Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/528376214EAEB29FCE9BEA3F31AF59BE638EBD52.mft
File:                     528376214EAEB29FCE9BEA3F31AF59BE638EBD52.mft (raw, json)
Hash identifier:          BYCD7FSKHWxD+aWn6fj/zXQbB1H//N+4SzIFO2SS+JA=
Subject key identifier:   24:62:2A:48:8F:DC:DA:7F:85:A0:1F:17:76:6F:38:51:8C:96:C0:CC
Authority key identifier: 52:83:76:21:4E:AE:B2:9F:CE:9B:EA:3F:31:AF:59:BE:63:8E:BD:52
Certificate issuer:       /CN=528376214EAEB29FCE9BEA3F31AF59BE638EBD52
Certificate serial:       118A949BCE49D6ABCA189F6555D0F9CA35A2C486
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/528376214EAEB29FCE9BEA3F31AF59BE638EBD52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/528376214EAEB29FCE9BEA3F31AF59BE638EBD52.mft
Manifest number:          0164
Signing time:             Sat 03 Feb 2024 00:54:17 +0000
Manifest this update:     Sat 03 Feb 2024 00:49:17 +0000
Manifest next update:     Sun 04 Feb 2024 02:37:17 +0000
Files and hashes:         1: 323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (hash: VPQneGz6ctCFzx2nGtcezr6ZT3iygbL44D6DacjkCWk=)
                          2: 34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (hash: chW6GVXLWjnYTfF0FZwvYqH99xTmcZ6mFQQ8AuWz3Mg=)
                          3: 528376214EAEB29FCE9BEA3F31AF59BE638EBD52.crl (hash: Ac/qkSY2kbUWDz2T6BOWdhAc5el1MsCb4mjLILXI1LI=)
                          4: 323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (hash: 7ZGqH1ZDIvBzpKsvUJ2hCCBbGF3/z3tQMF7Ir5nz8Cs=)
                          5: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (hash: m5h0K8G76fO4a/BzrEOiubmHk+U4gtn08hbvr8JfJjI=)
                          6: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (hash: 2TPc/oJVmBDr/2echxbTjjameoH8O/GaJwpbX0DOoII=)
                          7: 34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (hash: 1Pv4nnD813StHHxaWazf4wpqelfKuXhUDX6Fj9p8sBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8a:94:9b:ce:49:d6:ab:ca:18:9f:65:55:d0:f9:ca:35:a2:c4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528376214EAEB29FCE9BEA3F31AF59BE638EBD52
        Validity
            Not Before: Feb  3 00:49:17 2024 GMT
            Not After : Feb  4 02:37:17 2024 GMT
        Subject: CN=24622A488FDCDA7F85A01F17766F38518C96C0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:1e:21:8b:2d:b7:9b:34:40:ed:82:e5:2f:
                    4e:d5:bd:8a:d2:a1:3d:28:7f:5d:d6:8e:cb:14:bd:
                    96:40:93:7c:ed:4a:25:f1:e6:1d:5f:6d:60:38:c2:
                    6f:e9:e3:13:76:0e:24:30:8c:53:7b:68:4a:9c:ac:
                    3b:99:39:7e:bb:45:54:43:f8:42:5a:91:47:01:32:
                    8b:38:1e:5f:39:f8:ff:67:90:13:44:d3:cb:e6:18:
                    db:81:c5:cc:bd:50:b8:62:0d:27:91:f7:a6:1e:cf:
                    5e:4b:16:0c:8c:d5:75:d2:22:dd:98:0d:30:77:d6:
                    d5:e3:67:d1:e4:08:60:f0:31:eb:a4:4c:ea:77:1c:
                    de:2d:d6:57:17:9d:6a:45:24:ff:e9:67:7d:0d:b8:
                    3c:88:51:7c:e3:2c:ed:ff:0e:e8:09:f0:e8:29:55:
                    53:7c:9b:73:74:a1:b8:6a:80:12:cd:ed:c5:32:c0:
                    a1:e8:fd:90:da:f4:1d:9d:6b:c2:a2:65:f7:c5:96:
                    2f:93:7a:97:a8:b4:eb:4b:77:69:ca:bd:28:a5:4a:
                    c0:b2:6f:0f:06:3f:e8:82:4b:d9:60:e9:a8:0b:ef:
                    8c:16:36:61:77:e9:cc:d2:72:ae:ba:09:b4:91:1b:
                    cf:96:40:03:9b:f8:d7:49:1f:12:04:af:ca:45:67:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:62:2A:48:8F:DC:DA:7F:85:A0:1F:17:76:6F:38:51:8C:96:C0:CC
            X509v3 Authority Key Identifier:
                keyid:52:83:76:21:4E:AE:B2:9F:CE:9B:EA:3F:31:AF:59:BE:63:8E:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/528376214EAEB29FCE9BEA3F31AF59BE638EBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/528376214EAEB29FCE9BEA3F31AF59BE638EBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/528376214EAEB29FCE9BEA3F31AF59BE638EBD52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:20:40:1d:9d:d4:0b:12:38:ca:f6:66:d3:cf:a4:d9:ad:8d:
         4b:dd:e2:92:43:d7:aa:45:c2:9b:27:30:15:26:fa:63:76:5e:
         32:f0:e9:27:e4:c2:28:3d:e7:82:1c:ed:97:4d:70:af:c3:53:
         5e:bd:69:d1:ff:1a:a9:25:e9:51:5d:d9:6c:48:8d:44:e7:67:
         c2:1a:9a:5c:0c:de:b2:d5:1e:e8:41:ec:d8:39:81:91:2d:16:
         ef:ff:fe:ff:a5:c0:36:35:1b:ec:bf:45:d9:bb:6c:01:f1:64:
         96:f8:83:e2:c0:b2:67:74:6a:ff:4b:32:6e:0e:ce:71:e0:12:
         ce:2e:c1:f1:50:02:20:ca:38:30:a1:16:ba:e6:23:9c:84:20:
         60:2b:8c:32:7b:ac:98:ba:88:5c:bd:38:31:38:e7:61:fc:e5:
         c5:28:82:ae:9b:78:e3:4c:cd:3b:4b:cc:b0:c7:0b:44:a2:99:
         ff:ca:92:3b:2d:20:54:e9:e5:98:c1:e1:2e:50:04:1d:23:50:
         39:f3:96:70:3e:65:f1:45:4b:7c:ff:3f:c2:e4:7a:fb:a1:21:
         4c:0f:73:e0:a2:bd:4c:a8:6d:34:0c:96:09:56:07:6c:bc:1f:
         41:5d:98:35:7f:1e:80:fb:76:f2:b1:ce:f3:15:b5:64:03:87:
         fa:e8:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org