Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.mft
File:                     CF5DDC6846F108B3778C38774DB09DDC03C92903.mft (raw, json)
Hash identifier:          ivhTEGPerfqo7hdBS2xn9amYtzXHwoNZbN6tt5cCq3k=
Subject key identifier:   A1:90:A6:FE:03:83:96:2A:DE:F5:ED:76:F6:72:E8:E0:37:1D:84:EE
Authority key identifier: CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03
Certificate issuer:       /CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
Certificate serial:       94ED26E1656CCF06985386187D68CA8CBEF420
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.mft
Manifest number:          3B
Signing time:             Thu 16 May 2024 18:10:00 +0000
Manifest this update:     Thu 16 May 2024 18:05:00 +0000
Manifest next update:     Fri 17 May 2024 19:28:00 +0000
Files and hashes:         1: 3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (hash: lOQ1npFMTiE43+AkT1PfePz+6LuPf0uKuscmwqHnWeI=)
                          2: 3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa (hash: FOrL/wWIjh5ofkteOGUblRHep1B6xp5r/1yd7LTmkv0=)
                          3: 3230302e3137302e38302e302f32302d3234203d3e203232333536.roa (hash: pFNtjbdQRMii/xRXQUggeydSo3+DwoF8qyNKYzSMUlM=)
                          4: 3137372e3139302e39362e302f32302d3234203d3e203232333536.roa (hash: qkEcR10Nc9rarPp14G2EZ1H39aywKUK++xmDNI3nMaw=)
                          5: 3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa (hash: j1dquJLZVB/2PEmqe7wRWlKgala+THHxXXymFEwsFsc=)
                          6: 323030313a313239633a3a2f33322d3438203d3e203232333536.roa (hash: AeLWQvv91fGsEZlV5s7lmCLVkwaCNwsbzdfE02ErsnM=)
                          7: 3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (hash: JdHNjz50XyD1tOaGG9ClPcCNzOuBS7igqc+7nr1eYus=)
                          8: CF5DDC6846F108B3778C38774DB09DDC03C92903.crl (hash: sCtoiGaN4e4sh+u77sYxzkP0vBMsoCWOlN/lvuTLydg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            94:ed:26:e1:65:6c:cf:06:98:53:86:18:7d:68:ca:8c:be:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
        Validity
            Not Before: May 16 18:05:00 2024 GMT
            Not After : May 17 19:28:00 2024 GMT
        Subject: CN=A190A6FE0383962ADEF5ED76F672E8E0371D84EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:b1:9f:d2:63:5d:f4:8a:b8:5a:c3:0e:cc:
                    26:c7:4b:46:1d:7e:c7:f2:f1:9d:90:43:35:93:20:
                    31:79:a4:35:b6:fd:ee:12:af:23:e0:d7:6e:f6:3e:
                    5a:04:b0:f7:31:51:56:b9:5c:cd:57:7d:0d:2b:d0:
                    19:ae:49:90:8e:8a:c3:c9:f8:f9:ec:d8:50:11:a1:
                    3b:03:3b:4f:cf:83:96:53:84:8b:be:67:79:8f:06:
                    77:0e:82:59:d0:e9:d6:56:90:6e:8f:7e:23:02:04:
                    be:3f:4e:a0:23:6a:af:c3:d6:2e:8a:76:6b:31:25:
                    22:ad:a8:7a:f7:e2:b5:91:cf:f4:c5:88:36:01:76:
                    84:74:6d:86:12:d2:d7:50:6d:7b:60:4b:d6:2a:7f:
                    1d:14:8b:7b:0b:d5:b7:50:ce:55:17:16:87:fc:b5:
                    13:f1:b8:e1:4c:00:92:92:97:6c:a7:45:c6:ec:a5:
                    43:87:2d:cd:06:4e:5b:56:f0:78:43:bd:11:36:4f:
                    f5:d1:96:8a:3f:40:13:22:3a:ff:e8:3a:e3:40:49:
                    7a:cd:73:48:d2:f0:7e:2c:86:69:86:14:e5:26:c2:
                    de:6c:82:1e:8d:1d:d7:77:05:b0:1d:a8:8f:91:bd:
                    aa:d6:42:9e:a1:7e:94:0b:39:50:3c:81:7c:51:6e:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:A6:FE:03:83:96:2A:DE:F5:ED:76:F6:72:E8:E0:37:1D:84:EE
            X509v3 Authority Key Identifier:
                keyid:CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:96:d7:74:8f:b8:99:e2:bb:f6:7a:72:94:d2:a2:93:61:f8:
         de:37:a6:6b:7d:c2:cb:12:3c:51:1a:44:fc:12:4f:92:f3:5a:
         46:fe:93:60:f1:fe:6e:b7:56:25:a7:9b:54:6b:08:13:f6:bd:
         48:6a:b6:21:c4:93:49:1d:64:f6:2a:ba:5b:51:8f:0c:0e:34:
         0c:11:f7:44:0a:17:c7:78:2d:7c:0e:1f:a4:d4:72:66:a5:9c:
         b6:66:79:cc:16:a5:4a:67:1a:dc:0b:ec:fb:58:3e:7c:86:38:
         02:cc:f2:ec:9f:fb:87:89:e3:3a:5a:43:e7:72:0a:93:d9:33:
         e5:76:95:55:7c:25:b7:7a:8c:4d:e8:22:2b:5c:98:33:a7:d0:
         65:46:5f:e3:47:6f:66:d0:84:05:ec:e1:00:af:fc:c7:b8:f9:
         48:02:26:68:f7:8c:3a:87:ea:b8:5a:8a:5d:95:68:b9:21:ab:
         b9:85:65:a1:6a:20:77:c7:ab:65:7a:22:8c:af:e7:8e:08:0c:
         52:83:f8:d7:4d:38:2d:b1:df:b6:a0:5f:96:09:6c:6c:dd:68:
         09:8e:52:2e:c1:5b:7d:e8:58:3d:06:4d:ba:9e:0a:05:2a:85:
         16:74:7a:d5:6e:cb:cb:e9:16:a5:77:77:f8:7b:73:7a:d3:8d:
         23:a3:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org