Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/D0B13C6622CD8C38C4C203AF59CBA82004FA4191.mft
File:                     D0B13C6622CD8C38C4C203AF59CBA82004FA4191.mft (raw, json)
Hash identifier:          S99PYVtE1t/b3u0fx1vi8RrmPn52hx0jJRCsRSXCZxY=
Subject key identifier:   21:C4:6A:71:77:C3:22:89:CC:5B:C6:DB:B8:E6:95:9A:13:D3:FA:46
Authority key identifier: D0:B1:3C:66:22:CD:8C:38:C4:C2:03:AF:59:CB:A8:20:04:FA:41:91
Certificate issuer:       /CN=D0B13C6622CD8C38C4C203AF59CBA82004FA4191
Certificate serial:       60D9BE5112AEA62E9AC8FF0EAA821CF54603F623
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0B13C6622CD8C38C4C203AF59CBA82004FA4191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/D0B13C6622CD8C38C4C203AF59CBA82004FA4191.mft
Manifest number:          87
Signing time:             Mon 30 Sep 2024 13:07:14 +0000
Manifest this update:     Mon 30 Sep 2024 13:02:14 +0000
Manifest next update:     Tue 01 Oct 2024 13:39:14 +0000
Files and hashes:         1: D0B13C6622CD8C38C4C203AF59CBA82004FA4191.crl (hash: 07bQ7ELDBMZcYzCX09qQhOxwN8axOrr4HMky4yYwPMM=)
                          2: 34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa (hash: FpkprrrIEyJF15ki/P+i5C1sUidD3HrN9qXahSo+8js=)
                          3: 323830343a356137303a3a2f33322d3438203d3e20323638373733.roa (hash: FfIKBYVsFftOPP/5VTaT9dVtQaadGZk5mblBBbCA6Xs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d9:be:51:12:ae:a6:2e:9a:c8:ff:0e:aa:82:1c:f5:46:03:f6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B13C6622CD8C38C4C203AF59CBA82004FA4191
        Validity
            Not Before: Sep 30 13:02:14 2024 GMT
            Not After : Oct  1 13:39:14 2024 GMT
        Subject: CN=21C46A7177C32289CC5BC6DBB8E6959A13D3FA46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:05:11:4a:f4:09:8d:40:18:5b:16:0e:d8:
                    c8:4a:15:20:6d:c9:09:61:6d:60:5c:52:dd:97:33:
                    04:cb:13:b6:9d:e0:9f:75:e8:75:e6:d9:97:22:a0:
                    87:1e:22:1f:84:79:21:83:aa:9d:08:a8:35:af:68:
                    47:48:ce:8d:6f:91:ae:6f:55:83:3d:c3:51:c4:90:
                    32:ec:46:d9:a7:06:fb:f3:d8:36:2f:19:41:b7:52:
                    38:bf:84:c9:8c:b1:5b:6c:45:12:20:0e:f8:1c:d8:
                    4a:f1:a6:4f:b6:92:29:53:fe:05:9b:99:93:ef:cf:
                    d5:cc:dd:01:64:93:72:1c:1b:6d:3a:e3:72:7e:d8:
                    d9:6f:ca:a5:8a:44:03:c9:c7:47:6a:20:91:6a:7b:
                    20:f2:b5:29:b9:6b:3c:18:53:c5:a4:78:e8:09:e6:
                    39:0b:bd:e2:cc:bf:13:d8:01:26:db:ce:36:71:d9:
                    b0:03:cc:07:45:a2:e7:8c:70:05:67:39:00:2d:73:
                    50:6b:fe:cb:d1:db:97:a1:64:45:05:f4:82:c3:9c:
                    d6:ea:28:c9:ee:22:72:79:fa:3c:27:89:7c:b2:c0:
                    84:36:ea:fc:23:bb:95:5c:1a:fb:8d:f6:af:66:8c:
                    8d:37:49:9a:8d:fb:57:28:50:0f:d5:b7:74:3e:c3:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C4:6A:71:77:C3:22:89:CC:5B:C6:DB:B8:E6:95:9A:13:D3:FA:46
            X509v3 Authority Key Identifier:
                keyid:D0:B1:3C:66:22:CD:8C:38:C4:C2:03:AF:59:CB:A8:20:04:FA:41:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/D0B13C6622CD8C38C4C203AF59CBA82004FA4191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0B13C6622CD8C38C4C203AF59CBA82004FA4191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/D0B13C6622CD8C38C4C203AF59CBA82004FA4191.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bf:fd:c4:c2:17:41:48:53:a4:85:84:65:d9:be:55:76:42:
         b4:f9:7d:40:68:20:2a:fc:d0:79:ba:f4:7b:c7:6d:c7:df:05:
         bc:05:42:05:00:12:4a:48:fa:82:5c:67:e2:43:02:e1:bf:56:
         42:8b:5f:27:55:a8:a1:15:d4:cf:87:13:eb:77:1e:88:22:51:
         b2:65:1c:9c:1d:a3:39:a1:8b:98:09:61:08:3f:83:c5:2e:9d:
         e3:47:4e:25:87:bb:45:be:0e:2b:b8:08:55:a9:93:29:d0:65:
         40:01:de:a8:db:4e:9d:a6:55:5b:39:f9:67:d5:87:54:eb:e8:
         14:d6:e9:dd:95:b2:8b:4b:c4:a2:a4:24:f7:c6:30:81:96:12:
         d4:ae:eb:e8:4b:3f:26:39:02:3c:3b:46:80:66:cf:6c:8a:01:
         0f:97:ba:43:ea:de:b0:aa:26:08:37:32:9c:8c:97:65:66:71:
         41:16:92:8f:f4:33:0a:37:4b:f1:20:67:0b:81:f9:2d:66:9e:
         8b:df:11:71:67:73:0d:60:a0:1a:18:53:43:4f:c5:b0:fc:4e:
         f3:ba:6d:f2:90:83:93:1f:a7:86:85:8e:3a:9c:a3:83:67:ea:
         45:bd:35:1b:e3:96:da:19:3b:9c:19:5c:66:9d:48:6f:22:eb:
         51:09:fd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 21:50:15 2024 by rpki-client on console-ams.rpki-client.org