Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.mft
File:                     A0BF85CC725AB0146D68A5F44D34D10750540EF3.mft (raw, json)
Hash identifier:          Ep3N/K6c6ACUg9mCqLVbwPvEJ+1Vdu4valrtUt6qWKU=
Subject key identifier:   9D:00:02:11:A1:FD:58:B4:24:70:BA:6E:FB:2B:E7:26:F1:30:A6:27
Authority key identifier: A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3
Certificate issuer:       /CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
Certificate serial:       2A150CEDFA00809F51E7B679FF5752A9955BE2B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.mft
Manifest number:          4A
Signing time:             Mon 25 Mar 2024 12:10:43 +0000
Manifest this update:     Mon 25 Mar 2024 12:05:43 +0000
Manifest next update:     Tue 26 Mar 2024 13:57:43 +0000
Files and hashes:         1: 3136302e3233382e32372e302f32342d3234203d3e20323637323633.roa (hash: II+DtQARKhQ+NkbAQFp96YcAKBU8NKTKAaQC18sp3zY=)
                          2: A0BF85CC725AB0146D68A5F44D34D10750540EF3.crl (hash: 14FsuiAHHKrTC4S2vIGO3eXDLCY0f/5Q4D3Z9hcHvvU=)
                          3: 3136302e3233382e32362e302f32332d3233203d3e20323637323633.roa (hash: NlAmQiQEdxL0ivxFmWJc6rSR494cm7a8RKdwO3H7enc=)
                          4: 3136302e3233382e32362e302f32342d3234203d3e20323637323633.roa (hash: RbXNiqlM8q5t0c881RbuhLzk1aumsJ9Cq3oCUk4s79w=)
                          5: 3136302e3233382e32342e302f32332d3233203d3e20323637323633.roa (hash: EBPPHZJNHWqT/bF0uFaUFFl8LWkxtvHj38ZZO17Bwnc=)
                          6: 3136302e3233382e32342e302f32322d3232203d3e20323637323633.roa (hash: OYsUnRBPHd57R8gnFhv2h1kUd1E5iULG+naO5Y/ALvE=)
                          7: 3136302e3233382e32352e302f32342d3234203d3e20323637323633.roa (hash: 0toqvEepRLkWoZxH8tmjDAZS8AfX0zQewCNrh8TP6nQ=)
                          8: 3136302e3233382e32342e302f32342d3234203d3e20323637323633.roa (hash: AYQMHiauEgLxyv0vEiF02IcTyxVRoH3ytog4M7nNS9U=)
                          9: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: UqIl4NtY9jN9issBectnT73Jb/k3sYhQ8WPQMAQDTNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:15:0c:ed:fa:00:80:9f:51:e7:b6:79:ff:57:52:a9:95:5b:e2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
        Validity
            Not Before: Mar 25 12:05:43 2024 GMT
            Not After : Mar 26 13:57:43 2024 GMT
        Subject: CN=9D000211A1FD58B42470BA6EFB2BE726F130A627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:92:88:23:cd:da:25:ed:cc:e5:40:74:cb:
                    59:f1:8a:ac:27:11:58:25:9c:d1:e8:c5:35:d8:57:
                    ef:ca:83:d6:45:74:9b:2f:d3:db:3c:90:03:44:80:
                    83:0c:e1:5f:81:7e:23:37:bc:80:3c:89:43:11:82:
                    9f:b7:b0:79:51:bb:3a:92:24:46:12:8b:8a:4f:fb:
                    a2:b3:bb:f6:02:e0:71:b7:ca:26:82:83:4a:bb:22:
                    11:ed:ef:e7:70:db:0c:c2:f0:b6:f7:a3:77:5c:01:
                    57:92:18:8a:ed:f2:28:5c:14:df:b7:52:9e:ee:3d:
                    43:4f:60:b2:00:60:22:19:13:c0:67:7f:02:66:50:
                    6b:41:cf:96:1b:ac:b5:b6:27:a5:11:cc:45:fc:a0:
                    04:e0:92:a8:5f:3c:b6:23:31:23:0f:5c:b1:c3:8f:
                    b6:1a:cb:6c:01:12:5e:a6:e2:07:4f:f5:55:a0:ee:
                    a9:4a:bb:2e:d5:06:2f:75:84:8b:c3:fe:a4:7a:b3:
                    15:ea:49:88:21:28:c4:e4:37:f0:4d:3c:c3:5c:2e:
                    79:51:1c:4c:8e:4b:85:22:2e:6a:7a:e4:9b:c6:48:
                    1a:7d:e8:30:e6:f5:8d:58:f2:45:8e:ce:c8:f7:65:
                    a0:f0:9b:01:32:06:b7:04:ca:d9:61:20:ad:bf:5d:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:00:02:11:A1:FD:58:B4:24:70:BA:6E:FB:2B:E7:26:F1:30:A6:27
            X509v3 Authority Key Identifier:
                keyid:A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:c7:9e:c2:61:43:f3:22:f7:f0:1c:bf:9c:0d:62:c3:d3:
         b5:66:e4:f0:1f:cc:90:cf:c0:71:37:e7:53:e6:24:76:6f:13:
         a6:66:2b:f4:67:97:77:cb:e8:10:af:79:fd:cc:de:4b:e8:3c:
         30:9e:43:57:23:cb:33:40:af:cb:2b:5b:f7:36:b8:9c:06:c3:
         67:15:bd:9e:25:d9:ab:9a:66:d5:1c:55:d3:19:d0:82:6c:cf:
         bc:48:3c:bd:d8:f9:ec:fc:9d:ff:ad:4b:2f:45:d9:db:44:26:
         93:dd:b0:44:e3:7f:9b:50:88:6e:be:eb:ce:db:48:00:8a:d5:
         02:e9:95:4a:ef:6f:a3:81:9b:29:86:84:98:48:c2:5f:31:a0:
         53:4d:3c:dc:3b:f6:08:f1:a2:51:1e:d2:10:b8:f5:68:cd:10:
         42:91:92:b5:48:69:71:7b:cb:22:12:f1:7c:77:c3:4a:cf:7d:
         72:1f:bd:27:34:e4:5c:31:d5:2b:7f:11:26:ab:d7:0e:58:70:
         ad:12:3f:74:ec:9c:e4:b8:63:cd:9e:cd:01:05:fb:38:8d:30:
         d9:0f:ec:f4:3e:78:fa:fa:be:fe:e4:dd:c6:a2:ba:bf:8c:a5:
         0d:42:aa:a4:28:c7:fc:3d:6e:f9:cc:98:3d:6a:e1:07:ef:71:
         9f:9e:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org