Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.mft
File:                     3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.mft (raw, json)
Hash identifier:          PZ7ph+faWCVepEjnVuuC0XJLlcRSmgzr6uu3QiOnoVk=
Subject key identifier:   FC:19:CB:3D:A0:EA:99:93:37:2B:48:AA:0F:7B:AA:EC:85:26:42:BF
Authority key identifier: 3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
Certificate issuer:       /CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Certificate serial:       3A68D14569B187623DC2E3C6CED6711D0CAEAF79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.mft
Manifest number:          E4
Signing time:             Thu 19 Sep 2024 03:02:17 +0000
Manifest this update:     Thu 19 Sep 2024 02:57:17 +0000
Manifest next update:     Fri 20 Sep 2024 06:26:17 +0000
Files and hashes:         1: 3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa (hash: QPNWJMPt5eb/4ZrdGx0LPCtnIBNetpZjiR/uyHuFwSI=)
                          2: 3230302e3232392e3234302e302f32342d3234203d3e20323730383334.roa (hash: Zv6vwbduSSUzpmOZQ2/2HLpYG8EeYcYG9I2yMVcmJSw=)
                          3: 3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa (hash: cmubC//DTPijga5lI3QLD6VeH8LHtEYsCPpBenWInrA=)
                          4: 3230302e3232392e3234322e302f32332d3233203d3e20323730383334.roa (hash: RckHrsbSeFmA9vL2NaOu1GhKgxFhtE15k0s5na7O8Vk=)
                          5: 3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl (hash: XVEumQ1flnQV/Z5GlgjkETbYkTqPCcKfICE7BKz/9qI=)
                          6: 3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa (hash: nTRdyVGzad1XPBcKBQdQkmuDwPv2MXykpPy1cBz6KwE=)
                          7: 3230302e3232392e3234332e302f32342d3234203d3e20323730383334.roa (hash: fQHc4KvT2x5wEDiWb2rAMboRGs7abCLa6vUgRQQysB0=)
                          8: 323830343a373232303a3a2f33322d3332203d3e20323730383334.roa (hash: /jPdsIMCAvFzNtgFfunkhBkIo+YyXhf5Ghh5REeuXJw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:68:d1:45:69:b1:87:62:3d:c2:e3:c6:ce:d6:71:1d:0c:ae:af:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
        Validity
            Not Before: Sep 19 02:57:17 2024 GMT
            Not After : Sep 20 06:26:17 2024 GMT
        Subject: CN=FC19CB3DA0EA9993372B48AA0F7BAAEC852642BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:14:1e:47:74:82:58:a6:22:4e:28:fd:8f:
                    65:23:5c:26:db:1b:9b:34:0a:df:d1:70:27:48:ac:
                    91:1c:23:2a:36:87:e7:54:66:ca:1f:5a:94:8a:fd:
                    74:38:99:ff:e6:0b:79:17:b0:ac:40:0f:d5:a7:34:
                    87:c1:95:0e:8c:70:1d:7c:62:d8:f7:3b:0e:77:65:
                    24:3c:7b:89:2c:9d:5d:74:8c:8f:29:9c:e5:8e:31:
                    9c:4f:1b:1a:4d:ab:ed:0c:fa:a9:1f:ad:c1:5c:bf:
                    62:1d:0a:72:7c:6f:69:f6:b8:e6:81:a3:34:40:03:
                    1a:77:47:29:2e:11:9e:07:6a:c7:0e:2e:29:9e:ff:
                    9b:7e:5c:17:3b:fd:c4:41:c3:17:aa:b4:7d:ea:9f:
                    20:48:7b:34:8e:2d:2f:74:70:6d:05:e1:ab:f4:83:
                    3a:f2:2c:89:9b:e9:87:e6:b0:36:5e:37:e2:4b:61:
                    6a:89:bd:57:4c:cb:15:da:89:91:0c:90:34:f4:da:
                    34:4d:ef:3b:9d:f6:7f:00:f7:b3:7d:5e:5c:02:18:
                    68:7e:26:09:90:b1:89:53:e3:f7:e8:a6:12:28:8b:
                    a0:a9:d7:95:d9:c8:95:9b:06:aa:49:cf:42:fb:81:
                    ea:a0:11:85:d6:41:cf:98:12:1e:fc:d8:58:5e:2a:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:19:CB:3D:A0:EA:99:93:37:2B:48:AA:0F:7B:AA:EC:85:26:42:BF
            X509v3 Authority Key Identifier:
                keyid:3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:60:22:af:94:14:1a:1b:8f:b9:32:7a:06:11:85:b2:cc:70:
         ca:8d:31:ee:91:1b:11:07:56:7c:5e:de:3a:36:b4:76:53:a5:
         7b:9e:58:44:be:e2:0c:3d:d8:50:d6:fc:e2:32:4b:84:33:7b:
         7f:0e:28:a2:e4:eb:20:a5:1d:42:e4:3f:ad:3a:c1:3d:78:71:
         ef:4d:c8:ff:41:11:02:3d:d3:66:3b:c6:d4:87:1c:29:e8:c8:
         29:ee:32:a4:e7:e1:32:40:29:09:e5:9b:c6:ec:80:42:c9:bc:
         35:50:69:e9:8d:c6:ca:67:6b:85:d5:09:58:15:be:41:e2:2e:
         18:f6:2a:3d:22:06:32:9b:fe:a1:5e:85:3e:af:74:d3:fd:0a:
         0c:85:32:13:63:19:6c:bd:b8:3e:44:f1:ed:0c:32:33:d3:cd:
         09:db:05:2a:3c:12:5d:3d:59:09:11:2e:3c:93:71:bd:6e:ba:
         d4:32:ae:9a:1a:85:d1:c3:0c:30:68:dd:c8:85:81:46:c5:09:
         4a:ee:e0:4a:92:84:77:7f:1b:94:b7:9f:92:81:7f:de:ab:04:
         96:98:bc:99:d3:9f:65:b1:97:8a:02:27:a0:85:cd:fb:0c:e0:
         91:a5:d3:fd:2f:81:01:c7:b7:bd:0e:51:ca:1b:28:61:a2:2b:
         00:ec:7e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 02:30:07 2024 by rpki-client on console-fra.rpki-client.org