Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/19A3EFD9D3B5018111423D33561D587A892213EF.mft
File:                     19A3EFD9D3B5018111423D33561D587A892213EF.mft (raw, json)
Hash identifier:          qQfi4/PdoaYHesXodYwUntCMziD6E5mmUbi1Fma3Vlg=
Subject key identifier:   D0:32:1D:DC:8B:F7:A4:BA:1B:5A:1B:FF:45:4F:55:D3:01:6E:1C:C0
Authority key identifier: 19:A3:EF:D9:D3:B5:01:81:11:42:3D:33:56:1D:58:7A:89:22:13:EF
Certificate issuer:       /CN=19A3EFD9D3B5018111423D33561D587A892213EF
Certificate serial:       16C1E8F155DAE7BDC5989CE136DA5D86A5B12931
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19A3EFD9D3B5018111423D33561D587A892213EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/19A3EFD9D3B5018111423D33561D587A892213EF.mft
Manifest number:          0179
Signing time:             Tue 31 Oct 2023 10:11:31 +0000
Manifest this update:     Tue 31 Oct 2023 10:06:31 +0000
Manifest next update:     Wed 01 Nov 2023 12:19:31 +0000
Files and hashes:         1: 323830343a353236633a3a2f33322d3438203d3e20323638353137.roa (hash: +WEk1CyZ5p8cTLb+wkf9LUYCL1O5ApO7PTyqSkcKS7c=)
                          2: 34352e3136322e39322e302f32322d3234203d3e20323638353137.roa (hash: i5If+cYjTpqwdUdejub6zjz0xxm4J4oVeKaDvhghiTc=)
                          3: 19A3EFD9D3B5018111423D33561D587A892213EF.crl (hash: +aprPgU+qvY0gE6ir86zIZrJIk1wAgP9XU7a5Iihkfc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:e8:f1:55:da:e7:bd:c5:98:9c:e1:36:da:5d:86:a5:b1:29:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A3EFD9D3B5018111423D33561D587A892213EF
        Validity
            Not Before: Oct 31 10:06:31 2023 GMT
            Not After : Nov  1 12:19:31 2023 GMT
        Subject: CN=D0321DDC8BF7A4BA1B5A1BFF454F55D3016E1CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:dc:c5:43:72:a0:f4:40:fa:f3:49:e4:22:
                    f3:58:34:73:7f:53:81:0d:a1:be:cd:39:51:48:b9:
                    58:73:4e:c2:42:bb:b8:aa:af:95:28:d2:15:1a:52:
                    cd:f2:be:c7:47:68:a1:9a:47:49:fc:6f:32:2e:26:
                    bf:39:df:f6:8a:e8:8b:9d:ae:4e:4b:96:2a:7d:d6:
                    8e:fb:da:a3:29:f8:b5:1e:0c:84:20:d5:4d:32:dc:
                    b3:cb:78:c2:1d:46:17:a3:72:d9:6f:01:5e:15:76:
                    50:f3:60:9a:85:18:eb:64:02:33:31:27:49:01:81:
                    4a:21:93:60:82:da:b5:69:a7:7f:35:13:c9:ef:a9:
                    c9:90:bf:4d:3b:d8:90:e8:df:fb:ff:d5:2c:b9:e2:
                    91:23:17:64:69:b7:d7:e8:f5:03:17:dd:15:f4:a8:
                    8d:e7:38:85:d1:11:eb:c4:19:3e:e1:bf:6e:0f:e3:
                    cb:fc:aa:14:9b:67:f1:22:8d:8b:36:9e:18:19:f2:
                    fc:08:42:95:9c:96:d7:15:8e:25:01:44:56:31:97:
                    3f:9b:18:05:97:ce:9c:64:d0:c6:7b:be:ac:74:41:
                    01:dc:52:6b:59:f7:ee:b8:c3:a1:29:53:5b:b2:8c:
                    ac:fe:d8:9b:8e:d2:60:96:e1:c4:9f:ae:bb:00:e8:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:32:1D:DC:8B:F7:A4:BA:1B:5A:1B:FF:45:4F:55:D3:01:6E:1C:C0
            X509v3 Authority Key Identifier:
                keyid:19:A3:EF:D9:D3:B5:01:81:11:42:3D:33:56:1D:58:7A:89:22:13:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/19A3EFD9D3B5018111423D33561D587A892213EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19A3EFD9D3B5018111423D33561D587A892213EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/19A3EFD9D3B5018111423D33561D587A892213EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:84:07:df:e4:41:43:c2:66:7d:c9:e0:93:a9:01:d8:9f:
         be:89:96:a4:af:a0:54:b8:e0:a6:64:eb:a6:c7:2e:42:da:34:
         b7:a7:54:86:97:c1:a6:8e:41:1c:10:5e:64:46:6e:09:e1:7a:
         1f:51:3c:1b:c8:cd:ab:65:6a:5f:1d:5d:29:52:08:ae:30:e0:
         17:53:02:c3:42:dc:c4:42:05:55:a9:f6:4a:22:e1:3e:35:36:
         a7:ea:15:d4:ed:3a:8c:78:50:c2:1a:e2:0a:5f:a0:bb:12:27:
         dd:11:8a:d7:b5:e7:7f:5d:14:7c:bd:13:18:5c:a5:63:ef:0a:
         2e:21:93:b0:8a:cb:26:48:64:f2:ad:3f:d8:45:27:1b:56:f6:
         04:99:ac:cc:96:84:56:92:6e:74:72:ba:91:22:e2:fb:9a:84:
         fa:90:44:fe:f9:d0:cf:94:6d:06:ba:99:12:6b:64:6c:ac:7a:
         33:59:da:a3:bd:70:91:a4:cd:9d:86:ee:24:5a:43:40:6a:2c:
         53:6b:59:3d:91:e0:56:c6:d0:94:47:1d:bc:b3:83:30:fa:39:
         67:93:dc:0c:59:a4:ca:09:0e:32:52:c2:31:2e:41:ed:47:c1:
         93:3d:e1:4f:1f:9b:40:c0:83:ef:5a:52:f3:61:65:a9:73:e8:
         f7:28:65:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org