Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.mft
File:                     EA8C27663AB4EE960A9C52C7193BD353B940D514.mft (raw, json)
Hash identifier:          LQWc1QxftbDWGDhzGSf1od/vZdlXbyrGhNSuOy8H7sk=
Subject key identifier:   70:E9:76:04:41:99:37:D7:C9:F7:82:21:D1:F6:EC:51:6B:C3:2A:27
Authority key identifier: EA:8C:27:66:3A:B4:EE:96:0A:9C:52:C7:19:3B:D3:53:B9:40:D5:14
Certificate issuer:       /CN=EA8C27663AB4EE960A9C52C7193BD353B940D514
Certificate serial:       11CEF7591BF1BBD92349D9E627EA10700750BA89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.mft
Manifest number:          02
Signing time:             Tue 30 Jul 2024 21:36:25 +0000
Manifest this update:     Tue 30 Jul 2024 21:31:25 +0000
Manifest next update:     Wed 31 Jul 2024 22:37:25 +0000
Files and hashes:         1: EA8C27663AB4EE960A9C52C7193BD353B940D514.crl (hash: NP3duxS7qyl/tqyHuDI88ezubNEFFyxk24jntLcKGLI=)
                          2: 3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa (hash: Jfaxgkt0XrPSaOyaUbDIlk4LvEsJuGC5/PJf4K8oiHM=)
                          3: 3134332e3133372e3138382e302f32332d3234203d3e203533313037.roa (hash: YJ4+93oxRR8wKisbQ+JkuBocxeCXwStc0V1fDEcw6Vs=)
                          4: 3138372e3130382e3139322e302f32302d3234203d3e203533313037.roa (hash: 8B4y0EzbB6x/lj7vtsEbQLqxVohmFWhnV/v3OK4X4hk=)
                          5: 3133312e3130302e32342e302f32322d3234203d3e203533313037.roa (hash: Ij6tfM+nErrLXXAJaCgfAkO0MAWUUy7u+DxIgav8uw8=)
                          6: 3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa (hash: Te8MZRYSljlpXskV7dudVek3QT90SfftQpzYI4DV5HM=)
                          7: 3137372e39332e3130342e302f32312d3234203d3e203533313037.roa (hash: TVTmb+hFk4FdXex9xFom/YM7QhT0l6pfFOqt/DnbJT8=)
                          8: 3138312e3139312e3230382e302f32322d3234203d3e203533313037.roa (hash: SbLSwau6SiHBMUABsIi2MAvEX0Zd2E9KaGS36linHhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ce:f7:59:1b:f1:bb:d9:23:49:d9:e6:27:ea:10:70:07:50:ba:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8C27663AB4EE960A9C52C7193BD353B940D514
        Validity
            Not Before: Jul 30 21:31:25 2024 GMT
            Not After : Jul 31 22:37:25 2024 GMT
        Subject: CN=70E97604419937D7C9F78221D1F6EC516BC32A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8b:73:00:56:f6:aa:8c:be:21:09:5f:99:61:
                    17:31:15:44:38:dd:94:c8:3b:ca:5e:dc:21:72:65:
                    d2:93:ce:81:24:9a:eb:00:7d:2f:2e:71:e1:83:a6:
                    94:10:83:dd:95:19:5e:6b:5d:3e:dc:7a:09:91:88:
                    7c:05:a4:c3:a2:6b:82:25:5a:6f:dd:03:02:01:08:
                    a8:50:d2:d1:f9:dc:c3:d8:23:58:b5:77:ce:5f:3e:
                    dc:ab:36:e6:a9:5e:01:d7:6e:2e:2b:73:fa:51:76:
                    90:cc:a0:91:12:1e:86:0b:05:fb:a1:0f:87:5c:55:
                    07:28:f8:1d:ba:8d:72:83:e7:ab:88:22:1e:10:0f:
                    26:9b:80:0f:c2:6f:19:14:a7:45:50:d1:e9:f9:18:
                    66:12:e8:56:55:2b:9c:a5:9f:f0:7c:97:fa:a7:cb:
                    8e:d3:5a:4f:a2:68:6e:87:00:47:e6:73:f8:bb:50:
                    47:03:0e:a7:9f:08:53:ff:8b:d1:cc:a1:11:33:14:
                    7d:6c:f5:3f:f5:80:70:67:19:1d:8b:d4:1c:30:57:
                    97:5d:7c:7b:5c:36:d3:6f:8f:17:1a:15:ad:b2:61:
                    65:94:a3:b9:91:52:7b:87:42:e0:a4:af:04:00:27:
                    f4:18:b9:ff:7b:5e:c3:d4:90:03:7d:0b:92:0e:c6:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E9:76:04:41:99:37:D7:C9:F7:82:21:D1:F6:EC:51:6B:C3:2A:27
            X509v3 Authority Key Identifier:
                keyid:EA:8C:27:66:3A:B4:EE:96:0A:9C:52:C7:19:3B:D3:53:B9:40:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3a:21:7b:8f:df:61:48:fd:fa:3b:18:de:5e:76:9f:e2:ed:
         c3:14:55:8d:82:ca:18:5c:20:4d:cc:b7:35:ef:fe:c5:61:17:
         a6:55:0d:cd:47:3a:65:37:89:7d:45:d7:e5:8a:78:1d:c8:c6:
         5a:c6:1d:f9:19:90:49:a3:70:03:17:6b:13:89:5b:46:dc:b5:
         3a:f0:da:f6:77:0f:93:09:af:14:54:b2:cd:f1:79:03:fd:8b:
         12:f9:d8:45:7b:aa:2b:ce:79:f4:2a:1b:c1:15:02:d5:32:9a:
         9b:62:a6:50:cf:3c:7b:78:dc:23:43:38:6a:e4:a6:ca:fc:bb:
         3d:dc:68:8f:4c:fe:1f:d1:89:13:5a:7c:05:f6:d5:99:dd:16:
         6a:e6:ff:f6:a1:2e:cb:65:fc:dd:af:ae:c8:66:6b:33:ca:40:
         0b:be:a3:41:ce:4a:e3:9e:89:ae:3d:d6:36:ff:8a:db:88:1c:
         15:43:a5:77:25:ba:3e:ab:0e:8c:4c:c2:61:c7:93:4f:fc:a2:
         f4:8d:40:20:3e:e4:94:6d:3d:dd:75:69:ef:6b:50:6a:c0:a8:
         b4:d4:bc:86:58:f1:66:d0:13:ae:1b:6b:94:b8:82:3e:b6:b6:
         8a:83:9b:73:83:d1:3e:4f:a7:88:57:ed:42:7f:e4:d4:6e:c8:
         9e:a1:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 10:33:50 2024 by rpki-client on console-fra.rpki-client.org