          2: 323830343a326136343a3a2f33322d3333203d3e20323632363434.roa (hash: kf6oz1tvzF56ZxXNJZpxnL4MUWB2JP4XOOaWJKRgWM0=)
                          3: 3137372e38362e3234382e302f32322d3234203d3e20323632363434.roa (hash: 0RYcH7soU7Xt94r4P0I4jzJdOyFRAMdLzcxcxJiwsGQ=)
                          4: 1672ECB81F741A900DF059529857EC507B6CBA68.crl (hash: JOnwwxXBkDOQ2djQHiWNDbXisnq58GZ/AbsHFj47k/c=)
                          5: 3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa (hash: vNdsktlpgnqH1XTDbSPQbwsWPRuQ0ZTOAgZq6BW6i2s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:da:a5:8f:3b:39:06:9a:70:07:d0:d1:4b:c0:75:4f:45:52:a3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1672ECB81F741A900DF059529857EC507B6CBA68
        Validity
            Not Before: Mar 27 18:44:24 2024 GMT
            Not After : Mar 28 22:44:24 2024 GMT
        Subject: CN=4B0F2541C2C293A5CD216DE1E116748D6DAD4CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:27:14:b6:77:a4:63:34:b5:5f:78:fe:84:
                    ee:f2:0e:cf:6f:4a:5f:f6:75:5c:c7:22:ee:1a:00:
                    f6:c6:eb:92:d2:b0:c0:8b:60:bf:f2:17:72:e3:8c:
                    7d:3f:03:0e:81:2a:ff:1c:16:48:26:14:d7:22:4b:
                    d7:59:a9:df:28:2f:af:fb:87:97:69:47:c2:af:d1:
                    95:af:5f:d6:87:98:ff:b5:03:4b:2b:af:18:e8:d9:
                    62:6d:39:c8:b6:03:cd:84:f6:29:db:73:e5:e3:29:
                    61:77:75:72:77:3e:23:9c:eb:de:ec:e0:95:dd:8e:
                    4a:2d:2b:fd:7b:d4:1d:ac:a0:25:4f:75:ff:72:c8:
                    ac:5c:fb:4a:e1:ee:06:8c:e4:96:90:d1:18:62:38:
                    77:76:55:3c:01:5a:57:e3:41:e3:68:89:e0:35:e0:
                    3e:25:58:b2:85:59:83:7b:28:84:bc:d1:04:b4:da:
                    87:56:ca:12:f3:0b:ae:3e:9d:fa:9d:9f:e2:17:0d:
                    1c:e5:89:92:ab:b8:1e:3f:c7:24:fc:64:55:21:8c:
                    da:7d:93:5e:85:9a:34:bb:4a:80:9d:a8:98:ba:4d:
                    85:9f:8b:90:69:65:48:4d:ce:15:1f:91:8d:78:85:
                    57:6b:5d:dc:08:15:1a:1b:0a:4a:df:b5:06:f3:49:
                    9d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0F:25:41:C2:C2:93:A5:CD:21:6D:E1:E1:16:74:8D:6D:AD:4C:EF
            X509v3 Authority Key Identifier:
                keyid:16:72:EC:B8:1F:74:1A:90:0D:F0:59:52:98:57:EC:50:7B:6C:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/1672ECB81F741A900DF059529857EC507B6CBA68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1672ECB81F741A900DF059529857EC507B6CBA68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/1672ECB81F741A900DF059529857EC507B6CBA68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:69:17:ad:b6:91:82:65:2a:e5:cc:0a:3a:0a:ca:a2:c5:1b:
         a3:4c:f3:b2:17:4a:50:39:8c:42:95:31:8e:67:bd:cd:5f:c5:
         c0:25:af:36:e3:2e:43:9a:62:c3:96:ec:cd:52:7e:6a:d7:5b:
         ba:b1:f0:ac:39:fc:d5:34:be:4c:cd:04:32:ac:f0:14:84:a1:
         89:b1:14:ac:60:6c:38:6a:56:ed:a4:a6:66:9b:cf:a0:e4:d4:
         06:42:bf:37:99:90:16:57:40:22:83:a1:ff:b9:de:1f:f9:aa:
         98:fb:ba:96:bd:a0:2f:e3:75:5f:66:62:f1:96:ee:fa:2c:ae:
         a0:1d:c6:18:ae:b9:be:d9:75:9e:f2:5f:50:09:af:61:80:e9:
         d4:da:47:7c:c3:48:ba:d5:9c:e7:01:cc:63:33:3a:e5:c8:cf:
         50:9c:2e:51:57:eb:40:90:ee:f1:bf:61:05:ee:ab:09:47:cb:
         10:19:5c:92:a0:c9:bf:ba:92:e7:ab:40:fa:9a:2d:84:74:ea:
         38:2d:4b:bd:b2:84:f9:d7:14:37:fd:74:2c:2e:91:de:c1:9f:
         df:3d:16:22:31:f1:69:f0:57:b8:61:fe:de:8f:c3:09:ab:35:
         31:45:d9:f5:9e:ff:f4:9d:d7:1a:ae:91:0e:b4:da:fa:f3:a8:
         76:ae:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org