Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.mft
File:                     0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.mft (raw, json)
Hash identifier:          PSIcanvbzhvxOO9SJslAkx+ap0iuY8xvdgkWWF4Hfbw=
Subject key identifier:   22:97:D5:40:DC:33:6C:44:C2:67:54:BD:3B:B7:39:3B:04:D1:F7:28
Authority key identifier: 0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
Certificate issuer:       /CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
Certificate serial:       6579A3C480E6C8133551FC57FE9B0E17C37594CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.mft
Manifest number:          01B1
Signing time:             Sun 18 Sep 2022 10:20:00 +0000
Manifest this update:     Sun 18 Sep 2022 10:15:00 +0000
Manifest next update:     Mon 19 Sep 2022 10:20:00 +0000
Files and hashes:         1: 0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.crl (hash: pAbD67rCJvQA5lflPL7jzwHdZMHR4hhEvPFUrCHQS9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:79:a3:c4:80:e6:c8:13:35:51:fc:57:fe:9b:0e:17:c3:75:94:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
        Validity
            Not Before: Sep 18 10:15:00 2022 GMT
            Not After : Sep 19 10:20:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:ea:dc:8c:0f:76:55:92:24:70:bf:e5:96:
                    b0:11:55:3d:b0:f2:e6:83:e0:11:2a:27:ba:4e:78:
                    7c:a3:9a:4a:6b:34:eb:db:f0:4d:b7:d2:04:f8:5e:
                    6b:6b:dc:94:98:0e:72:c0:52:e2:4f:14:2a:7d:2c:
                    40:56:53:7f:43:c6:ee:7a:9f:bd:48:03:88:e9:f8:
                    f4:7b:0a:b4:cd:71:ec:84:2e:bf:6d:91:51:3b:4c:
                    44:3d:31:a6:ac:5e:9f:54:4d:21:9b:46:9a:1b:1a:
                    48:4e:a7:b8:10:0a:65:9f:4c:37:fb:40:15:23:9c:
                    45:17:4c:8f:3e:fb:18:38:e7:8f:09:fa:31:f7:33:
                    14:18:74:e9:be:f0:04:15:dc:9e:1a:3c:05:ea:25:
                    22:db:10:ef:41:71:cb:25:19:d1:ba:9e:4f:a3:29:
                    e7:cb:92:cd:0b:c0:13:3b:d9:fd:3b:44:ce:67:39:
                    c1:65:00:86:2a:69:b6:f7:42:11:69:93:54:8e:5f:
                    a9:f1:e1:5a:5d:82:9c:83:ee:b6:c9:97:14:d1:de:
                    8b:81:81:50:7a:16:23:98:e5:e3:4e:9f:38:63:35:
                    c1:62:8c:8c:9c:02:9b:7f:c5:6a:a6:6a:dd:59:4f:
                    49:44:88:97:36:fd:56:db:b3:49:55:4a:8f:e0:f8:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:D5:40:DC:33:6C:44:C2:67:54:BD:3B:B7:39:3B:04:D1:F7:28
            X509v3 Authority Key Identifier:
                keyid:0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f7:bb:ae:16:88:5a:56:6a:c0:77:78:f8:9d:78:ad:ae:dd:
         23:7f:fb:a0:40:67:2e:d9:8a:d5:c1:e0:9f:6c:a4:89:c2:aa:
         f0:6c:ee:4d:b2:d6:6c:c2:52:01:8e:1a:36:2b:f1:4b:ab:7b:
         fd:cf:b5:6d:95:19:9d:bc:2f:ea:91:31:38:77:a5:4e:ae:0f:
         cc:54:f5:20:e2:2e:bd:d3:c2:72:88:d3:c9:65:d9:60:1f:2a:
         41:63:f3:2c:57:ab:2b:91:b8:6a:a1:18:10:8e:6b:d3:23:ea:
         67:2e:4a:6b:28:2d:d7:48:e7:e2:8e:3c:70:18:fd:e2:df:86:
         8a:82:e5:1c:cd:b1:4b:28:69:97:0f:89:6e:db:f0:e0:52:a2:
         35:19:e4:b6:27:31:62:b4:a3:a0:49:d8:42:ca:8c:55:fe:f3:
         b0:27:e1:5f:5c:8a:19:62:7c:80:3e:1d:62:1f:2b:23:bc:8a:
         d2:af:80:39:5f:74:f1:db:9f:21:8a:d3:18:43:83:28:17:b6:
         11:0c:c5:41:28:0d:5b:a3:87:80:ff:46:6f:d1:7a:4b:c7:8b:
         81:cc:03:1a:53:0c:e8:e7:3c:47:17:f5:b5:a8:39:84:4b:38:
         28:72:f2:f0:0b:59:1d:74:cf:c8:42:9f:96:fe:5b:5c:5e:d8:
         07:a1:5d:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org