Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/3F8EED3243F905D20FEDEF867A24DA1EE3F9171C.mft
File:                     3F8EED3243F905D20FEDEF867A24DA1EE3F9171C.mft (raw, json)
Hash identifier:          6b0kbjx4EK0PFpqqqJfSDHfOOJO+6THz9snro9A2Qg8=
Subject key identifier:   5C:9C:A9:96:AA:F3:AF:39:91:2B:0A:C0:90:19:E2:CE:2D:E5:E4:DF
Authority key identifier: 3F:8E:ED:32:43:F9:05:D2:0F:ED:EF:86:7A:24:DA:1E:E3:F9:17:1C
Certificate issuer:       /CN=3F8EED3243F905D20FEDEF867A24DA1EE3F9171C
Certificate serial:       25AF421B2AD5AC858753DAD44A0782BC22182B34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F8EED3243F905D20FEDEF867A24DA1EE3F9171C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/3F8EED3243F905D20FEDEF867A24DA1EE3F9171C.mft
Manifest number:          64
Signing time:             Mon 06 Mar 2023 15:58:07 +0000
Manifest this update:     Mon 06 Mar 2023 15:53:07 +0000
Manifest next update:     Tue 07 Mar 2023 19:53:07 +0000
Files and hashes:         1: 3F8EED3243F905D20FEDEF867A24DA1EE3F9171C.crl (hash: Fi8ElJFJZ4m+V9U3ryx83TrTWFyN02hB/K5dVt5DY0o=)
                          2: 323830343a326434633a3a2f33322d3336203d3e20323635323732.roa (hash: /gShgf72q5AtqJ5p2VuNak4qDA8NuT3Oq5jR88fT24g=)
                          3: 3136382e39302e3134342e302f32322d3234203d3e20323635323732.roa (hash: /w15dkiL1ybN+JzuO2n/pjnyU2kDO/9+bSU18kguD2o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:af:42:1b:2a:d5:ac:85:87:53:da:d4:4a:07:82:bc:22:18:2b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F8EED3243F905D20FEDEF867A24DA1EE3F9171C
        Validity
            Not Before: Mar  6 15:53:07 2023 GMT
            Not After : Mar  7 19:53:07 2023 GMT
        Subject: CN=5C9CA996AAF3AF39912B0AC09019E2CE2DE5E4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:74:83:3f:37:90:a8:3d:86:02:63:af:95:
                    b3:ea:98:09:10:9b:9a:0c:9b:63:b4:66:18:39:3a:
                    5e:c6:65:4c:87:3d:0a:08:02:66:49:17:c8:2f:33:
                    8d:eb:3e:3e:d9:59:c3:79:8c:bd:09:b5:56:26:a4:
                    73:31:ef:b8:93:5b:26:5d:e3:e9:12:45:56:69:3f:
                    d2:ef:79:91:d1:56:4a:f5:73:b8:90:7d:d9:01:ae:
                    a7:9a:a7:f6:b0:2e:4e:a1:55:a4:c7:c1:49:5f:34:
                    51:07:49:cd:0a:ec:53:37:aa:33:bb:05:6b:b4:89:
                    cf:14:2e:8c:62:6b:e2:2b:b2:86:11:63:61:83:be:
                    96:a5:9b:fb:7e:5b:f0:08:ac:4b:82:2f:7c:22:97:
                    9d:a9:0f:07:4d:1b:95:54:e4:a3:a1:5b:20:47:5c:
                    eb:62:a0:9f:81:b6:f6:20:9c:88:a1:12:13:52:98:
                    06:91:d4:2e:dd:3a:89:34:6b:3d:cd:2e:9b:3b:1c:
                    f3:da:13:d6:2f:39:83:30:18:30:7c:57:32:fb:99:
                    94:4c:ec:09:90:91:d0:63:ca:47:94:d5:ca:49:5d:
                    8c:b0:62:25:c9:11:e4:12:ef:b0:cc:dd:70:98:54:
                    51:bf:0c:ce:ff:99:3e:d8:7e:54:c0:84:e8:ef:b2:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9C:A9:96:AA:F3:AF:39:91:2B:0A:C0:90:19:E2:CE:2D:E5:E4:DF
            X509v3 Authority Key Identifier:
                keyid:3F:8E:ED:32:43:F9:05:D2:0F:ED:EF:86:7A:24:DA:1E:E3:F9:17:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/3F8EED3243F905D20FEDEF867A24DA1EE3F9171C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F8EED3243F905D20FEDEF867A24DA1EE3F9171C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/3F8EED3243F905D20FEDEF867A24DA1EE3F9171C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:57:07:69:b8:1a:91:de:8e:e6:a0:a3:88:75:a3:23:0e:
         39:4e:b2:9f:6b:b2:5e:06:b5:c5:a6:90:47:5a:c7:2e:9e:76:
         dd:c5:c5:7c:0b:79:1e:eb:e3:37:d4:91:73:e7:a2:fc:64:0e:
         11:aa:0b:9d:97:85:ab:ab:17:c9:e3:f0:27:c5:0c:b0:99:24:
         0b:68:cf:e7:32:38:59:f9:6d:25:98:c9:c3:fd:65:a3:da:58:
         5a:76:12:32:d5:9f:01:f9:0e:d9:bc:da:b9:a3:4b:9b:d7:ee:
         c0:df:71:72:a5:2f:7f:de:fc:4d:fd:0f:11:f7:af:c2:04:f0:
         6f:94:42:e6:e2:21:03:12:16:95:50:57:68:7b:5d:2c:47:20:
         bc:72:26:2f:9f:8f:f8:0d:a9:54:8b:92:ba:dd:71:a2:b8:8c:
         89:e8:e8:41:27:a1:c0:81:b3:79:d6:9a:58:fe:b8:2f:44:a5:
         2a:06:74:28:96:76:d2:41:0c:b9:30:cb:fc:d1:01:60:1c:79:
         2b:5e:40:bc:5f:2e:19:97:e1:64:02:7a:45:d1:0d:48:c4:0a:
         a7:cc:f7:9a:90:0f:5b:c3:df:c8:4a:1a:ea:90:d3:c8:bb:bb:
         57:00:b8:6f:10:9a:7a:72:19:49:94:2e:c3:62:fb:58:05:0d:
         b6:7a:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org