Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.mft
File:                     D71A811340ADA62CB6E690F23A52B03E9A48D407.mft (raw, json)
Hash identifier:          3W6N1EfuMaQQ/q+R0g5Ij4szva9R1oNgNC0TZPkVLKA=
Subject key identifier:   30:34:31:DC:CB:2A:FF:09:CE:8D:32:4C:C1:7F:7B:17:AD:DC:DD:9B
Authority key identifier: D7:1A:81:13:40:AD:A6:2C:B6:E6:90:F2:3A:52:B0:3E:9A:48:D4:07
Certificate issuer:       /CN=D71A811340ADA62CB6E690F23A52B03E9A48D407
Certificate serial:       4CBC0C03CA2CDA9BC8E7B398D1C817D76D6FF4FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.mft
Manifest number:          0265
Signing time:             Wed 14 Feb 2024 11:35:30 +0000
Manifest this update:     Wed 14 Feb 2024 11:30:30 +0000
Manifest next update:     Thu 15 Feb 2024 14:55:30 +0000
Files and hashes:         1: D71A811340ADA62CB6E690F23A52B03E9A48D407.crl (hash: z8v6oBe7+p9W4Yf2HwOv+yw55NNfHvm7scJNQKlsyrM=)
                          2: 3230312e3133392e3139302e302f32332d3233203d3e203631393436.roa (hash: wg5NKC793jLHm+PzYmh6E4r3kUKESJqZYZqF8sxsDpw=)
                          3: 3230312e3133392e3138382e302f32332d3233203d3e203631393436.roa (hash: DRtAAq/zdUK31GzbDHibhV49fyxb5+Ajq75lsQbLDCY=)
                          4: 3230312e3133392e3138342e302f32312d3232203d3e203631393436.roa (hash: 90ZHOTxuLbf92JFcfjPpgszqM9vGfk/G/BoSgbyKeVY=)
                          5: 3230312e3133392e3138342e302f32332d3233203d3e203631393436.roa (hash: nh3GO4akxRQ7oxJPZjeXvgzglg+vYqKN0zydCigxjYY=)
                          6: 3230312e3133392e3138362e302f32332d3233203d3e203631393436.roa (hash: ffvErrxtExeElDV1KotU60gp0FSA/I914nKje1hZ3Dw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bc:0c:03:ca:2c:da:9b:c8:e7:b3:98:d1:c8:17:d7:6d:6f:f4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71A811340ADA62CB6E690F23A52B03E9A48D407
        Validity
            Not Before: Feb 14 11:30:30 2024 GMT
            Not After : Feb 15 14:55:30 2024 GMT
        Subject: CN=303431DCCB2AFF09CE8D324CC17F7B17ADDCDD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:88:dc:9e:3b:e4:31:53:0a:fd:55:97:ff:
                    bc:f3:4c:49:a0:c6:fc:91:3f:b3:f4:5a:40:db:f4:
                    ea:29:6e:70:0f:56:7f:11:66:2e:18:f5:05:9d:ea:
                    35:ff:5d:34:6d:1e:e9:4b:be:7d:53:ec:94:f2:88:
                    30:38:95:34:44:a3:d4:06:90:43:53:e5:70:6f:17:
                    11:80:99:3e:dd:20:da:66:10:3f:dd:a7:63:a3:53:
                    41:23:15:ad:a7:2f:f0:50:7d:dc:7d:3a:a3:aa:e1:
                    42:90:25:b8:b0:e3:0b:36:17:67:50:71:6b:33:0f:
                    6c:51:20:12:ba:1e:f3:af:a8:c5:d4:0a:8d:4c:1d:
                    97:dc:46:13:65:d9:1c:12:fe:52:05:4e:1e:08:ad:
                    3d:d5:20:7c:c8:cb:5f:48:d5:e2:43:1d:21:44:67:
                    18:58:f1:51:2e:4a:d2:cb:4e:d8:f2:e0:2b:cf:f6:
                    1e:2c:f1:23:78:21:89:11:48:a4:22:e2:1b:c0:1b:
                    62:41:d2:3f:27:6f:b2:18:30:64:b0:27:9c:17:b8:
                    32:5f:82:5c:48:8c:e3:ea:f0:b3:7a:31:b4:e0:41:
                    35:0d:c1:f1:54:3d:74:99:92:54:3f:29:6f:dc:c9:
                    4c:64:a5:03:01:1f:6e:e9:f5:52:64:c7:b3:c3:01:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:34:31:DC:CB:2A:FF:09:CE:8D:32:4C:C1:7F:7B:17:AD:DC:DD:9B
            X509v3 Authority Key Identifier:
                keyid:D7:1A:81:13:40:AD:A6:2C:B6:E6:90:F2:3A:52:B0:3E:9A:48:D4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a3:53:ff:2e:35:ac:d7:14:6f:09:ab:f5:0e:64:25:dd:35:
         b0:bf:e5:23:95:ac:6a:e5:cf:6b:78:3f:9a:f9:63:de:18:b7:
         f4:58:44:1f:d3:c3:57:b8:be:77:97:9e:43:21:8c:0a:79:c3:
         d0:54:77:f9:90:27:8e:7c:22:d4:f5:ef:5d:cd:db:ec:ca:8c:
         52:7f:68:00:f8:ea:af:1d:8b:3b:3c:d1:0d:cc:d2:cc:d8:e1:
         1a:25:60:68:22:7b:5f:57:f4:94:96:bd:b4:76:1f:00:d4:37:
         7d:24:8f:c2:a8:dc:67:1e:b3:1b:4e:5b:49:35:8e:26:d4:a7:
         8c:62:80:e9:e8:e5:35:ff:82:d4:d6:92:fe:1b:ae:6d:64:8c:
         30:fa:6a:e6:61:af:54:25:28:e6:e3:b5:89:a3:d1:03:27:eb:
         fb:59:e1:5f:53:fe:0d:fc:41:88:bb:18:11:7f:78:a7:db:f6:
         a3:bb:2e:de:e0:fa:19:12:fc:ce:28:48:25:ec:51:3f:bc:b1:
         7f:8f:5c:1d:a1:6f:35:44:01:e9:6f:c5:e4:1e:ff:fa:99:94:
         a3:c9:5d:ef:d1:a6:dd:95:c3:3f:43:6a:95:07:b6:69:73:f7:
         b4:3c:00:8c:e1:a8:7b:d5:fd:ad:b8:4a:b5:89:fb:7e:76:85:
         bf:22:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org