Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.mft
File:                     CECEE953A375AC085E59078AAB4DC678DA6D7A20.mft (raw, json)
Hash identifier:          Nj3RsJDkDi/evONybJqjjU7lMi8cqa0maWLXPnDCuwY=
Subject key identifier:   1F:3B:D7:F1:1E:A8:4C:A0:D4:F3:C6:10:E5:14:ED:A5:1B:F0:D3:1F
Authority key identifier: CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
Certificate issuer:       /CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Certificate serial:       46483FE027777E1B6827B7502F3D4CF968C09FDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.mft
Manifest number:          02
Signing time:             Mon 25 Nov 2024 13:58:01 +0000
Manifest this update:     Mon 25 Nov 2024 13:53:01 +0000
Manifest next update:     Tue 26 Nov 2024 14:46:01 +0000
Files and hashes:         1: 323830343a316262383a3a2f33322d3438203d3e203631373435.roa (hash: DKP70DohOTt6EWu/NrzCwN04QFOM227bJ5iEZlR1BBE=)
                          2: 3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa (hash: ldDjdOV5UXv0p1/KS1QQx5DdxD6vkCC6hH+RJOwF6/Y=)
                          3: 3138362e3231392e3234382e302f32322d3234203d3e203631373435.roa (hash: X59gq+7tu+EVzpkFI5KPQKmo03apmcxa+bnaZKwipCw=)
                          4: 3138362e3231392e3235342e302f32342d3234203d3e203631373435.roa (hash: Rfn9dkqQtofsAH/afFAmbsAFKJFCvpHKzfP38uldc0I=)
                          5: 3138362e3231392e3235322e302f32332d3233203d3e203631373435.roa (hash: FZ+P+ANyrm4TzevbfPMlgHXIFEujgSSEZThfGzvj/ZE=)
                          6: 3138362e3231392e3235322e302f32342d3234203d3e203631373435.roa (hash: ADSDwyZWDuYSm312FcIv8zR2fLkyhZoKJ07cWDBq3Fc=)
                          7: 3133312e37322e3135322e302f32322d3234203d3e203631373435.roa (hash: 2gUAN6b4daZcMmPCDv+awFMb9tvA5toN7MauMLgGcfI=)
                          8: CECEE953A375AC085E59078AAB4DC678DA6D7A20.crl (hash: Io0XRS5yPq6cmceOUuBNqjZSTTdougiMRO0SWCITFYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:48:3f:e0:27:77:7e:1b:68:27:b7:50:2f:3d:4c:f9:68:c0:9f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
        Validity
            Not Before: Nov 25 13:53:01 2024 GMT
            Not After : Nov 26 14:46:01 2024 GMT
        Subject: CN=1F3BD7F11EA84CA0D4F3C610E514EDA51BF0D31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:07:05:08:52:62:13:aa:dc:78:23:ec:bd:
                    81:f4:5f:ad:23:0c:b4:06:47:a7:37:0a:9e:cf:a2:
                    a7:36:8c:c9:66:aa:42:0d:60:01:df:ce:2f:8e:83:
                    75:35:98:1b:ba:e5:62:11:47:30:e1:a8:32:e7:6f:
                    d1:88:cc:14:1f:64:fa:ab:26:43:29:23:04:c1:4f:
                    ea:2b:6e:57:8a:7a:42:93:ba:58:9b:e5:66:e2:8f:
                    bc:76:64:11:fe:aa:6b:63:91:aa:c5:31:2a:b5:27:
                    05:79:0a:5d:85:1d:21:fb:b9:ca:db:05:2c:0e:93:
                    ec:7d:61:b4:6a:f4:c5:22:5c:a1:35:02:73:5f:f3:
                    11:36:f2:06:11:2b:cb:c0:97:f7:ce:69:7f:9e:9c:
                    fa:b0:a6:b6:b8:6c:f8:e0:52:52:aa:37:9e:40:48:
                    30:9c:48:43:b5:f0:05:28:60:e3:23:e7:a2:2e:5e:
                    08:00:75:46:e3:19:58:4f:22:61:0f:56:3a:b1:aa:
                    21:6e:02:ec:78:3e:61:62:b4:b7:fa:cc:5a:2d:aa:
                    6f:8a:58:a8:91:40:41:6b:16:60:63:a8:75:dc:5f:
                    06:14:1d:1c:16:e7:db:3b:de:e7:b2:d5:49:07:ec:
                    0a:63:60:bd:31:0b:3b:ac:4b:e9:37:6f:bb:1d:40:
                    b5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3B:D7:F1:1E:A8:4C:A0:D4:F3:C6:10:E5:14:ED:A5:1B:F0:D3:1F
            X509v3 Authority Key Identifier:
                keyid:CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:b4:b1:57:7c:62:da:67:f5:44:59:98:eb:9e:74:32:7d:
         f1:af:44:7b:31:fb:7d:3f:a6:cb:88:58:8f:59:5f:fc:6c:dd:
         fe:34:d0:a3:0a:cb:54:9f:89:18:0f:68:a2:96:a6:2c:9d:cb:
         c3:30:16:bd:40:0d:03:7c:39:4e:ce:33:b0:42:d1:67:5f:fc:
         d5:ab:d1:83:75:67:4b:67:cc:10:cf:c2:16:06:f1:8e:9d:42:
         8e:d4:46:b6:0a:03:fe:1b:b4:1d:02:ef:f7:29:5b:99:5c:1c:
         ef:3d:d9:e0:d8:72:07:07:3a:0e:b6:83:cc:08:5e:22:08:f0:
         ab:86:cc:fd:21:0f:c0:a7:a6:56:59:91:07:d4:6a:1b:68:f8:
         b6:04:17:df:71:41:9b:ed:3d:4b:c0:1c:6c:34:b7:a2:df:9e:
         6e:54:13:b7:48:28:d2:ee:8c:ef:af:08:ac:20:9d:cc:c5:d9:
         38:89:f6:41:7d:ce:9a:41:d2:b3:ae:c7:df:5b:4a:3d:ee:61:
         8a:54:71:1c:44:b9:b9:29:6a:95:d2:40:99:01:e2:d7:4e:57:
         6b:72:1a:51:09:15:1a:7e:f8:84:68:b4:ea:1a:02:99:dc:af:
         b9:b0:9e:6a:85:15:5b:9d:b8:ad:27:b0:d4:6d:67:2b:4c:a8:
         00:81:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:53:09 2024 by rpki-client on console-fra.rpki-client.org