Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/60A24DFED964B29E842EEDF768DB6A14019D0AE5.mft
File:                     60A24DFED964B29E842EEDF768DB6A14019D0AE5.mft (raw, json)
Hash identifier:          tvcbo7e+ViVBfsnAog4iscWWtWrW2c2rfBPGXJ/iAjU=
Subject key identifier:   22:1F:C1:DA:C7:67:07:07:BE:E8:BB:1A:56:F5:8E:88:D6:9E:8F:B8
Authority key identifier: 60:A2:4D:FE:D9:64:B2:9E:84:2E:ED:F7:68:DB:6A:14:01:9D:0A:E5
Certificate issuer:       /CN=60A24DFED964B29E842EEDF768DB6A14019D0AE5
Certificate serial:       34E9384873B93AAC3E3BB54DBCB98533F6B0F026
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A24DFED964B29E842EEDF768DB6A14019D0AE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/60A24DFED964B29E842EEDF768DB6A14019D0AE5.mft
Manifest number:          2A
Signing time:             Thu 03 Oct 2024 12:20:12 +0000
Manifest this update:     Thu 03 Oct 2024 12:15:12 +0000
Manifest next update:     Fri 04 Oct 2024 14:48:12 +0000
Files and hashes:         1: 323830343a356466383a3a2f33322d313238203d3e20323639303034.roa (hash: nu4NEe5deq3osm9Y9ID1YBJFQkz3hjAT1FoydrrRFuA=)
                          2: 34352e3137382e32382e302f32322d3332203d3e20323639303034.roa (hash: EKV1B7cyqHKV+5oyqOSjGAT6DFcJ3sdSKq7GlvGuqBU=)
                          3: 60A24DFED964B29E842EEDF768DB6A14019D0AE5.crl (hash: a9FYE2YW77VvOlCKv/8Cg5CWD8sSKAwPb7ki3OGHqXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:38:48:73:b9:3a:ac:3e:3b:b5:4d:bc:b9:85:33:f6:b0:f0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A24DFED964B29E842EEDF768DB6A14019D0AE5
        Validity
            Not Before: Oct  3 12:15:12 2024 GMT
            Not After : Oct  4 14:48:12 2024 GMT
        Subject: CN=221FC1DAC7670707BEE8BB1A56F58E88D69E8FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:d9:26:16:02:aa:b7:b9:90:ba:4d:b8:de:
                    9c:9d:16:d4:9a:60:71:f0:b5:07:5d:b9:e5:3b:c6:
                    9b:9e:f8:57:1d:4a:b6:b2:d0:7e:b2:44:c8:ab:f7:
                    b3:a2:fb:ab:04:af:d0:cc:99:b5:2d:35:be:ee:66:
                    46:8b:50:ec:51:68:c1:31:2e:60:76:36:95:fe:53:
                    fc:89:d0:6f:be:31:2a:28:e5:28:83:14:66:7c:9a:
                    50:b7:2f:85:8b:41:05:64:15:7b:78:e2:15:34:0f:
                    6b:3d:73:6c:db:0d:ac:b5:0a:cc:02:53:ab:2b:61:
                    ce:3a:25:f4:18:15:55:5d:9d:4a:97:f2:ba:da:71:
                    e9:54:89:ad:84:49:97:e9:ba:09:fa:24:02:ab:11:
                    b3:af:ef:8a:a3:e8:34:e7:bf:5c:60:79:6e:48:a7:
                    05:6d:31:93:44:6f:3a:5d:71:f1:76:56:67:c5:08:
                    66:1c:2a:0d:8b:32:ae:83:17:d9:9a:0e:51:f6:73:
                    92:19:3c:94:07:fd:d2:31:a1:47:7b:fe:ea:1c:67:
                    29:82:df:be:dd:2c:65:6d:69:56:3d:54:12:43:fe:
                    19:fc:15:c7:0d:b9:24:19:14:56:54:c8:26:64:e6:
                    5c:4c:4e:b0:9a:4f:bd:f9:15:7b:ba:58:52:75:93:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1F:C1:DA:C7:67:07:07:BE:E8:BB:1A:56:F5:8E:88:D6:9E:8F:B8
            X509v3 Authority Key Identifier:
                keyid:60:A2:4D:FE:D9:64:B2:9E:84:2E:ED:F7:68:DB:6A:14:01:9D:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/60A24DFED964B29E842EEDF768DB6A14019D0AE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A24DFED964B29E842EEDF768DB6A14019D0AE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/60A24DFED964B29E842EEDF768DB6A14019D0AE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:5c:e5:ea:f9:2d:8f:44:7c:90:94:87:a9:62:80:31:3c:
         a5:a2:f3:25:d4:f4:c9:50:bf:72:ff:36:b1:c8:bc:2d:85:7a:
         22:cb:28:a3:6c:00:fc:ce:c2:72:19:e2:44:98:a8:60:ca:6e:
         41:da:06:ee:3b:4f:2a:8c:65:9a:ef:33:b1:8a:43:e2:43:d3:
         6c:c7:7b:23:d2:72:b5:0c:7e:c2:02:d2:01:ad:4c:1c:e6:90:
         ac:c0:cb:bd:16:a2:a2:d9:78:aa:f4:18:99:c1:a7:48:f3:59:
         56:28:02:8f:42:cb:5c:62:9f:3f:57:4e:63:b7:81:ad:4a:e9:
         64:31:a5:82:41:f2:8d:db:27:94:e5:fb:bf:b3:27:db:fc:51:
         af:e9:b8:81:d9:3c:49:ba:e8:42:29:17:38:44:6a:41:14:a3:
         62:f2:c8:81:b3:8a:db:dd:d4:bc:0c:4e:56:bb:7e:96:8a:b9:
         1f:b7:a6:99:15:a9:55:0e:39:29:4b:1c:a0:35:92:de:47:e3:
         0f:90:ce:d5:d8:f1:50:20:8b:65:54:e9:ed:9c:75:79:63:48:
         f9:95:aa:ec:55:10:cc:f3:51:d5:65:de:43:3e:1c:3e:65:0a:
         cb:af:a9:c0:bd:c9:38:b0:73:f0:09:f5:7c:31:7b:db:09:76:
         dd:85:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 22:38:44 2024 by rpki-client on console-ams.rpki-client.org