Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/14170DD6CE1FF21F242C4902CD91B2917B639648.mft
File:                     14170DD6CE1FF21F242C4902CD91B2917B639648.mft (raw, json)
Hash identifier:          1Nx9ErsizZgWB3OLee8342QXXo2UhB5xnNjir1gcvjI=
Subject key identifier:   5F:80:5B:D5:99:EA:4E:E1:72:8D:D8:C6:DA:E8:BE:28:8A:64:4D:9C
Authority key identifier: 14:17:0D:D6:CE:1F:F2:1F:24:2C:49:02:CD:91:B2:91:7B:63:96:48
Certificate issuer:       /CN=14170DD6CE1FF21F242C4902CD91B2917B639648
Certificate serial:       12837FE4DC238C4805CFBA6523D071D97C22FE0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14170DD6CE1FF21F242C4902CD91B2917B639648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/14170DD6CE1FF21F242C4902CD91B2917B639648.mft
Manifest number:          70
Signing time:             Tue 09 Apr 2024 07:17:01 +0000
Manifest this update:     Tue 09 Apr 2024 07:12:01 +0000
Manifest next update:     Wed 10 Apr 2024 09:17:01 +0000
Files and hashes:         1: 14170DD6CE1FF21F242C4902CD91B2917B639648.crl (hash: z7/D62N4QiAAoBGhWGLzb3zl29iG8A/q4tXXSFQCIDY=)
                          2: 323830343a343431633a3a2f33322d3438203d3e20323637363033.roa (hash: Po0/ZaVt26HHbndKmXqjflWi81N8z76y9KG4f4eWzqU=)
                          3: 34352e37312e39362e302f32322d3234203d3e20323637363033.roa (hash: gcDcP+SD8BbLS0XEwCezjo15CWMEr0h2r7gNy9ePCn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:83:7f:e4:dc:23:8c:48:05:cf:ba:65:23:d0:71:d9:7c:22:fe:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14170DD6CE1FF21F242C4902CD91B2917B639648
        Validity
            Not Before: Apr  9 07:12:01 2024 GMT
            Not After : Apr 10 09:17:01 2024 GMT
        Subject: CN=5F805BD599EA4EE1728DD8C6DAE8BE288A644D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:3f:f8:8f:4c:7d:49:14:f9:62:dc:88:dd:
                    82:06:3d:f7:5d:29:84:bd:9b:d9:89:16:fa:ed:09:
                    4f:06:6d:29:fa:af:fc:f8:1c:ee:72:70:b1:70:b9:
                    47:66:57:12:55:d3:20:30:3b:74:51:0b:f5:dc:03:
                    cd:63:73:39:d4:c5:83:d0:58:bb:2e:a2:d5:b5:4f:
                    a3:3b:80:7e:a7:e5:63:81:0d:90:6d:0b:3d:15:0a:
                    a7:3d:62:d5:e3:3b:28:e5:b4:1b:be:0e:ab:67:47:
                    8c:6b:52:cd:b4:ab:95:33:d2:0d:22:05:ca:d0:03:
                    08:8f:64:88:00:0e:1c:66:e3:11:a5:70:26:17:1b:
                    68:cc:ac:d4:a7:d8:a4:d6:0f:4d:69:dd:f6:0d:cd:
                    a7:62:eb:35:ca:02:bf:6a:a3:f3:3a:48:e4:4b:d8:
                    8d:bb:50:ea:64:b0:d3:a4:d1:ed:85:40:84:40:2f:
                    9c:3d:ae:3d:04:8b:b2:14:40:0c:e5:b0:bb:c7:fb:
                    78:5d:f4:b2:c0:b0:14:7b:65:03:34:7f:e7:74:60:
                    1a:92:e2:13:37:63:6e:62:ce:41:54:5d:68:80:ac:
                    c4:27:83:dc:8a:5e:f4:b9:b7:b0:2a:57:52:9a:ed:
                    67:49:9e:2c:88:09:47:a9:07:3e:f7:13:66:8d:fb:
                    8d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:80:5B:D5:99:EA:4E:E1:72:8D:D8:C6:DA:E8:BE:28:8A:64:4D:9C
            X509v3 Authority Key Identifier:
                keyid:14:17:0D:D6:CE:1F:F2:1F:24:2C:49:02:CD:91:B2:91:7B:63:96:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/14170DD6CE1FF21F242C4902CD91B2917B639648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14170DD6CE1FF21F242C4902CD91B2917B639648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/14170DD6CE1FF21F242C4902CD91B2917B639648.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b0:73:66:b0:63:3e:da:24:1f:86:07:cb:87:b0:f6:fe:ca:
         84:4a:d4:bb:69:76:14:fe:dd:47:5b:d2:a2:50:c6:27:37:8c:
         f8:ee:27:e9:69:e0:c0:cb:ad:0e:09:3a:11:e7:4e:e6:ab:9c:
         fb:e2:43:53:af:70:6d:f5:f3:48:1e:59:16:47:38:d5:9d:90:
         0f:9b:c9:37:74:6b:e7:c7:58:56:41:b6:b6:06:0f:15:3e:95:
         ec:c5:e7:55:2a:f8:47:70:a8:37:ee:b3:fc:0f:82:02:21:92:
         7e:c2:3a:d3:dc:77:7c:3b:a1:a3:50:16:c2:4d:1c:b2:4f:64:
         65:2e:d2:91:8b:16:ab:46:e8:aa:a2:44:d5:e6:60:32:82:20:
         07:6a:94:9d:ef:4a:ac:f3:44:92:bb:1f:82:26:1f:b6:f3:ac:
         55:d4:d7:5a:19:48:e0:d1:da:4e:28:6d:3b:b9:aa:99:e9:95:
         e1:dc:f1:0d:9a:30:66:e1:f9:13:c5:20:d8:0a:90:5b:62:61:
         88:76:06:38:3c:c8:5e:84:cd:81:c4:6b:9c:c0:1d:45:4c:2e:
         d8:1f:c4:3a:87:f0:42:a1:c6:77:2e:ac:52:ea:a5:17:99:37:
         9a:1a:0d:4e:fb:bf:be:b3:2c:a6:b6:ad:bc:0a:54:03:6d:ad:
         81:8b:2f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org