Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.mft
File:                     0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.mft (raw, json)
Hash identifier:          vwQrfA57PmfjWQlV3DaC2MFqdbT+0rTG1Um72DhpEEs=
Subject key identifier:   22:D5:7F:95:0F:58:33:66:0E:69:E0:AD:17:65:6D:A7:C2:E8:95:44
Authority key identifier: 0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3
Certificate issuer:       /CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
Certificate serial:       61F5EC49FE0B7677C801833903D8B2C5A04D4669
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.mft
Manifest number:          0136
Signing time:             Wed 17 Jan 2024 18:25:01 +0000
Manifest this update:     Wed 17 Jan 2024 18:20:01 +0000
Manifest next update:     Thu 18 Jan 2024 19:57:01 +0000
Files and hashes:         1: 323830343a343164303a3130303a3a2f34302d3432203d3e20323637343538.roa (hash: OKrbfV6uYYpKf6zRqbWfj62t1nJYvhX3xALKwEGLSyo=)
                          2: 3139322e3134312e33322e302f32322d3232203d3e20323637343538.roa (hash: KNelAWv7HqQEo9O6dYRplpZqolo8AHjj797LCz3bMoA=)
                          3: 3139322e3134312e33352e302f32342d3234203d3e20323637343538.roa (hash: xmqSCrLs8vHDufiwvFrcE2NuSonfIxq2r/K0ANYbvLg=)
                          4: 0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.crl (hash: T7O5XRER71CuoqidRGooX3Dbr/fJb0Uoeet2hf3MyFs=)
                          5: 3139322e3134312e33342e302f32342d3234203d3e20323637343538.roa (hash: 5ap95aiv2/VnReJC7xyirOOENudRV7s7rh4V0tmJu9s=)
                          6: 323830343a343164303a3a2f33322d3435203d3e20323637343538.roa (hash: 8ELEb6swQAjR1bUHH5VDXdNGtAf0i4jRMQ7PbAdC0xk=)
                          7: 323830343a343164303a383030303a3a2f33342d3335203d3e20323637343538.roa (hash: XwPUnJ632qUrVjx11xHGHJqD78d7HJavga/0qUFKWSU=)
                          8: 3139322e3134312e33322e302f32342d3234203d3e20323637343538.roa (hash: 6FNINUUF14XL+G/Lo3mV/gFxCwcyXDNpmR7ZVSS62gQ=)
                          9: 34352e3138352e32342e302f32322d3234203d3e20323637343538.roa (hash: atqlEzz0S2NPo+vAzxC5Z9DWjO16Tz5r5y2FibR6MRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f5:ec:49:fe:0b:76:77:c8:01:83:39:03:d8:b2:c5:a0:4d:46:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
        Validity
            Not Before: Jan 17 18:20:01 2024 GMT
            Not After : Jan 18 19:57:01 2024 GMT
        Subject: CN=22D57F950F5833660E69E0AD17656DA7C2E89544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:07:8c:8b:df:4b:05:f0:6f:3c:55:20:0d:
                    d3:eb:ed:e1:93:b2:d3:73:6f:9c:28:8e:01:9a:7a:
                    98:33:71:69:00:50:41:5d:57:10:db:86:a3:82:43:
                    33:ad:bd:49:b0:c3:0f:73:7d:2c:87:64:53:3b:16:
                    2d:89:16:2a:65:36:80:b6:cb:28:2a:ab:ea:bf:a0:
                    2f:cf:88:2c:14:da:7e:36:b7:fe:d5:66:f7:ed:77:
                    17:63:30:b6:4e:59:ca:ac:04:5c:df:7f:06:dd:49:
                    12:0c:00:e1:f2:29:e4:0b:43:e9:04:65:dc:68:5f:
                    6c:ba:2a:c2:d5:cd:ef:3c:bc:f7:a3:4f:ec:c9:06:
                    d3:bb:ce:ac:dc:ca:37:0b:2b:a6:da:e1:1d:c8:c6:
                    92:59:65:db:ed:e4:3c:2c:59:03:a7:ff:02:f5:8c:
                    d2:f3:4f:24:5c:9f:66:2b:50:19:62:9d:94:a3:d4:
                    5d:49:79:fb:ba:9b:60:cb:fa:76:49:0a:94:ec:da:
                    4a:26:1a:43:fa:43:92:a3:ca:de:1c:e7:cd:5a:2f:
                    f6:48:0b:b8:35:df:90:e9:1c:07:d0:1f:4f:f2:cb:
                    8e:c6:98:b4:95:99:e4:cf:e9:a0:7e:94:ba:8b:70:
                    1a:8b:ba:48:01:cc:11:a2:ce:9e:83:d2:d6:57:fa:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D5:7F:95:0F:58:33:66:0E:69:E0:AD:17:65:6D:A7:C2:E8:95:44
            X509v3 Authority Key Identifier:
                keyid:0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fe:0c:80:fe:bd:d8:2f:03:f9:12:cd:24:3e:8e:71:00:4d:
         df:31:ed:43:1d:e7:d2:d3:ac:03:8e:84:e7:43:7a:81:56:81:
         7b:70:77:b5:2b:2f:56:c9:12:07:22:7a:5d:ed:08:49:2c:40:
         01:65:40:c5:ea:37:bc:1b:a4:ac:0a:c4:a4:64:58:be:53:f3:
         dd:ca:3a:d8:ff:31:91:d0:37:54:99:e8:a3:c6:1d:95:44:3f:
         55:72:b6:14:1b:ab:69:ce:6d:e2:0e:5f:e3:13:fb:28:34:63:
         44:63:97:38:42:25:7d:22:79:5a:ba:eb:91:e6:24:71:45:32:
         35:3b:2c:12:ee:20:a0:f0:a7:93:16:49:0b:20:b8:02:d1:fd:
         01:b4:3f:64:1e:be:7e:a2:db:5c:ef:3a:00:d5:98:ba:ca:35:
         4c:f2:7a:8c:a9:4f:77:f9:54:07:2d:73:19:b5:1c:33:2c:8c:
         ac:af:fb:5e:6a:54:ee:95:9e:6d:0b:f3:8f:88:ca:70:d1:78:
         b2:74:40:54:70:e1:6c:f8:08:e3:34:5c:b8:ba:b8:af:ba:57:
         c5:5f:f3:e1:60:a4:3f:06:81:35:ee:46:be:c7:ff:83:e3:78:
         b6:54:43:70:d9:8b:eb:e9:ff:d8:2e:36:3c:5c:93:f9:76:a6:
         e8:ea:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org