Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.mft
File:                     7A6E161A8B2B31DB30E03A950051D8233F43BE11.mft (raw, json)
Hash identifier:          ibGBJfA3G6QPzgCknfblfB+gtJjc2AA0wmSj36jNsEQ=
Subject key identifier:   B9:9C:2B:77:23:ED:E3:6F:45:9A:60:EC:79:BE:5F:D2:B5:47:A7:D1
Authority key identifier: 7A:6E:16:1A:8B:2B:31:DB:30:E0:3A:95:00:51:D8:23:3F:43:BE:11
Certificate issuer:       /CN=7A6E161A8B2B31DB30E03A950051D8233F43BE11
Certificate serial:       20D022799952E93E9EC6C2E84A92F891A9586F3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.mft
Manifest number:          3C
Signing time:             Mon 15 Apr 2024 07:50:12 +0000
Manifest this update:     Mon 15 Apr 2024 07:45:12 +0000
Manifest next update:     Tue 16 Apr 2024 11:05:12 +0000
Files and hashes:         1: 323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa (hash: EBSp/gfkaB5NC6dQi24Ke3F5nxiO/4KJkgp8p8LJ+Ss=)
                          2: 323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (hash: wWBclj0VZspyFsLr9MDlvka5eMtgfQ28PQb4b2ebFKg=)
                          3: 34352e37312e32312e302f32342d3234203d3e20323637353936.roa (hash: FBx3997iX1noBuP6wJ8q/iLsPJN7TY8AonelSsB4/S4=)
                          4: 34352e37312e32322e302f32332d3233203d3e20323637353936.roa (hash: G4cy9w7sxr3n56ROdSBGrx5nv3CesIY4NjEkvH2sCow=)
                          5: 323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (hash: pM0naeLUDZZ943P+a94jkWT2jCQalTpfCvxCe4GsFWI=)
                          6: 7A6E161A8B2B31DB30E03A950051D8233F43BE11.crl (hash: GcR78n57avzUxN5CGLHKCBTT89pWBU5HGv14A89ybzc=)
                          7: 34352e37312e32302e302f32322d3232203d3e20323637353936.roa (hash: Te7oV3hFsAp3MIkN6VBvdenjIU2vr/fZ2chMidg9lVw=)
                          8: 34352e37312e32302e302f32332d3233203d3e20323637353936.roa (hash: v/8YjMj8NzwQlRKFYyDzNls5/7nIS8mOSAG3CYqdELM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d0:22:79:99:52:e9:3e:9e:c6:c2:e8:4a:92:f8:91:a9:58:6f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A6E161A8B2B31DB30E03A950051D8233F43BE11
        Validity
            Not Before: Apr 15 07:45:12 2024 GMT
            Not After : Apr 16 11:05:12 2024 GMT
        Subject: CN=B99C2B7723EDE36F459A60EC79BE5FD2B547A7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:5c:7c:b7:49:7c:c5:cb:1f:a8:e2:cd:07:
                    bb:be:f9:4b:30:cf:51:f2:14:45:30:28:b8:24:e1:
                    6d:7a:4a:44:d0:df:59:07:4d:4f:8a:5b:4a:26:cd:
                    dd:fa:14:43:82:bc:46:be:2f:4b:5d:94:03:cf:09:
                    c0:14:eb:06:7f:91:7a:2f:5b:b1:95:1d:d2:cd:be:
                    18:fb:d7:2e:23:1b:0b:a1:5a:ce:c7:4d:22:db:ed:
                    2e:1a:fb:cf:04:ef:7f:42:c7:d1:8b:5a:5e:f4:d9:
                    cd:c4:53:f0:f0:94:fa:3c:64:dd:c2:b1:ad:71:08:
                    40:9a:fe:2c:e1:e6:72:b1:31:12:5e:44:22:d4:35:
                    21:53:7e:31:78:f7:39:2e:2a:6f:eb:26:20:eb:14:
                    1f:71:fc:aa:0b:02:b7:0d:39:89:e1:d5:fe:43:c1:
                    99:9e:b3:3c:88:75:20:53:42:73:5e:8a:ae:4b:bb:
                    d8:1f:e7:8c:7f:a7:8a:0b:7d:75:dd:85:53:7c:20:
                    94:3d:3b:84:da:19:86:14:7c:cd:91:de:db:2d:4b:
                    6d:f0:df:df:ac:a9:ca:1b:be:26:7f:71:ac:94:82:
                    65:ab:fb:ff:93:75:62:73:6c:40:6c:19:6b:62:c8:
                    4b:34:5c:70:27:8c:6e:10:d4:27:37:38:44:37:34:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9C:2B:77:23:ED:E3:6F:45:9A:60:EC:79:BE:5F:D2:B5:47:A7:D1
            X509v3 Authority Key Identifier:
                keyid:7A:6E:16:1A:8B:2B:31:DB:30:E0:3A:95:00:51:D8:23:3F:43:BE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:43:92:f0:7c:8b:c5:8d:97:07:dc:21:d4:df:68:5f:1b:
         93:cd:02:a0:f6:fb:2e:75:ce:c1:45:92:c4:ca:fe:5f:da:25:
         f1:cd:17:86:3a:3e:4a:4a:6d:2b:e1:89:9c:c2:12:ba:68:e8:
         e8:4d:1a:bf:c0:f8:cd:1d:7f:db:ac:60:e1:e6:4d:23:b2:2f:
         a5:b1:b4:58:1d:78:e5:a2:df:2b:52:a6:0b:49:b1:27:f0:84:
         03:7a:6e:41:02:cc:40:69:d3:9d:f5:f3:02:1e:49:ee:81:2b:
         ef:ee:a1:dd:6d:ad:06:81:d1:6e:82:28:56:b3:2b:16:05:c7:
         44:57:99:fc:af:84:33:14:48:e0:57:d3:4b:fd:9f:80:6c:53:
         a4:9e:d6:ac:98:07:51:38:2e:5a:d2:4b:50:70:af:9b:52:5a:
         b6:b7:67:16:95:9d:d4:93:7f:a2:96:ca:c8:92:dc:1b:23:ba:
         3a:5f:3c:57:a2:a0:b3:bd:e3:84:08:24:7b:0b:bf:67:ed:0b:
         95:fa:cc:01:6d:86:0d:8e:74:2c:5f:31:23:5f:81:37:24:51:
         77:ea:67:7c:fe:60:c9:c7:6d:26:4e:ce:93:95:e1:3c:98:e9:
         31:f4:bd:a6:7c:cd:3a:eb:3d:c3:d7:58:8b:79:ce:2b:62:8d:
         bc:57:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org