Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.mft
File:                     04AFE5BFE3D946811341B0DCBC883C99338E067B.mft (raw, json)
Hash identifier:          ArhNUrJapgKVoByHfOxjVCAPKY3tR5omLCDvF6qTqP8=
Subject key identifier:   53:03:5C:5F:D8:74:1C:FE:F4:B2:35:96:E9:CD:96:D2:8C:E1:B2:50
Authority key identifier: 04:AF:E5:BF:E3:D9:46:81:13:41:B0:DC:BC:88:3C:99:33:8E:06:7B
Certificate issuer:       /CN=04AFE5BFE3D946811341B0DCBC883C99338E067B
Certificate serial:       20350C5A4EAC47ECC3E13FC8A7A491A9073CE894
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.mft
Manifest number:          0292
Signing time:             Sun 14 Apr 2024 17:02:00 +0000
Manifest this update:     Sun 14 Apr 2024 16:57:00 +0000
Manifest next update:     Mon 15 Apr 2024 20:40:00 +0000
Files and hashes:         1: 04AFE5BFE3D946811341B0DCBC883C99338E067B.crl (hash: c/cvPuKKfd6jx1WBQ6aR9IM+g4pAe0txA37Zq+6uIEs=)
                          2: 3137392e34322e37302e302f32332d3332203d3e20323731313330.roa (hash: bRlDNjCzJGYOZf98Mqu2Y5j1qflebO8jDUJimP3xZtk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:35:0c:5a:4e:ac:47:ec:c3:e1:3f:c8:a7:a4:91:a9:07:3c:e8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AFE5BFE3D946811341B0DCBC883C99338E067B
        Validity
            Not Before: Apr 14 16:57:00 2024 GMT
            Not After : Apr 15 20:40:00 2024 GMT
        Subject: CN=53035C5FD8741CFEF4B23596E9CD96D28CE1B250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:0f:d2:01:77:44:4a:9f:93:62:2a:54:39:
                    5e:2a:2c:ad:ea:8a:19:0e:07:44:d1:9d:de:10:a8:
                    77:fa:6d:31:17:d8:37:78:5d:76:aa:4c:0e:40:cd:
                    d6:46:84:72:4e:73:9d:13:04:b6:4b:8e:36:f9:d3:
                    51:09:37:3a:0c:ab:4b:b0:e6:b7:68:11:5c:69:04:
                    15:2e:79:0f:84:62:4c:40:bb:54:f0:0d:77:d6:6b:
                    c8:19:9b:3b:83:74:11:83:13:04:5c:d9:2c:54:2c:
                    5e:0d:d4:f5:63:dc:bb:07:ad:21:12:81:e8:cf:cf:
                    39:4f:9c:88:91:a4:e7:36:81:b1:80:a0:20:6b:2f:
                    95:b6:52:bc:27:ef:61:00:26:ee:06:2a:82:17:5b:
                    8a:d7:b8:dd:82:b6:1c:7e:d9:2b:9c:0b:7e:f4:c4:
                    97:5c:e1:99:ab:bd:ea:5c:ce:f1:a8:77:cf:2f:2b:
                    48:0e:79:01:72:a8:da:b3:5e:ab:e7:6c:eb:10:99:
                    23:dc:29:5c:78:81:62:f9:1d:fe:e8:af:c3:65:c6:
                    03:98:7d:9c:f5:4a:f8:9b:cc:b7:f2:16:aa:33:df:
                    9c:b3:52:af:57:4d:76:98:4e:74:3f:3a:e8:82:a0:
                    79:de:d5:20:98:f7:48:be:ae:b2:e4:85:85:5d:9c:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:03:5C:5F:D8:74:1C:FE:F4:B2:35:96:E9:CD:96:D2:8C:E1:B2:50
            X509v3 Authority Key Identifier:
                keyid:04:AF:E5:BF:E3:D9:46:81:13:41:B0:DC:BC:88:3C:99:33:8E:06:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b9:09:4d:6b:29:4b:2d:2a:0b:29:c9:f3:b9:8c:0f:8c:26:
         97:0b:af:b5:87:ca:10:fa:34:ce:19:c9:07:5a:cc:ae:41:fd:
         dd:ad:79:46:ff:c5:06:ea:96:92:ea:5d:58:41:5a:97:8f:9b:
         c7:be:33:83:44:a2:23:ce:46:73:ed:31:bc:3f:8b:15:15:a0:
         3c:6e:8b:bf:3d:ee:2c:db:00:24:99:dc:c6:b1:89:47:82:a9:
         da:35:c6:bc:ab:49:8c:48:01:0d:3f:36:c1:70:84:3f:a6:4d:
         83:f7:d5:ab:be:15:34:fb:ac:a0:e3:a3:23:12:33:61:13:83:
         34:1e:ba:2f:2b:dd:26:a6:5b:e3:3b:97:11:5e:ef:bf:18:9d:
         c6:1a:b9:a4:33:d1:8d:af:d1:d9:de:fa:28:32:b8:7c:0d:34:
         e5:bf:0b:72:c6:cf:33:77:66:b4:5a:70:c3:d3:ac:fb:5a:8f:
         29:9b:78:34:97:d7:c9:05:bd:95:e8:52:36:eb:5f:e2:5e:66:
         89:5a:9c:ca:56:a1:3a:ad:3e:b7:4a:c6:fd:1d:7a:ed:31:ed:
         78:ce:0d:69:b7:73:07:0f:9d:91:42:ee:4e:cc:48:f2:fd:f7:
         69:eb:a7:14:8f:a9:98:9a:08:8a:00:5d:bc:a9:4c:a5:17:1a:
         c5:9e:06:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org