Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.mft
File:                     950A0A5A0F2C11779076736FBBCA766C37783653.mft (raw, json)
Hash identifier:          MXY/9xdSysOivxXdcVvCWOaNuWqSHjeGQah0JgxjZUw=
Subject key identifier:   5D:62:50:CE:76:AF:2D:F8:99:0D:81:99:D4:71:C4:78:B2:4B:3C:81
Authority key identifier: 95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53
Certificate issuer:       /CN=950A0A5A0F2C11779076736FBBCA766C37783653
Certificate serial:       7F6ECD7FF9DB0D8FC36F514E8564141B5AEA51C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.mft
Manifest number:          AA
Signing time:             Wed 07 Aug 2024 13:58:45 +0000
Manifest this update:     Wed 07 Aug 2024 13:53:45 +0000
Manifest next update:     Thu 08 Aug 2024 17:13:45 +0000
Files and hashes:         1: 3137372e33372e36342e302f31392d3234203d3e20323632343137.roa (hash: 8leFq+t6NS5LwzqU+yrcgsKKe9S2jl062Ps29R/bMIE=)
                          2: 950A0A5A0F2C11779076736FBBCA766C37783653.crl (hash: kyRZenlE86KzWwdTKmQ9gJuX6Tb7tnrMxmBII4YYryc=)
                          3: 3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa (hash: sF7dr2kUzPOuyj+5+n32gi6KsI/pLQ9/HfJO0IxZws0=)
                          4: 323830343a6532343a3a2f33322d3438203d3e20323632343137.roa (hash: ncCYGMFk649VVWQU38tdB4eWXB+GWGNFGiQWyPLg1oA=)
                          5: 3137392e34332e342e302f32322d3234203d3e20323632343137.roa (hash: 6DI6A5f3uyWUjU4Jv4UpLh0haOVso+raMP+SZCOOhEQ=)
                          6: 3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa (hash: /qteiQPQZenJXmT1DLo/co8WAzozopgajUAARS8H7wk=)
                          7: 3136382e39302e32382e302f32322d3234203d3e20323632343137.roa (hash: d/y67iPgyHfrZchr3UsCsH3kbZMjj5nCPI4W/1C4G8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6e:cd:7f:f9:db:0d:8f:c3:6f:51:4e:85:64:14:1b:5a:ea:51:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950A0A5A0F2C11779076736FBBCA766C37783653
        Validity
            Not Before: Aug  7 13:53:45 2024 GMT
            Not After : Aug  8 17:13:45 2024 GMT
        Subject: CN=5D6250CE76AF2DF8990D8199D471C478B24B3C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:8e:80:e6:e3:f6:65:7e:bd:d9:5d:91:98:
                    74:9e:5d:c4:d0:61:09:13:2d:73:44:19:46:cb:53:
                    b8:a0:b3:51:9f:cc:99:40:d3:11:63:4f:56:c6:a7:
                    8b:e6:11:46:a2:e5:7d:5b:f5:a3:f1:46:52:10:70:
                    c9:a3:f5:17:a1:74:af:aa:90:51:a9:bd:ce:10:1b:
                    3e:b7:4a:ab:b3:ec:7a:f7:60:6f:91:ad:1a:79:68:
                    97:68:4d:2d:0c:4f:f3:bf:3f:d9:bb:72:45:20:59:
                    a1:89:f5:f5:4a:c0:e9:dd:0f:32:98:e3:87:4c:5a:
                    59:61:67:c4:a5:c4:93:de:aa:e4:c1:05:f8:e0:3f:
                    05:80:06:0a:02:31:83:4f:8e:9c:cb:5e:e1:54:47:
                    19:12:43:e3:fc:b1:60:9b:25:d4:7a:a0:41:71:5c:
                    b8:e3:03:bb:32:82:ae:ad:e9:5d:27:2f:a7:50:6c:
                    45:27:74:07:c0:66:a5:39:db:29:f9:45:f6:70:83:
                    62:c6:ad:29:32:9c:58:4c:1d:e2:ec:82:5b:a2:8e:
                    6d:2e:2b:17:4d:8e:77:b3:49:9d:b0:91:5f:03:9d:
                    fd:67:7b:2c:69:26:74:ab:c5:b9:ba:26:fc:7e:cc:
                    9a:87:1c:64:dd:61:68:55:db:34:02:af:e0:c0:1b:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:50:CE:76:AF:2D:F8:99:0D:81:99:D4:71:C4:78:B2:4B:3C:81
            X509v3 Authority Key Identifier:
                keyid:95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:49:80:e6:75:b8:ea:c0:6c:7f:e9:73:5b:5c:fa:ca:ab:bc:
         b4:14:e1:48:53:ad:71:dd:2c:99:82:c3:ed:f1:66:08:3c:73:
         b6:29:f4:d4:82:68:1f:22:42:77:ae:dd:13:95:d8:dc:0d:e2:
         83:ba:40:3d:28:3d:b6:13:6a:3c:f1:bf:a9:dc:79:c8:f9:e7:
         82:c4:2b:9e:a8:7b:d6:c2:c9:28:ef:94:e2:2d:ee:2d:2d:90:
         f1:b4:f0:2d:65:98:a0:f8:e1:0e:4e:87:fd:20:16:5a:71:d4:
         04:eb:20:6a:88:4e:a7:f8:9c:c4:64:36:23:ce:f6:6b:d2:8a:
         63:9d:6f:95:d2:3c:25:65:ba:63:75:a9:29:3f:10:39:3e:07:
         59:93:41:97:e7:49:91:94:5c:34:b0:cf:f3:a7:32:c8:eb:2b:
         43:f2:f0:be:24:e8:67:d0:20:ba:fc:19:17:49:88:03:a6:55:
         2f:7c:2a:44:df:b8:4c:eb:af:ec:fb:4c:9f:23:e3:3c:ee:c6:
         d1:b6:88:90:d0:4b:a9:ac:c7:a0:c9:51:d8:a2:15:b1:5c:bc:
         d1:2f:fe:8f:6c:66:70:fc:27:06:07:f0:cc:4f:6c:fd:8d:ac:
         c2:50:98:a1:b5:79:11:a1:93:93:01:50:24:f3:a5:d3:22:3b:
         14:84:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 14:24:58 2024 by rpki-client on console-ams.rpki-client.org