Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.mft
File:                     AF3C1DB427F9CE37E3F5083F4418419B6961377F.mft (raw, json)
Hash identifier:          GPd42Pcuc95x7CfWPToXPhqw0fzzqOUAncQkl/qqFS8=
Subject key identifier:   02:25:14:F4:AE:4A:C2:6C:DB:FF:80:E8:E8:80:01:8B:31:DB:61:FD
Authority key identifier: AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F
Certificate issuer:       /CN=AF3C1DB427F9CE37E3F5083F4418419B6961377F
Certificate serial:       0B8B693935F96E3B0F874140E57844230FD756CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.mft
Manifest number:          95
Signing time:             Mon 15 Apr 2024 08:09:34 +0000
Manifest this update:     Mon 15 Apr 2024 08:04:34 +0000
Manifest next update:     Tue 16 Apr 2024 08:37:34 +0000
Files and hashes:         1: 323830343a353636343a3a2f33322d3332203d3e20323637393935.roa (hash: VczGsD2cD7tEYPcenNa5W/hYyGlCY3Yx7KK9or8HVps=)
                          2: AF3C1DB427F9CE37E3F5083F4418419B6961377F.crl (hash: jipwbgrQr5WLp8c+AWHz1V3l7MB9dE4fS4RNJq0OV8I=)
                          3: 34352e3136372e34382e302f32342d3234203d3e20323637393935.roa (hash: y8TcEMSd71zCwrm/UGP7HEPyqPtfc7Xz7m8uFaNcgJ0=)
                          4: 323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa (hash: ywsXW2Ch3DTUbXj69OFAris0RU1Imp9kmOqHY0a2HCA=)
                          5: 34352e3136372e34392e302f32342d3234203d3e20323637393935.roa (hash: iLuePZWvpCW/VfRbPaxyrt5lzM3QqzFx73RqNp0nWNA=)
                          6: 34352e3136372e35302e302f32342d3234203d3e20323637393935.roa (hash: T4M5s/UmYiVBQd71Q1QParql+bmItnU7WkrmiukcAG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8b:69:39:35:f9:6e:3b:0f:87:41:40:e5:78:44:23:0f:d7:56:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3C1DB427F9CE37E3F5083F4418419B6961377F
        Validity
            Not Before: Apr 15 08:04:34 2024 GMT
            Not After : Apr 16 08:37:34 2024 GMT
        Subject: CN=022514F4AE4AC26CDBFF80E8E880018B31DB61FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:c5:f3:16:ce:05:72:00:bf:06:c6:ed:5d:
                    54:fa:8f:37:f0:c6:a3:e9:e3:63:83:ee:9f:a1:63:
                    12:13:f2:41:76:1c:27:ad:7a:d6:e0:3f:7b:33:4a:
                    02:db:ad:7e:cd:a8:d1:11:ec:0a:22:1f:23:cb:8e:
                    0a:01:f6:3d:4b:92:18:8d:28:1f:a9:ca:b3:dd:57:
                    db:ae:6c:c9:d0:23:94:c3:f3:de:15:34:dc:57:8c:
                    b6:69:97:40:d8:b4:8f:d9:97:51:4f:11:14:48:3b:
                    35:9e:06:87:24:7d:ec:f1:0c:1a:28:6d:9f:f1:de:
                    59:25:ec:45:f5:ee:56:d6:98:02:cb:dd:0b:ff:73:
                    78:31:27:d9:76:bd:da:bd:da:78:bd:f0:20:91:85:
                    3c:ac:06:4b:08:5c:6b:2e:97:9b:f2:68:ef:66:ad:
                    aa:2d:79:c7:4b:90:01:fb:fb:41:a5:3a:87:1c:42:
                    62:69:45:b3:c0:05:2d:f4:44:85:a4:19:be:89:bd:
                    70:e7:2a:fc:eb:d1:0e:68:e0:6b:1a:a1:26:17:2c:
                    6a:3c:0a:94:36:7a:39:75:0b:48:3d:18:13:e7:11:
                    88:c7:8a:ae:da:98:dc:fa:1d:56:c9:2b:7f:7f:1e:
                    1c:0f:ef:0d:2c:6e:7e:38:a9:10:d3:be:5c:b6:e9:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:25:14:F4:AE:4A:C2:6C:DB:FF:80:E8:E8:80:01:8B:31:DB:61:FD
            X509v3 Authority Key Identifier:
                keyid:AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4b:a5:21:0d:ed:e9:07:47:e0:ca:3b:9b:aa:0b:34:b9:00:
         86:bf:96:38:f3:9c:d6:46:a6:7f:41:c5:da:0b:61:6c:7b:35:
         89:f7:fb:36:fc:08:63:f8:15:68:32:80:96:5d:80:ca:b8:3c:
         98:9e:57:e0:35:27:14:45:77:3d:c3:3e:83:2f:96:49:0e:56:
         30:91:bb:13:c2:2b:24:1b:3b:fe:b1:9c:4a:ac:5f:a3:53:53:
         5e:83:94:af:33:c5:94:a9:fd:fc:47:65:e3:92:98:7c:49:fb:
         f8:e1:e9:09:c7:9a:f1:c3:fc:d5:4a:85:6e:87:40:e4:e8:4e:
         ae:50:20:58:7f:3b:53:d4:79:69:d2:e9:48:f8:2f:27:11:97:
         90:fd:b7:0a:e8:fb:e6:8e:51:01:93:2f:28:bf:39:db:bd:d2:
         af:51:cd:ee:d3:7b:8e:7d:c7:c2:61:84:31:bd:c0:9b:5f:98:
         14:37:7c:8f:d4:29:c1:c5:32:59:33:e0:6b:dc:76:82:19:55:
         3a:2d:e0:f9:76:e7:71:4a:71:98:26:fe:db:5a:a5:f3:29:0a:
         fb:ec:11:51:70:90:12:c9:fd:80:89:05:b8:41:9e:12:6b:56:
         86:d7:60:43:66:c4:0e:3b:33:ca:6b:bf:76:5c:f2:ed:9a:88:
         ef:81:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org