Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.mft
File:                     590CB921D31788D4537CBF5A72ACB47A7E34BA34.mft (raw, json)
Hash identifier:          9DZbEGYNCa/8djJdJmndoT+NMN30NppKAMVYvCoJ+nw=
Subject key identifier:   97:9C:9B:86:C9:28:EE:12:C5:1A:7E:4A:23:B9:31:77:12:6D:33:41
Authority key identifier: 59:0C:B9:21:D3:17:88:D4:53:7C:BF:5A:72:AC:B4:7A:7E:34:BA:34
Certificate issuer:       /CN=590CB921D31788D4537CBF5A72ACB47A7E34BA34
Certificate serial:       6C6226ACE4F79C5444F8C5F1F60C3EA3EE2F68D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.mft
Manifest number:          046D
Signing time:             Mon 15 Apr 2024 07:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 07:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 07:10:00 +0000
Files and hashes:         1: 323830343a6136343a3a2f33322d3334203d3e203532383933.roa (hash: DyNkcVNteqw6AP8jf2c1M23yL1cI0dknvb9xDBUmx38=)
                          2: 590CB921D31788D4537CBF5A72ACB47A7E34BA34.crl (hash: +H/XewUzLKzy86WuRfWPhm/P1v92yuYhag/HECVSWrM=)
                          3: 3137372e33372e34382e302f32302d3234203d3e203532383933.roa (hash: DxQmavbcxBiOwsGpOyeMGq7UqEN/1Ebvn78hG+qDfXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:62:26:ac:e4:f7:9c:54:44:f8:c5:f1:f6:0c:3e:a3:ee:2f:68:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590CB921D31788D4537CBF5A72ACB47A7E34BA34
        Validity
            Not Before: Apr 15 07:05:00 2024 GMT
            Not After : Apr 16 07:10:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:e6:32:39:fc:8a:86:bf:86:5b:d2:e4:3b:
                    fa:7b:83:70:77:59:7e:fc:32:90:be:6f:49:c0:c7:
                    20:6b:d1:ec:60:cf:45:7b:8b:5c:97:18:08:ca:1e:
                    80:7e:30:80:69:6b:d8:0e:dc:42:ee:fa:97:4a:9c:
                    9c:09:54:0e:5f:b0:f4:4b:20:8f:4b:7d:4a:b2:8f:
                    74:2d:2a:40:95:0e:c8:38:10:fe:ce:87:bc:8c:7d:
                    e3:35:ed:f5:1b:47:fd:a0:b6:6a:e0:d4:80:58:32:
                    03:b4:9c:6a:cd:e0:c4:d5:a0:2f:12:4e:e4:e5:45:
                    4b:d5:26:8c:f1:43:d1:0c:ff:51:d0:97:9a:0a:cb:
                    d8:f6:ee:23:76:5e:02:e9:4d:ca:18:d7:30:02:19:
                    dc:76:a0:27:9c:7d:cb:0c:28:39:18:aa:70:58:b3:
                    70:b2:58:56:48:b7:21:a5:67:88:d4:77:2e:c6:c1:
                    37:ee:bd:eb:41:93:da:49:4b:31:3f:c2:02:a9:e5:
                    e8:18:b0:81:55:2a:9f:41:56:99:35:d7:d2:99:67:
                    15:44:e9:7e:db:4c:14:bb:3a:80:e7:8f:18:f0:d8:
                    de:57:ef:e8:c6:9f:fb:31:29:1d:4d:b4:60:bd:ba:
                    1d:d3:50:04:7c:70:56:7b:17:52:57:8c:40:86:ab:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9C:9B:86:C9:28:EE:12:C5:1A:7E:4A:23:B9:31:77:12:6D:33:41
            X509v3 Authority Key Identifier:
                keyid:59:0C:B9:21:D3:17:88:D4:53:7C:BF:5A:72:AC:B4:7A:7E:34:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:83:da:54:a2:a9:df:40:33:dc:bb:93:ab:0b:75:36:1f:52:
         62:3e:4b:55:89:48:a3:e6:40:d1:56:27:d7:7c:2d:62:6a:02:
         69:07:fd:e7:2e:d4:1c:25:a7:3b:63:de:40:5a:52:98:1c:ac:
         d2:04:f3:1c:8c:53:1e:62:f1:0e:ba:50:6a:66:25:a9:73:24:
         39:83:67:db:b9:00:5c:07:54:bd:74:9f:df:a5:7a:5a:24:4b:
         b7:4f:d6:2b:64:51:ae:19:84:36:84:16:26:33:f0:ed:e1:bb:
         81:d7:27:22:e1:e6:e3:7b:de:d2:9c:6f:26:32:84:f2:b9:12:
         72:a7:8b:21:08:e6:3e:2b:c3:8d:e0:bf:28:16:9b:1d:16:36:
         1b:de:92:4c:3c:0a:4f:6b:b3:da:86:7a:a5:0b:d0:46:4e:75:
         40:94:86:00:f9:32:09:c3:a4:41:c2:e7:d3:84:1c:83:30:4e:
         80:d7:76:d8:0a:f8:2b:49:5a:62:bb:6d:0c:00:e0:b7:28:56:
         95:62:48:8e:7b:5b:6f:2f:b2:9a:b2:a7:56:11:e9:a5:61:c9:
         ef:72:7e:fa:97:7f:8b:77:80:1b:f4:ca:ed:75:c2:c0:d2:a8:
         e4:b6:52:19:c2:bc:b6:c1:00:7d:ee:20:02:9a:d5:6c:aa:f2:
         68:9d:f1:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org