Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.mft
File:                     2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.mft (raw, json)
Hash identifier:          Uc7REoStbM3BG1MwHZHNr/4uYeW9Hp6wefvDLvc3ZyE=
Subject key identifier:   EC:09:F4:5C:93:00:A5:FD:22:4C:C6:67:E0:D8:FA:8F:AF:98:49:4A
Authority key identifier: 2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E
Certificate issuer:       /CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
Certificate serial:       205C3434A03A654A6304F4D26B55F91E84BD28F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.mft
Manifest number:          011F
Signing time:             Tue 14 Mar 2023 05:43:33 +0000
Manifest this update:     Tue 14 Mar 2023 05:38:33 +0000
Manifest next update:     Wed 15 Mar 2023 06:36:33 +0000
Files and hashes:         1: 3133382e39392e3133342e302f32332d3233203d3e20323634323135.roa (hash: DFvov+euSV09iGwGUYUUTI6Y0oZcS/dq3YKcqdx19jM=)
                          2: 3133382e39392e3133322e302f32322d3232203d3e20323634323135.roa (hash: D17lPOFvqKaCV7UcGnAPNPn0dY48ymhn/4idRywJWOs=)
                          3: 2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.crl (hash: /TYHX1ZqtApjf3N3Fl9LU5d8MhNSw7fDs5qi4wTJk2M=)
                          4: 323830343a323435343a3a2f33322d3332203d3e20323634323135.roa (hash: EOJqfaoJQXGbsr8O+eWA7KSQIhepEAwuwlB5Brf5M5M=)
                          5: 3133382e39392e3133322e302f32332d3233203d3e20323634323135.roa (hash: U3OMkH33hD15TvzByWdoyygbUkV1eghP0QOL03iCFPY=)
                          6: 3133382e39392e3133322e302f32342d3234203d3e20323634323135.roa (hash: p4MgDGpqJUvzySFXKNmZgomawarRJnwy9vCIbnUoWEs=)
                          7: 3133382e39392e3133332e302f32342d3234203d3e20323634323135.roa (hash: Ft8MVCLS0NGSaHYhV01Ri9t4cQLp2MK0tsZ6JuKxsWs=)
                          8: 3133382e39392e3133352e302f32342d3234203d3e20323634323135.roa (hash: fkcmfDIhWsJwLRlKTLjAZbCXrXZFl86Q3xq1uhDUWiE=)
                          9: 3133382e39392e3133342e302f32342d3234203d3e20323634323135.roa (hash: EXrp9ZNJg3vOK3BB7cWAh9jj2pJFKYShdnCJUXfDgLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5c:34:34:a0:3a:65:4a:63:04:f4:d2:6b:55:f9:1e:84:bd:28:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
        Validity
            Not Before: Mar 14 05:38:33 2023 GMT
            Not After : Mar 15 06:36:33 2023 GMT
        Subject: CN=EC09F45C9300A5FD224CC667E0D8FA8FAF98494A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:57:ef:81:49:ca:9d:3d:b5:14:57:4f:70:
                    03:93:4f:01:79:78:a3:2e:40:0e:97:cc:b2:26:52:
                    58:6b:96:e7:11:15:44:6e:5a:1f:aa:64:5f:dc:e1:
                    4c:49:3a:e8:91:8d:51:4c:09:91:71:59:f8:e4:76:
                    3b:5c:52:c4:92:12:10:48:69:61:61:88:8f:2b:d0:
                    97:55:41:f0:d5:e3:a9:2f:a3:7c:d7:1d:c7:8e:98:
                    06:3b:c7:51:3d:43:b9:47:a3:bb:98:39:a8:5c:cd:
                    c9:38:50:10:01:ed:f7:72:69:66:18:82:d3:10:21:
                    90:2b:c6:ad:68:cb:4c:25:c8:d1:fc:7e:2c:8b:8a:
                    8a:da:15:47:15:32:1e:27:9c:51:c1:a0:dd:33:25:
                    03:b3:b6:33:5b:bd:9f:ac:99:ef:23:a3:2a:b5:32:
                    9b:e2:14:89:c2:b8:5f:83:ef:e0:fc:f5:98:77:87:
                    f0:36:90:0e:43:4a:46:59:89:3a:31:d5:e8:02:c7:
                    8f:74:ac:06:bd:a7:35:c0:fc:e9:41:e8:87:5d:f0:
                    78:a0:7d:27:4a:79:a0:27:24:a5:c0:16:68:44:23:
                    c0:ae:0f:80:13:12:9e:7c:7e:b0:f3:c0:87:03:eb:
                    8c:d8:ca:30:b7:d5:1a:c7:74:fe:2c:e6:85:55:a6:
                    d8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:09:F4:5C:93:00:A5:FD:22:4C:C6:67:E0:D8:FA:8F:AF:98:49:4A
            X509v3 Authority Key Identifier:
                keyid:2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6a:a7:4c:98:a9:5c:b4:4c:9a:64:61:3a:0a:67:61:95:06:
         9e:68:ec:3a:d0:a9:bc:15:ea:7c:90:ee:cf:0c:cc:6d:9e:90:
         3f:46:d5:b9:51:4a:8c:f3:6a:90:dd:fd:6d:54:89:cb:14:b5:
         7a:95:90:6b:c9:37:ad:5f:21:c4:6d:cc:bd:e4:de:c0:b0:ff:
         87:ad:19:96:ac:6b:3c:e3:81:8d:cd:de:5d:8a:53:37:34:f4:
         b9:db:ab:86:c3:05:47:36:e8:4a:b3:9d:9c:b8:1e:ff:b4:2d:
         b0:66:f3:83:b9:c4:70:65:28:f9:48:59:cc:fa:12:36:a8:fe:
         14:7d:d9:20:7f:12:3d:49:41:cb:3c:af:2b:50:2b:aa:46:68:
         c8:4a:1b:7e:6b:d4:f9:d5:6c:ae:89:69:7f:6b:85:b3:4f:d9:
         83:b4:b8:95:0f:e1:9e:92:53:91:86:a1:1a:6a:a3:7c:d6:55:
         2d:63:18:a2:fe:5d:0c:41:c3:2d:59:b1:74:03:37:54:d0:fd:
         21:5b:83:c1:02:df:76:0d:db:82:24:81:bd:78:af:00:ce:95:
         d8:2e:22:7c:89:e2:3d:b0:95:f0:7d:98:08:37:e6:83:df:30:
         fd:bd:2d:f0:01:ff:1d:a7:e8:e3:de:a0:20:15:c0:a9:d0:cc:
         31:d4:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org