Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.mft
File:                     7BE95A26137B30C740C99DDD48DA6FEAD62905B1.mft (raw, json)
Hash identifier:          1MhjyNK7fRO3OQYRY+N/219Dk2rJ+yMiebUlUJ1bD5E=
Subject key identifier:   68:F1:64:97:89:58:AE:C8:42:95:E9:88:77:1E:AE:8E:EC:6E:D7:0D
Authority key identifier: 7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1
Certificate issuer:       /CN=7BE95A26137B30C740C99DDD48DA6FEAD62905B1
Certificate serial:       5652B1D9AA225F1CE04F16DC35AB06D2A1AC4D16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.mft
Manifest number:          011F
Signing time:             Mon 15 Apr 2024 05:35:22 +0000
Manifest this update:     Mon 15 Apr 2024 05:30:22 +0000
Manifest next update:     Tue 16 Apr 2024 08:09:22 +0000
Files and hashes:         1: 3136382e3139352e3235322e302f32322d3234203d3e20323632333733.roa (hash: nRzLmEu5Rpc1Fb0DYmFRf20fkKSDV3S1aQTtrHQM5a8=)
                          2: 3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa (hash: CJWLUmLvR+97pbmbic1RuqjdZBp1eCMrTF3jWaq4uL8=)
                          3: 323830343a313738303a3a2f33322d3333203d3e20323633313531.roa (hash: UGe6iyJu1k7bTjjPz6FiIdBeo/9PWx88bZ/7apI3Wko=)
                          4: 7BE95A26137B30C740C99DDD48DA6FEAD62905B1.crl (hash: +zbEQSpRSwUSbruGljQmPGpat2rHNAetMgXTg7IsVFc=)
                          5: 323830343a3837343a3a2f33322d3333203d3e20323632333733.roa (hash: vKLvX4nF41isUSamrzdYW9cNv8xefLFuHH92yTPOB3g=)
                          6: 3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa (hash: gkdR4irH6nnSDClUyrvAsy50uJbVFL8U9oE8EtgAQO4=)
                          7: 3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa (hash: j8ffUH8kwZO9tPigARXco0mwqjA06MsEbm1V7om6ZoM=)
                          8: 3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa (hash: ltNc5uZ7GjVE+a5eTYxqImAbS/4gJRvh66MXizJ+s6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:52:b1:d9:aa:22:5f:1c:e0:4f:16:dc:35:ab:06:d2:a1:ac:4d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE95A26137B30C740C99DDD48DA6FEAD62905B1
        Validity
            Not Before: Apr 15 05:30:22 2024 GMT
            Not After : Apr 16 08:09:22 2024 GMT
        Subject: CN=68F164978958AEC84295E988771EAE8EEC6ED70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:87:20:7c:eb:cb:b3:6d:9e:a2:a3:3c:fc:
                    a8:67:f6:f9:19:ab:98:af:42:05:62:72:23:11:74:
                    e4:02:c8:38:f5:bc:7a:3e:f0:c4:39:71:d8:60:45:
                    cd:7d:52:c5:ce:d6:dd:0a:a6:c1:64:a5:59:20:b1:
                    23:ef:8d:1e:3c:fc:14:6d:3e:6b:ea:c0:92:cf:dd:
                    7d:ce:a1:b5:27:51:0e:d9:d1:67:30:d5:cf:37:e0:
                    02:03:0b:2d:bd:d9:03:c4:9a:63:95:7b:30:fa:05:
                    a0:2d:b3:cf:fa:68:3a:bd:7e:3c:a0:58:0e:48:7e:
                    31:a1:5a:d4:01:ce:6e:4d:8a:dd:99:fd:5b:4d:8e:
                    de:23:5f:1d:8d:6c:74:e8:cb:3a:4c:f1:bf:2c:13:
                    1b:54:62:c9:6d:74:e6:04:c0:fe:fb:db:a0:7f:f3:
                    29:e2:23:e2:2a:cc:40:59:26:7a:80:92:09:4f:69:
                    1a:4d:23:e1:a9:1a:c6:1b:fb:37:e3:37:f8:a7:57:
                    34:e4:c9:3f:23:d6:8a:c5:f3:6d:21:10:d0:44:22:
                    17:e4:e4:bc:82:ce:f2:21:a7:67:c2:bc:8a:e9:c3:
                    35:35:ba:b7:f8:a8:97:b4:15:75:b8:ed:42:16:61:
                    dd:b1:d0:6b:a3:e5:25:c6:bc:be:93:81:65:83:03:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F1:64:97:89:58:AE:C8:42:95:E9:88:77:1E:AE:8E:EC:6E:D7:0D
            X509v3 Authority Key Identifier:
                keyid:7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9a:dc:ed:b2:e5:68:b0:45:54:4a:58:be:40:b4:95:2c:6b:
         ed:49:09:52:9b:7f:f5:c2:06:70:22:ac:f4:12:42:2b:f9:68:
         3d:69:03:60:c2:da:42:0f:f1:80:f5:c7:0b:77:cc:05:4f:86:
         f8:1b:ab:8c:a4:19:70:e0:50:79:76:9f:a4:52:2d:c1:49:77:
         0b:15:81:5a:b0:c3:f5:14:1d:1f:0e:64:27:51:ce:ea:25:4e:
         f8:49:16:68:0d:fa:74:0e:6c:71:04:de:d2:3a:d0:01:8c:96:
         d2:bd:13:c8:fd:51:22:f6:01:58:22:89:a6:52:10:4e:24:e1:
         15:e6:bd:75:8f:20:5d:93:06:ba:10:2b:f1:4a:b0:bd:96:15:
         67:59:cb:c4:d0:f1:bb:18:d5:c7:f6:c0:13:41:b1:37:e1:6d:
         e5:34:36:fb:1e:71:b7:a5:a4:5d:bb:9c:f4:08:1c:02:15:c0:
         bd:13:4d:58:62:2b:24:ad:78:e4:c3:ea:3d:a7:60:80:f8:6b:
         2f:22:40:4e:3c:94:5a:9c:4f:76:16:0a:dd:3d:6a:85:07:9d:
         6d:36:a7:68:4f:1d:dc:97:45:6e:d3:a6:77:fe:0e:08:04:1f:
         9b:6b:15:ef:82:3a:2b:52:d0:34:4c:fe:5a:62:a8:e9:f8:6e:
         2e:73:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org