Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/2E8BE6EBF62FAD03607150D29EF80FE55A866209.mft
File:                     2E8BE6EBF62FAD03607150D29EF80FE55A866209.mft (raw, json)
Hash identifier:          WLycAiX6IlN4g0PtLrIsWHZeJZot1SCqCFY2y+FUM0M=
Subject key identifier:   44:BF:5D:7E:A7:E8:80:3C:47:7F:CD:E7:B3:98:33:8B:A3:E5:27:45
Authority key identifier: 2E:8B:E6:EB:F6:2F:AD:03:60:71:50:D2:9E:F8:0F:E5:5A:86:62:09
Certificate issuer:       /CN=2E8BE6EBF62FAD03607150D29EF80FE55A866209
Certificate serial:       78957F4333914E6AF8ACEA62D2B5C1AB0A35AE47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8BE6EBF62FAD03607150D29EF80FE55A866209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/2E8BE6EBF62FAD03607150D29EF80FE55A866209.mft
Manifest number:          A4
Signing time:             Sat 07 Sep 2024 20:22:17 +0000
Manifest this update:     Sat 07 Sep 2024 20:17:11 +0000
Manifest next update:     Sun 08 Sep 2024 21:59:11 +0000
Files and hashes:         1: 323830343a356535303a3a2f33322d3438203d3e20323639303235.roa (hash: erbVtSDwttSEaNgUBRf9aRihnK/Tqridy72sOC44DMM=)
                          2: 34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa (hash: U226hBLbTdM7wjRExiWkaGfR0YB69bn7avNeZqjGpEs=)
                          3: 2E8BE6EBF62FAD03607150D29EF80FE55A866209.crl (hash: 64AtuUuDqVz5ZOb6AlD7YALyw6d7dpQS+k0B+69HsVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:95:7f:43:33:91:4e:6a:f8:ac:ea:62:d2:b5:c1:ab:0a:35:ae:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8BE6EBF62FAD03607150D29EF80FE55A866209
        Validity
            Not Before: Sep  7 20:17:11 2024 GMT
            Not After : Sep  8 21:59:11 2024 GMT
        Subject: CN=44BF5D7EA7E8803C477FCDE7B398338BA3E52745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:e5:7d:e7:14:73:04:53:6a:e8:aa:82:6b:
                    cf:df:a9:57:5e:ea:71:66:16:77:15:81:c9:96:77:
                    fe:8f:65:0c:56:5a:93:eb:c7:c7:da:96:1a:2d:0e:
                    b2:38:61:78:be:1f:18:1f:52:a0:40:31:83:b2:d4:
                    43:aa:0f:12:79:87:f3:03:39:f8:78:54:c2:2e:d0:
                    61:05:b9:b8:5c:96:de:90:b6:4f:af:e2:24:7b:2e:
                    41:f6:52:0f:34:d6:7d:44:14:b9:f4:5b:ae:46:ca:
                    74:f1:71:a7:28:79:ee:6e:f7:e3:97:19:c8:82:52:
                    40:41:fb:fd:9d:ac:56:fd:ea:e1:20:b7:2b:09:82:
                    6e:fc:d4:98:f4:c4:49:a9:ec:8a:ff:51:2a:7a:ac:
                    46:c3:67:6c:10:eb:72:b1:fd:29:2b:a5:38:a7:c1:
                    46:11:5c:43:95:02:a3:01:4f:f0:bd:2b:9a:0a:20:
                    da:87:80:a8:80:aa:79:1b:65:68:8c:3a:66:b9:cf:
                    c5:f1:60:ca:69:84:4a:93:f6:46:5d:d7:0a:7a:d5:
                    07:37:62:2d:b7:4c:d8:ae:07:5a:67:eb:bb:ad:0d:
                    ab:40:43:34:6b:1a:cb:c9:3b:2e:e3:56:1d:95:42:
                    21:fb:50:ea:79:5f:05:b9:55:e5:03:86:80:71:f1:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BF:5D:7E:A7:E8:80:3C:47:7F:CD:E7:B3:98:33:8B:A3:E5:27:45
            X509v3 Authority Key Identifier:
                keyid:2E:8B:E6:EB:F6:2F:AD:03:60:71:50:D2:9E:F8:0F:E5:5A:86:62:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/2E8BE6EBF62FAD03607150D29EF80FE55A866209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8BE6EBF62FAD03607150D29EF80FE55A866209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/2E8BE6EBF62FAD03607150D29EF80FE55A866209.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c8:b3:2a:e6:e1:f2:54:d3:5b:bb:10:b3:16:c7:91:1f:14:
         0d:53:05:22:06:88:c4:2b:c9:70:a3:86:4e:46:e5:6a:cd:56:
         f3:81:57:b1:c0:da:56:f0:8d:bd:bc:01:bf:d8:fe:58:e4:bc:
         d2:bc:b8:f2:46:7b:9c:53:b4:e6:0e:91:ae:b7:1b:89:8e:56:
         9e:2d:dd:e3:56:69:a5:05:3c:39:bc:7b:95:ae:46:0c:87:99:
         60:3d:9d:c0:53:86:fc:75:dc:f5:45:e6:bc:67:bc:47:9f:25:
         65:ea:7b:2c:50:84:d1:f5:7f:04:8a:51:f0:5d:a3:6b:07:8a:
         79:f6:f5:36:35:00:eb:55:72:6c:04:48:c9:39:6f:a8:66:b1:
         c7:5f:ab:d9:08:ae:87:86:46:5d:5d:06:92:a7:3c:06:ae:8a:
         4b:e7:2f:ed:9c:d7:87:4a:28:4b:27:32:99:ad:cb:0b:05:e8:
         81:c4:98:28:39:c7:26:84:7b:86:46:7e:b9:b4:bb:69:7b:a3:
         8c:90:b2:a7:b1:b3:ad:00:fb:04:76:9b:7d:b2:f7:5d:d1:fd:
         44:b1:b7:2b:1d:95:f6:74:1f:21:36:d3:8f:b9:1d:e5:58:1b:
         d2:e5:e3:a2:58:e6:ff:1f:c0:4d:1e:07:1c:e3:a7:e0:78:5a:
         3e:e0:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 18:17:53 2024 by rpki-client on console-ams.rpki-client.org