Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.mft
File:                     53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.mft (raw, json)
Hash identifier:          bEdDS4P+wZB/gowjvIAtn2iHQSHkKbtWszisxTWZCUQ=
Subject key identifier:   B1:12:7B:83:F4:F7:57:CC:FE:28:11:76:61:78:BB:E5:48:92:D8:90
Authority key identifier: 53:A0:3A:3B:3F:1F:5E:3F:C7:C9:78:6F:5F:F8:51:AA:51:BF:CC:C3
Certificate issuer:       /CN=53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3
Certificate serial:       72E34AF2F41235D286EB75BBDBE4D8CCD3E5619A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.mft
Manifest number:          81
Signing time:             Sat 23 Apr 2022 22:00:01 +0000
Manifest this update:     Sat 23 Apr 2022 21:55:01 +0000
Manifest next update:     Sun 24 Apr 2022 23:48:01 +0000
Files and hashes:         1: 34352e3233392e31312e302f32342d3234203d3e20323638333435.roa (hash: d2WT2QW84UzXYTPeL5zk1GXep4k9zr/YA2GmlX2L2as=)
                          2: 34352e3233392e382e302f32322d3232203d3e20323638333435.roa (hash: WRkAcld5YfKaQdoQIajHX9ZiirvYU9+mM6dBQSGMsx8=)
                          3: 34352e3233392e392e302f32342d3234203d3e20323638333435.roa (hash: 3BpKYg0qQDDt8IbuGi+vYWhalASXs8ymGnc5s0jzqag=)
                          4: 34352e3233392e31302e302f32342d3234203d3e20323638333435.roa (hash: zULo4AVAQiKF7Kd4RmiJ4tThqHOOQrf/KkZKvGQA/FI=)
                          5: 53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.crl (hash: mmjeyvYTTVl6Ms3YDEUZ3/yGctAoSPX5jsSEl5bXV+s=)
                          6: 34352e3233392e382e302f32342d3234203d3e20323638333435.roa (hash: 3fz6BPc+0rxlJMPgMYFgrL6CRxXjUBlNhaCUgQXSOAY=)
                          7: 34352e3233392e382e302f32332d3233203d3e20323638333435.roa (hash: xRlOwwPuMJWexUG29/VGRPHbWcF1+Skjv9ib3GM0gpU=)
                          8: 34352e3233392e31302e302f32332d3233203d3e20323638333435.roa (hash: 31XpykoYAbIpIRAZQybMNuZjyCNNEwUhgZs/Gx8VcQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e3:4a:f2:f4:12:35:d2:86:eb:75:bb:db:e4:d8:cc:d3:e5:61:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3
        Validity
            Not Before: Apr 23 21:55:01 2022 GMT
            Not After : Apr 24 23:48:01 2022 GMT
        Subject: CN=B1127B83F4F757CCFE2811766178BBE54892D890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:17:68:e6:74:83:b5:94:fa:3a:a1:2d:25:
                    46:26:41:a8:9f:be:4f:24:0d:68:e3:e1:e7:0a:a7:
                    36:ff:52:7f:5d:e0:ab:7d:e5:a7:c2:63:bd:1c:f9:
                    24:40:e0:52:05:79:6c:8e:f1:9c:ce:5d:7f:61:5f:
                    ee:ed:4f:47:60:85:78:5d:cc:50:f7:98:34:61:43:
                    37:04:3f:26:ab:cd:b5:0a:99:49:0c:46:1e:be:b9:
                    15:81:ca:9c:82:40:3f:eb:89:8b:f6:36:fd:10:19:
                    ee:83:12:83:68:c1:ea:77:45:8d:26:a9:70:c0:54:
                    00:fe:c0:93:7a:68:3f:8a:d0:24:ec:ff:dd:22:63:
                    26:81:6a:57:11:75:53:42:2b:a8:76:37:a6:39:4d:
                    12:fe:68:0b:0c:28:64:40:e5:a2:b3:ae:64:34:02:
                    6b:2a:7c:3d:66:d9:0f:46:bb:d7:9b:f3:db:91:07:
                    6c:b1:d7:42:9b:68:a4:04:97:58:04:db:73:8d:f2:
                    29:75:48:5f:ba:62:2f:f7:3f:f6:9b:29:38:c9:41:
                    d6:80:68:ad:75:60:79:9c:ce:e3:1c:0a:01:2a:81:
                    bf:48:57:9d:a9:9a:b5:40:50:b5:e4:b0:80:c9:3b:
                    a8:03:54:1d:9e:f9:53:ea:5e:f4:9d:18:5a:f1:c8:
                    b4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:7B:83:F4:F7:57:CC:FE:28:11:76:61:78:BB:E5:48:92:D8:90
            X509v3 Authority Key Identifier:
                keyid:53:A0:3A:3B:3F:1F:5E:3F:C7:C9:78:6F:5F:F8:51:AA:51:BF:CC:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/53A03A3B3F1F5E3FC7C9786F5FF851AA51BFCCC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:4f:39:e6:a0:08:1d:87:e8:f0:f3:ce:cc:c0:e4:1e:ea:
         14:e8:c5:97:37:d6:d2:95:09:59:cd:17:5c:bd:f6:bb:16:be:
         b4:0b:52:73:b2:f1:49:64:2b:1e:3a:84:c1:82:65:4d:22:b6:
         0c:45:04:3d:98:0d:62:ee:50:1a:dd:a2:bd:5f:33:8c:e0:b5:
         f3:71:d4:fd:32:7a:69:9d:6f:e4:43:b7:5c:c9:90:9c:dc:ce:
         b0:9e:38:9c:86:99:55:e0:8d:77:a7:14:c0:14:53:ab:2c:4d:
         d8:20:e1:b1:9e:b1:41:e9:d8:49:28:52:ae:4c:b5:c6:f5:41:
         c7:4c:15:11:5c:ce:e9:60:43:da:a6:c5:18:e6:23:8a:4e:11:
         2d:77:11:ac:e7:34:94:09:64:28:3f:f6:af:e9:fc:d7:c4:b8:
         c6:84:6e:bf:46:7e:ea:4f:c9:cb:c9:98:08:36:9c:91:c9:45:
         49:33:a2:89:2d:81:fd:9d:81:e9:95:b4:88:7c:15:6f:d5:b1:
         82:10:40:e9:7a:c6:ea:ef:a8:26:ff:3d:a3:12:7d:a5:27:33:
         4c:0a:91:85:b5:6f:c1:3e:b9:69:91:ba:3a:9b:74:93:d4:32:
         aa:fc:1b:49:01:bb:6f:f3:da:ab:e9:2c:37:f4:81:fe:89:32:
         7e:59:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org