Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.mft
File:                     7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.mft (raw, json)
Hash identifier:          zJNTq1oSO2TJGmhalpPlxDPPOe8vgGEjVLewEd8g0v8=
Subject key identifier:   D8:A7:21:98:BB:8B:7F:58:D9:96:18:4B:8B:90:59:0F:FB:F8:26:E2
Authority key identifier: 7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00
Certificate issuer:       /CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
Certificate serial:       717556C3ED27549D8764F9200F0BE399ED55FAAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.mft
Manifest number:          67
Signing time:             Tue 21 Feb 2023 08:11:01 +0000
Manifest this update:     Tue 21 Feb 2023 08:06:01 +0000
Manifest next update:     Wed 22 Feb 2023 08:44:01 +0000
Files and hashes:         1: 323830343a333961303a3a2f33332d3333203d3e20323636303430.roa (hash: da2gKWA5bUy+QuQKvNCo12u4BG8DYt32vfMcsOhVnmY=)
                          2: 7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.crl (hash: mMm86iCGG2eE2OjX6fDzPsgHA4av67hmQEcuoidZpwQ=)
                          3: 34352e342e35322e302f32342d3234203d3e20323636303430.roa (hash: ADLus4PfaJz1ue181kciBbWvO8x7v0n75cdwbqlozIE=)
                          4: 323830343a333961303a3a2f33322d3332203d3e20323636303430.roa (hash: o19xUBeRpxBL1tO4pFmHSOu/70bLf0+m6n+CLDage8k=)
                          5: 323830343a333961303a383030303a3a2f33332d3333203d3e20323636303430.roa (hash: oLl7PP7LBSYjaINsXblCYkKjsoccVUTo0DQtgf1OFW8=)
                          6: 34352e342e35342e302f32342d3234203d3e20323636303430.roa (hash: xi8hzISuyWhf/cUF8fS1DENRH1V/IkV0fqsV5vU1uI4=)
                          7: 34352e342e35322e302f32322d3232203d3e20323636303430.roa (hash: HNTjW9d/gBVaTPBm7Dz5Aq5VT5d+z0dOKa9OICu1R5E=)
                          8: 34352e342e35352e302f32342d3234203d3e20323636303430.roa (hash: S2hOJ5pIIrt+PGbUSSZSMBOyX8wTFmDxWs6JNsbmnFM=)
                          9: 34352e342e35332e302f32342d3234203d3e20323636303430.roa (hash: pWcc9xp+j6QotdPE7trsMF4Eqt3jScH39KkFElDDNfA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:75:56:c3:ed:27:54:9d:87:64:f9:20:0f:0b:e3:99:ed:55:fa:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
        Validity
            Not Before: Feb 21 08:06:01 2023 GMT
            Not After : Feb 22 08:44:01 2023 GMT
        Subject: CN=D8A72198BB8B7F58D996184B8B90590FFBF826E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:ba:b3:c3:e8:da:3f:71:ca:e4:dd:cc:6e:
                    45:64:10:cc:51:a8:55:1e:9c:43:c3:52:fa:5c:02:
                    db:6e:ca:df:15:c8:ae:cb:cc:37:b3:a2:d7:18:a9:
                    93:fe:f5:93:8d:58:ab:39:20:14:0a:46:d0:13:5c:
                    68:5f:db:b3:8c:4f:78:23:e7:10:79:e0:ce:c5:c0:
                    d7:19:56:7b:10:4a:8a:e5:bc:db:90:0c:b0:8d:9e:
                    0a:81:a8:ab:eb:ee:d4:7c:8f:94:64:a8:18:3b:38:
                    12:35:1f:d8:0c:5b:47:fa:5d:e3:6d:2e:11:f5:7c:
                    ca:e0:5c:47:ea:96:a5:cb:8a:31:43:e2:77:44:e6:
                    9b:cf:07:7d:95:81:5a:6d:84:ad:9d:db:8c:27:95:
                    7e:2a:da:97:42:80:e9:b2:96:27:fb:1f:90:3c:96:
                    bf:6a:71:db:ca:f4:d0:94:58:85:20:0b:45:f3:93:
                    5b:8d:52:eb:75:3b:57:cd:d5:f9:dd:d8:c5:66:51:
                    a6:2d:37:1b:1b:07:00:52:86:cb:b1:4a:cc:19:7b:
                    d1:c4:4b:d9:d2:bc:35:7c:47:07:80:ab:27:40:96:
                    e5:ac:78:b0:1a:5b:21:ef:58:bf:b0:58:6e:65:2f:
                    db:39:9a:7c:c4:29:71:fd:fa:88:3a:1b:3f:6f:da:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A7:21:98:BB:8B:7F:58:D9:96:18:4B:8B:90:59:0F:FB:F8:26:E2
            X509v3 Authority Key Identifier:
                keyid:7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4b:f2:42:31:88:fd:4c:2f:14:2f:84:53:c9:ec:5d:52:0d:
         c9:d5:28:8b:97:27:77:23:79:a8:30:6d:18:8f:50:ff:3e:95:
         54:c1:98:a4:6d:75:82:aa:0c:1f:77:50:b6:a2:fa:2d:04:14:
         f1:36:33:a5:2c:ff:25:f2:92:0c:99:79:07:66:f7:4d:ad:44:
         ee:e3:77:e9:82:7a:85:04:bc:3a:78:3c:4f:92:ed:7d:8e:70:
         4c:11:c6:1a:09:35:b8:c5:e6:d8:d3:40:4f:39:44:63:00:a6:
         72:30:b9:fc:14:21:bb:df:44:7a:0b:f3:b1:31:0a:a5:94:8e:
         50:e0:bc:d7:2e:1d:e0:57:a4:df:d6:f6:a3:f8:00:4b:7e:20:
         08:17:a9:fb:27:9b:b2:19:9a:d1:32:eb:8f:f0:f8:4b:83:0c:
         c0:bd:12:c5:db:44:b5:88:37:af:58:09:3d:26:00:7a:33:3e:
         a7:ce:38:05:7e:c3:be:15:7b:6b:61:97:12:d0:97:70:26:b7:
         b3:4c:9e:92:97:88:25:ed:6b:a3:a4:10:73:12:b3:52:51:ef:
         6c:df:8c:4f:f9:da:dd:e6:2b:06:46:57:09:ac:f1:9a:dc:dd:
         9b:0d:71:36:0f:27:fa:b5:9b:1e:43:48:2b:2b:63:71:7a:6d:
         aa:0f:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org