Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.mft
File:                     A35FE798DF1B5FA90DF47D42B6BB552967B0395D.mft (raw, json)
Hash identifier:          mdyOaUM7aiO7NMInzWwx03NP2MWPjpaKTp/lAyDsG8Q=
Subject key identifier:   97:80:43:4E:5A:CA:F5:15:86:73:E7:D9:0A:CB:7F:6D:C9:40:57:4D
Authority key identifier: A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
Certificate issuer:       /CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Certificate serial:       44BF0A6A1D70DE2A6765B681D960AA3BCACD8161
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.mft
Manifest number:          029E
Signing time:             Mon 15 Apr 2024 06:06:14 +0000
Manifest this update:     Mon 15 Apr 2024 06:01:14 +0000
Manifest next update:     Tue 16 Apr 2024 08:21:14 +0000
Files and hashes:         1: A35FE798DF1B5FA90DF47D42B6BB552967B0395D.crl (hash: cdha5qzHsL1s34AfhMO+s9yaa+h7mi6kd1/+rKj6LkI=)
                          2: 323830343a336439303a3a2f33322d3438203d3e20323032.roa (hash: NwxI26xxHmHquZVuHK49HO72Vti+FoS2XpPzU0mWWmM=)
                          3: 323830343a336439303a3a2f33322d3438203d3e2033333536.roa (hash: YKR8w6ObeyN9ZOdDeqdCAA82vSzcFwMCFGPt76DRqQ0=)
                          4: 34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (hash: FrzkieZfeZ1f8ngs7rmPBcWGMYzfawjEFyQY23zVDUg=)
                          5: 323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (hash: 1mLWnzRwY3105lo/BGH/I8oTY/HrA7kvL/KVq+nHcFA=)
                          6: 34352e36352e3232302e302f32322d3234203d3e20323032.roa (hash: +BvXT8h1524jRKRzGV+PYlw49y1MQbxQcScFwgTX0h0=)
                          7: 34352e36352e3232302e302f32322d3234203d3e20323033.roa (hash: gl27s5rDWpSQYGCqOzZv6csR0Oc0zBIXwHKiz5sw22w=)
                          8: 323830343a336439303a3a2f33322d3438203d3e20323033.roa (hash: fuCdoRzhTClzzSQzBCs5PtmGGgFglB5FW3CJswjIO/U=)
                          9: 34352e36352e3232302e302f32322d3234203d3e2033333536.roa (hash: p+9hJi9zhAYI/Qle/EGtIA1gM7za0qRyZbo5WqmjBmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bf:0a:6a:1d:70:de:2a:67:65:b6:81:d9:60:aa:3b:ca:cd:81:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
        Validity
            Not Before: Apr 15 06:01:14 2024 GMT
            Not After : Apr 16 08:21:14 2024 GMT
        Subject: CN=9780434E5ACAF5158673E7D90ACB7F6DC940574D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a1:6b:42:d2:3d:05:c5:5d:15:2b:27:45:53:
                    39:03:d2:ca:74:02:52:4f:69:73:95:d0:6a:a4:29:
                    17:28:2b:59:3a:82:d7:84:c3:57:a3:e1:34:21:6f:
                    19:cf:d8:ce:52:cf:7f:58:19:15:70:2f:63:59:28:
                    1d:43:53:3f:ec:cf:eb:35:08:bc:66:46:2e:97:79:
                    bc:5c:cb:8e:bf:0a:6a:83:76:cf:2a:62:4e:26:8e:
                    3d:a4:46:6e:4b:7e:e7:a5:9e:3a:63:69:3f:35:99:
                    5e:da:61:89:26:4d:df:91:f5:8b:72:46:fa:9a:38:
                    bc:50:55:a6:9b:13:67:68:25:9e:53:34:5a:53:0c:
                    ec:ea:ba:65:70:01:c5:12:04:63:be:6b:87:89:06:
                    d8:de:65:7b:ab:e1:c7:6b:2d:d2:7d:9f:5c:41:3f:
                    6b:a6:ab:b5:6e:4e:54:5b:2a:9b:af:64:d6:52:9c:
                    46:9b:b1:7f:1a:30:b2:65:36:ac:62:6e:08:1c:7c:
                    99:9c:ff:31:91:3d:c8:b9:96:0b:6f:80:a8:52:ef:
                    a2:c0:5c:d1:ae:af:49:ba:f2:0b:64:6f:cd:08:46:
                    97:1a:3d:8f:05:a7:ab:62:8c:ed:8b:84:36:7b:43:
                    b7:27:06:50:07:5f:1b:30:66:f8:b7:8f:e0:73:a7:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:80:43:4E:5A:CA:F5:15:86:73:E7:D9:0A:CB:7F:6D:C9:40:57:4D
            X509v3 Authority Key Identifier:
                keyid:A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f8:5a:9d:ef:3c:09:88:82:ad:b5:76:9a:72:c2:08:4e:60:
         63:f3:c9:ad:0d:f1:9b:91:6f:44:ae:a6:cc:95:42:a4:40:a4:
         2b:28:cb:1a:95:88:3e:62:90:97:71:00:53:d6:26:04:9e:0b:
         ac:99:52:90:97:cd:e8:0f:23:74:1d:46:92:2b:9a:f0:f2:b8:
         d0:b4:c0:8c:81:a0:12:fc:e0:af:d1:ea:47:08:b8:b7:de:49:
         d2:0c:ed:f3:94:9a:57:d1:68:0b:ea:a8:1f:60:d3:da:91:26:
         c8:ef:b0:4b:8b:0a:07:d5:3a:35:16:b7:67:1b:47:15:a9:1d:
         56:81:e3:25:da:87:3a:a2:d9:84:7b:34:36:f4:6a:72:7b:ff:
         30:26:1f:bc:4a:5d:69:30:83:a7:da:52:01:83:32:01:45:74:
         0c:d9:85:cc:40:8e:53:d3:6b:97:c0:24:b8:34:62:a7:04:c4:
         a8:71:1e:82:23:f2:7c:72:ce:fe:9e:0d:44:d4:7f:23:d2:88:
         f0:19:d8:61:dc:65:99:72:30:e9:cc:7c:36:7e:fb:ba:60:25:
         4d:a6:e9:c9:59:5c:fa:68:0a:29:77:d0:c6:52:60:5d:27:bb:
         53:6c:95:ae:b3:55:0d:f1:4f:a8:6b:91:36:88:4f:24:89:81:
         e3:73:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org