Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.mft
File:                     28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.mft (raw, json)
Hash identifier:          EEl17QTgqzxZE3DeUSNUz3JqKH9P10n5C5owSedOA74=
Subject key identifier:   43:B1:EE:3F:36:80:BB:55:FE:25:40:0D:CE:2C:F3:45:EF:E7:73:CE
Authority key identifier: 28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC
Certificate issuer:       /CN=28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC
Certificate serial:       DA2518F6E0740F1DACA5112ABC9C39B28E7BFD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.mft
Manifest number:          01D3
Signing time:             Mon 15 Apr 2024 06:00:02 +0000
Manifest this update:     Mon 15 Apr 2024 05:55:02 +0000
Manifest next update:     Tue 16 Apr 2024 06:35:02 +0000
Files and hashes:         1: 3137372e3135342e32362e302f32342d3234203d3e20323632393435.roa (hash: Ge3MCqI50FMqUz2rWAp+TPeu5TYgSrBEVi2dnqlF2/M=)
                          2: 3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa (hash: 6p1yp5lQB/AzxC4lcIqxRRTOc3GsvsV9tC+GOmSizCI=)
                          3: 3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa (hash: uVmNi7/9LpLVWZdNhlI3QzE98Enp0TeEKMAZKp/lYrc=)
                          4: 28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.crl (hash: 1nJ1FG9ftpjUi0ehyYhfbgQOUtkSW8ZdSBcPtpE0ae8=)
                          5: 3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa (hash: DyndSaQ6pSYqdybyAPpkCd3xCrEIsK6330o0mSVF+EU=)
                          6: 3137372e3135342e32342e302f32342d3234203d3e20323632393435.roa (hash: /I2oBwnqMYbpg42m4Zeh/aXvRKZOS0IMTeg+YMmMX7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            da:25:18:f6:e0:74:0f:1d:ac:a5:11:2a:bc:9c:39:b2:8e:7b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC
        Validity
            Not Before: Apr 15 05:55:02 2024 GMT
            Not After : Apr 16 06:35:02 2024 GMT
        Subject: CN=43B1EE3F3680BB55FE25400DCE2CF345EFE773CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:94:6e:78:79:24:e2:9d:20:8f:07:65:13:
                    9a:58:97:84:13:b1:9d:e4:75:ed:80:da:f2:09:0d:
                    b4:fe:70:c6:8a:84:fc:74:16:f2:a2:bc:18:63:84:
                    6f:ef:4d:08:2d:7a:9b:05:b3:b6:8a:c1:1f:bd:95:
                    95:00:e2:95:08:68:04:bb:a9:3e:90:06:c1:79:cb:
                    40:01:32:6d:b1:44:5c:4a:6e:65:5c:4b:e5:90:14:
                    ca:ec:e4:05:25:ff:b5:34:ae:c0:e0:75:f3:b2:19:
                    f6:60:b1:47:34:45:40:fa:d7:f4:62:ea:f4:a3:b7:
                    32:af:e4:2e:8f:f2:9e:27:88:a6:07:a9:28:e2:fb:
                    3c:66:d9:85:87:3d:22:b6:99:2d:28:f2:3a:1f:af:
                    2a:97:11:93:e0:8d:e7:05:fc:7f:35:cd:11:52:7d:
                    f2:ad:fb:56:b6:48:fa:4b:ac:ce:17:1a:96:05:b3:
                    71:07:44:d1:9d:81:c9:a2:25:92:ab:fb:1f:40:f4:
                    57:7c:38:9b:36:ad:8d:97:3b:bd:ed:14:99:5c:a0:
                    50:55:47:07:e9:5a:01:86:c4:59:e6:24:4c:0d:75:
                    4b:66:0e:6a:5b:a5:aa:39:0f:0e:a7:09:f6:b8:74:
                    4d:a2:f2:1e:ae:50:56:e0:ca:e8:8f:a9:da:bb:33:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B1:EE:3F:36:80:BB:55:FE:25:40:0D:CE:2C:F3:45:EF:E7:73:CE
            X509v3 Authority Key Identifier:
                keyid:28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:b9:e3:54:3f:16:16:f7:db:94:45:3f:27:da:ab:7e:d7:
         20:19:e6:98:75:4a:5a:25:b8:89:db:e1:b8:f6:0d:c6:bb:eb:
         3f:1b:50:2a:05:45:47:48:3b:96:4f:ac:4b:c9:cb:fd:d0:62:
         2a:41:9b:45:df:2b:2e:ed:76:98:c3:6c:30:79:4c:67:35:2f:
         69:77:6a:6c:59:05:98:5f:31:10:97:2c:66:f6:c2:9f:b3:0f:
         e5:b8:f8:bf:9c:fb:68:b3:a2:3d:38:ba:19:9d:14:31:5d:da:
         5f:57:14:7b:1a:ec:f5:7f:56:5a:0f:72:67:8f:83:1a:d9:19:
         48:93:32:25:b1:39:f0:0f:59:d2:3c:91:79:81:86:23:a7:eb:
         52:91:36:af:1a:f3:23:dd:b1:ed:39:2d:02:fc:6e:b3:01:0f:
         3a:1d:29:4d:c2:96:99:10:24:fe:d6:3d:fa:bb:0d:df:43:df:
         71:45:50:03:e6:a9:85:fc:97:a8:e9:f4:3d:ec:5d:9f:a0:6e:
         96:71:5a:93:a2:4e:3e:e5:ff:40:64:40:4e:91:c5:4b:01:d4:
         6a:ca:cd:53:9a:46:8d:13:14:87:2d:27:60:96:d1:53:29:92:
         6c:9d:69:d0:57:57:c9:f3:b2:b3:b5:eb:a2:23:7d:6f:51:25:
         f5:1f:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org