Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.mft
File:                     4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.mft (raw, json)
Hash identifier:          6Q0T7drBQ1w8HvF5XFUgfIkG6z8vfxJ1iSrbF+SBTww=
Subject key identifier:   DA:53:FB:16:31:FE:BB:8E:33:3B:63:A8:8F:4C:3F:15:63:60:EB:60
Authority key identifier: 4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F
Certificate issuer:       /CN=4BF5B35D2D18CCAFE6BF20BA0CB468578089836F
Certificate serial:       4CF3A6A2E65968D549A0B28733A591406BEECA94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.mft
Manifest number:          D2
Signing time:             Sun 29 Oct 2023 16:11:01 +0000
Manifest this update:     Sun 29 Oct 2023 16:06:01 +0000
Manifest next update:     Mon 30 Oct 2023 17:06:01 +0000
Files and hashes:         1: 4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.crl (hash: UArIc2ZtIAN4gMzJOwxqWZVqTo9uUAt2wEMV0b/H4Y4=)
                          2: 34352e3136372e36342e302f32332d3233203d3e20323638303036.roa (hash: BtP5/j00bF6VZE3GHU2WaSVMBdBw/81zRSMRf8uTXFc=)
                          3: 34352e3136372e36342e302f32342d3234203d3e20323638303036.roa (hash: Niz1+3YClDG4DQRdz/D6yN/syyhaurpGcKhm6LiMjjE=)
                          4: 34352e3136372e36352e302f32342d3234203d3e20323638303036.roa (hash: MbYOtgontUBNz6DZ953OUdb1TIapPTy80ydYhkvmOHg=)
                          5: 34352e3136372e36362e302f32332d3233203d3e20323638303036.roa (hash: 5yxMZZyoSEvd7zTEVW4nv4vK4CXYuDVuxk1GC//7ZE0=)
                          6: 323830343a353638343a3a2f33322d3332203d3e20323638303036.roa (hash: 4xf4AKQtEoOXsDqyb3/L1fhb2Js7Iv4kqO0+jPj06yQ=)
                          7: 34352e3136372e36372e302f32342d3234203d3e20323638303036.roa (hash: tv510XymTpqoyo/1tV9QoLD503gkZEBSIa3ZHnkohG8=)
                          8: 34352e3136372e36362e302f32342d3234203d3e20323638303036.roa (hash: GZg0HXhscfK+P2eCNOUPtw0knP8tLnqRdsIALmMuVDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f3:a6:a2:e6:59:68:d5:49:a0:b2:87:33:a5:91:40:6b:ee:ca:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B35D2D18CCAFE6BF20BA0CB468578089836F
        Validity
            Not Before: Oct 29 16:06:01 2023 GMT
            Not After : Oct 30 17:06:01 2023 GMT
        Subject: CN=DA53FB1631FEBB8E333B63A88F4C3F156360EB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:33:de:fe:6f:06:2c:d5:10:ad:ff:bf:6c:
                    5c:ec:1c:d7:21:c3:d1:48:6d:51:c0:fc:91:6b:8a:
                    95:bb:d4:7a:0a:8b:64:d9:42:23:40:28:a6:b9:a3:
                    df:a1:17:c0:e7:f0:29:80:41:b8:4b:09:a7:69:0c:
                    07:b5:ff:d8:b3:3c:d1:a2:32:70:b9:01:b4:97:38:
                    32:0a:48:d4:ed:2b:bc:7a:6b:4a:46:a8:fe:09:8d:
                    50:8e:fa:73:58:0f:f9:b5:f9:18:35:a8:a9:be:d5:
                    6e:70:9e:24:eb:e8:06:aa:31:ac:6f:d3:3a:c4:9b:
                    d2:10:ba:65:65:a2:dd:c0:e8:97:c3:2d:84:c5:d4:
                    06:ca:bb:4c:04:a1:eb:10:41:37:03:1b:8e:39:e9:
                    4c:24:41:5f:3f:2d:ca:50:c5:58:d7:7d:b5:03:41:
                    5a:9a:de:67:13:79:ab:e8:f2:a9:c9:a5:4c:45:32:
                    a1:ef:e1:72:72:4c:5e:8a:00:93:55:29:75:f6:95:
                    95:d2:41:11:05:83:89:ff:2f:40:64:a4:32:a3:df:
                    43:a6:cc:e6:29:1c:26:a7:fb:96:1f:93:85:1c:0d:
                    1d:85:14:90:a0:23:75:38:6d:bb:4c:56:80:51:08:
                    7a:4f:0b:9c:0a:16:77:8b:93:44:22:51:4f:aa:a6:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:53:FB:16:31:FE:BB:8E:33:3B:63:A8:8F:4C:3F:15:63:60:EB:60
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0f:63:43:51:b0:63:94:92:d0:d7:68:0a:f9:27:00:34:51:
         37:cd:78:d1:49:da:79:b1:be:14:ce:2b:ad:b6:11:89:da:f1:
         19:29:ae:b3:ff:f5:9f:25:08:30:44:21:cb:2d:20:3e:57:c8:
         2a:69:c7:3c:7d:7d:7c:8e:4a:6d:01:31:0a:91:24:20:0d:ac:
         0a:9a:73:5b:67:ad:fb:2e:a4:43:35:2e:59:a8:25:d6:b5:eb:
         f4:90:35:ba:ae:cb:12:73:5b:7a:7e:49:d1:55:23:04:ed:a5:
         89:b8:3a:9e:4d:99:82:7e:b3:d8:bb:33:c1:49:1c:78:57:8a:
         19:c6:58:64:46:7f:94:4c:84:f6:a7:8f:6d:ce:87:64:62:4d:
         13:d3:f1:ff:f0:73:51:69:7e:c6:1c:31:ec:85:ee:1c:04:92:
         b3:80:ae:d0:3c:36:45:36:a3:df:e2:2b:9c:2a:fe:b8:73:42:
         e1:78:c7:e8:61:df:45:7d:8e:53:a6:9e:c0:96:68:dd:f4:ec:
         20:14:da:5e:37:d5:db:4f:52:19:9a:83:89:95:43:70:59:5c:
         0d:61:cc:0a:e8:bb:3d:e7:1c:3e:94:44:50:8a:26:9a:11:17:
         97:1c:21:4f:91:6c:6f:ad:9c:a3:69:a0:9e:bc:e5:6b:c5:bf:
         66:b0:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org