Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/85221691CDF08706BEE1A2A092778521C8204123.mft
File:                     85221691CDF08706BEE1A2A092778521C8204123.mft (raw, json)
Hash identifier:          0aTeN2DpBlTWaCeV1Oqq1sqosh54XGYK2YGEIFnSZu0=
Subject key identifier:   CA:5C:52:05:01:A9:0E:DC:1E:AA:00:D4:DB:6A:17:37:D0:C9:AB:44
Authority key identifier: 85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23
Certificate issuer:       /CN=85221691CDF08706BEE1A2A092778521C8204123
Certificate serial:       14B90D61EA8166DEE455FF5C07233586BA90B3C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/85221691CDF08706BEE1A2A092778521C8204123.mft
Manifest number:          2C
Signing time:             Thu 16 May 2024 10:11:47 +0000
Manifest this update:     Thu 16 May 2024 10:06:47 +0000
Manifest next update:     Fri 17 May 2024 12:18:47 +0000
Files and hashes:         1: 34352e3136372e36382e302f32322d3332203d3e20323637393932.roa (hash: e+dwfKkrr6UkT8UFdlA/vGb1JNxaAuYtOWXYHrezGYU=)
                          2: 34352e3136372e36382e302f32332d3233203d3e20323637393932.roa (hash: 4AG67FMcfoU55pwwnWLN181kT5638GnqZaKzie6agic=)
                          3: 323830343a353635383a3a2f33322d313238203d3e20323637393932.roa (hash: hibE4xkuA7DSsHNpqrxBQP7JlpJKxIwAZg/4mLUWtbw=)
                          4: 85221691CDF08706BEE1A2A092778521C8204123.crl (hash: 2M8XjOULKu0ax1G5R0c2B9pBQMPw75XNSz+VJWm5R3Q=)
                          5: 34352e3136372e37302e302f32332d3233203d3e20323637393932.roa (hash: YlCOqLTuUWpin2yYd7GHu4y83Yu/Z0GW0PMnzFo+N48=)
                          6: 34352e3136372e36382e302f32322d3232203d3e20323637393932.roa (hash: VWvW5x0XHkeZljCLO/i/0eMX0kg0g/7SD0Qux0h2g/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b9:0d:61:ea:81:66:de:e4:55:ff:5c:07:23:35:86:ba:90:b3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85221691CDF08706BEE1A2A092778521C8204123
        Validity
            Not Before: May 16 10:06:47 2024 GMT
            Not After : May 17 12:18:47 2024 GMT
        Subject: CN=CA5C520501A90EDC1EAA00D4DB6A1737D0C9AB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:8a:86:14:4f:e3:e9:4e:86:ba:30:81:56:
                    b7:fa:39:f6:69:f9:01:98:1b:51:98:ff:cb:6d:56:
                    17:8c:e2:d5:22:42:ec:bf:fa:14:ec:4a:73:a1:45:
                    ea:ff:fb:66:f7:da:8a:b6:13:b3:53:ec:62:64:04:
                    a6:09:fa:d0:43:6c:76:eb:f4:76:0e:77:05:96:9c:
                    6e:b0:f3:75:7b:54:65:97:e0:1f:86:cc:c1:f3:86:
                    43:e6:45:30:e5:ef:43:2b:1d:90:38:da:38:86:ec:
                    d8:02:0a:00:0a:88:81:da:eb:10:25:28:12:6f:0e:
                    60:41:77:aa:8a:60:e0:88:98:49:21:21:ed:7d:f7:
                    ff:b5:7d:80:94:57:56:84:78:89:aa:af:3f:78:21:
                    a5:ad:73:19:e8:02:34:85:30:b3:cd:2b:78:d2:db:
                    25:d2:e4:57:af:db:85:6a:1e:7c:50:ce:4e:60:65:
                    60:ce:ae:e9:cd:b8:41:65:2b:8f:ed:eb:24:d6:5e:
                    e7:20:27:5e:00:24:3c:b3:e6:9e:e1:f3:48:5d:b4:
                    c6:a6:7b:4a:22:52:8c:26:31:7b:e7:40:d6:95:e2:
                    70:df:a0:2d:be:d5:e4:f7:00:a8:ef:0a:2b:a7:ce:
                    49:9b:88:d4:0d:f6:f0:50:d5:d6:9f:d3:12:8a:d9:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5C:52:05:01:A9:0E:DC:1E:AA:00:D4:DB:6A:17:37:D0:C9:AB:44
            X509v3 Authority Key Identifier:
                keyid:85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/85221691CDF08706BEE1A2A092778521C8204123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/85221691CDF08706BEE1A2A092778521C8204123.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:90:2d:69:cf:fb:ee:13:b4:4b:eb:c6:cf:e5:17:0b:1c:9e:
         79:17:00:9b:e2:9e:4a:e5:b2:26:59:a6:4f:c0:b2:f1:66:21:
         20:d6:13:36:ce:c9:f2:df:27:4b:b4:3b:96:8c:d1:8e:fb:90:
         57:bf:41:f5:ba:66:ef:8e:5b:f8:e8:af:79:6e:0e:42:8d:14:
         25:00:b4:ee:07:e7:d3:05:dd:bd:5c:d0:ce:b7:84:ad:b4:3e:
         1d:0d:f7:1f:93:0c:21:b2:00:02:69:1c:29:69:8a:f0:4c:8a:
         f4:78:b6:b7:34:99:84:66:a5:a5:2d:38:84:62:20:ce:32:cf:
         16:4e:18:10:68:6b:b4:e9:0e:d8:61:02:2b:97:a9:9c:2a:72:
         93:b3:22:a0:33:bc:8e:10:ef:42:15:2a:ab:2e:25:32:83:17:
         11:0b:f6:72:ca:5d:e9:06:9f:ac:e9:a8:32:ba:f6:e2:1e:8e:
         8b:3a:93:d2:d5:77:f4:18:6d:fc:87:5c:16:85:fa:16:b0:9b:
         47:3e:d6:f0:90:93:ff:94:4f:98:cf:8b:84:8a:47:4b:ef:35:
         c7:bd:ae:94:ed:63:4b:85:cc:5a:f9:2b:a0:c6:4a:c5:d8:0b:
         91:65:88:f8:f5:ff:2a:c8:e5:b1:dd:96:02:40:e5:c2:43:1d:
         db:d2:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org