Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.mft
File:                     AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.mft (raw, json)
Hash identifier:          yQ86/VoKpTs94rJmsqy/Mt2F3IPiY2zxCWLQxbyx/hE=
Subject key identifier:   E7:24:E5:C9:14:C0:E2:D7:82:E6:8F:C0:2A:B6:E3:FC:8C:0E:96:E1
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       18EFAE2774E5E60F147D5134829493278130B3DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.mft
Manifest number:          2A
Signing time:             Tue 23 Apr 2024 13:29:36 +0000
Manifest this update:     Tue 23 Apr 2024 13:24:36 +0000
Manifest next update:     Wed 24 Apr 2024 13:29:36 +0000
Files and hashes:         1: 3230302e31332e38352e302f32342d3234203d3e20323730343430.roa (hash: BeWSRnSUSO2oU4Gq0mibEYx/RDnuV+Qnimp+WgKn1wA=)
                          2: 3230302e31332e38372e302f32342d3234203d3e20323730343430.roa (hash: +LeNCFM8LgU3rxKfmx125gP0QVMnDhYAWiKCRSeNZIM=)
                          3: 323830343a366330343a653030303a3a2f33352d3335203d3e20323730343430.roa (hash: ty5J0iDNdpbHzAmYZJx33LkTLAQDImtSJ6AJbKMSen4=)
                          4: 323830343a366330343a3a2f33342d3334203d3e20323730343430.roa (hash: CbgovC4TkeruAWYyDKyV/0Z1uPqfk4s7g66A1gNP5zM=)
                          5: 3230302e31332e38342e302f32342d3234203d3e20323730343430.roa (hash: N3uJ9a/eo6KolGm0TXQdK4Wi6NzAGosl2rR0H4kEb+k=)
                          6: 323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa (hash: VgCeVlypIc+o1AgOBjI0aoGVRRxuQ6LoEW/EZuEL4AY=)
                          7: 323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa (hash: mulGzSrr76eRrVXBJ1R7Xf6M5TDiZukPITe+v3PJj+s=)
                          8: AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl (hash: zWxkAkwSwrEbkXMTn1GBPmj6NTupeyFl5RYSqTLC9kU=)
                          9: 323830343a366330343a343030303a3a2f33342d3334203d3e20323730343430.roa (hash: dLGZ33xEEHsbEnQQe/f8m2lqVn8v9a+QpB6Swmhe8BM=)
                          10: 323830343a366330343a3a2f33332d3333203d3e20323730343430.roa (hash: E1ANj/cCYdw8sNAFqg/46cK+4lx63ymFEWF+Syh744k=)
                          11: 3230302e31332e38362e302f32342d3234203d3e20323730343430.roa (hash: IQE3CkhndANRxjyo5ztyeJd9AlWmQ0MmyC5VseDWp5U=)
                          12: 323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa (hash: oAAE8mOAgXNn/uEwRpJtemq4wiFhkeASXtvaLmGdXlY=)
                          13: 323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa (hash: POqeORnnCHEUInB3j59SElWLKlzLfjCk85ZeoKDfmSE=)
                          14: 323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa (hash: gblF7qIG1zRYgBKGuDDFM8F6QRb8EYRktDc7ZAsBunM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ef:ae:27:74:e5:e6:0f:14:7d:51:34:82:94:93:27:81:30:b3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:24:36 2024 GMT
            Not After : Apr 30 13:29:36 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:90:47:c5:3f:96:2f:a3:cf:3e:ae:77:d8:
                    e2:20:3d:a9:c1:38:f3:48:04:7e:ea:ba:d5:db:34:
                    33:52:38:10:f7:30:2f:ce:07:e6:f6:b3:67:be:26:
                    49:35:70:4b:ac:b3:f0:56:da:60:57:b3:73:6b:bc:
                    01:d5:bd:fe:5f:58:bc:ee:73:27:5d:99:c4:28:15:
                    87:bc:6f:d9:96:45:1f:19:d1:a7:ab:01:64:4f:47:
                    42:68:a3:dd:b6:f2:39:f5:17:7c:33:22:fe:05:0a:
                    11:c1:61:14:1a:85:21:89:78:38:82:8f:4a:4d:4e:
                    eb:9d:11:a8:a6:c8:97:9b:9f:05:20:a0:33:49:f9:
                    65:ba:dc:1c:e1:38:07:d7:98:e3:38:ce:c5:f8:25:
                    d3:9d:eb:e2:9c:a6:2b:66:52:7a:c3:85:41:8a:37:
                    7e:f8:0e:49:a5:41:ad:ac:81:8a:43:70:93:26:af:
                    5d:6d:51:62:b7:02:5f:44:7c:a9:04:6c:a2:5b:5b:
                    94:93:c0:80:8b:56:ef:b7:ac:65:df:5d:f5:18:e5:
                    ca:0e:29:b2:0c:7b:bd:7c:3a:85:4d:77:c7:e3:95:
                    bb:28:c3:e5:17:82:97:06:30:ab:29:04:ba:f4:85:
                    4f:43:7b:c4:33:22:cf:11:f7:73:ee:b3:fe:be:6d:
                    bd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:24:E5:C9:14:C0:E2:D7:82:E6:8F:C0:2A:B6:E3:FC:8C:0E:96:E1
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:d3:4c:ad:37:49:88:50:98:b1:98:e8:90:47:70:91:32:
         cc:6a:39:85:42:64:2a:26:cf:c3:a1:4a:98:d0:89:e1:a0:b4:
         49:46:ad:94:37:99:cd:6a:7a:b9:a5:1d:49:7c:4b:7a:98:69:
         9b:33:02:5a:90:56:21:2b:a2:4b:04:18:a5:1d:ff:1c:d2:8e:
         a2:61:d6:b3:a6:44:b1:70:95:09:66:8e:19:b5:e0:8f:60:3d:
         07:62:49:40:bb:ca:48:43:d6:5b:c1:ed:82:df:ed:ea:33:80:
         b8:80:e1:a1:79:4d:8d:dd:23:c3:59:8d:c9:af:35:e6:50:05:
         df:7d:78:6f:78:80:82:5a:36:49:af:8a:65:16:c5:c2:33:c5:
         3f:1d:83:31:42:a9:a8:9d:60:6d:2b:a1:ba:b5:12:dd:c4:24:
         9e:fe:c1:dc:e1:d0:2a:82:7f:03:e4:38:84:09:36:d4:6d:da:
         55:72:72:e3:b0:43:81:7b:5f:95:ad:80:35:84:f3:e6:38:7d:
         3a:0e:10:d1:e6:26:b6:07:22:b2:d4:18:49:c0:a5:9e:5b:16:
         71:4e:79:71:e5:ba:d1:95:4f:f1:c3:b3:81:ca:11:47:57:d1:
         99:e9:f0:21:6c:22:39:8d:a2:90:38:06:db:e7:6b:0a:b6:fa:
         0a:3b:3a:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org