Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/1/BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.mft
File:                     BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.mft (raw, json)
Hash identifier:          /LkbApo9uA9TBtSnvwZgqRhBU2ouuPKCuWXVoxNH8wI=
Subject key identifier:   AD:1B:0E:11:C2:0C:40:85:5D:C3:CD:17:5F:29:D4:C1:3F:20:49:50
Authority key identifier: BF:66:D1:32:5E:66:C6:F4:F6:98:94:4F:DF:44:FF:4E:1B:0E:A9:74
Certificate issuer:       /CN=BF66D1325E66C6F4F698944FDF44FF4E1B0EA974
Certificate serial:       4D84F2FFA2A55BB27F4AB09F905DEB38CA242B63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/1/BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.mft
Manifest number:          B0
Signing time:             Mon 29 Jul 2024 12:30:00 +0000
Manifest this update:     Mon 29 Jul 2024 12:25:00 +0000
Manifest next update:     Tue 30 Jul 2024 12:30:00 +0000
Files and hashes:         1: BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.crl (hash: 4Es1M3tWTFtWzwZsBzGMceIKQ0lVZocK6pyfGN6H2J0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:84:f2:ff:a2:a5:5b:b2:7f:4a:b0:9f:90:5d:eb:38:ca:24:2b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF66D1325E66C6F4F698944FDF44FF4E1B0EA974
        Validity
            Not Before: Jul 29 12:25:00 2024 GMT
            Not After : Aug  5 12:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:81:4f:e1:64:27:98:1c:08:fa:c0:32:50:26:
                    d3:21:49:d5:e1:5a:72:6b:08:a5:d9:79:93:3d:9e:
                    55:92:0d:8e:0b:d7:67:10:5e:67:97:ed:35:b8:d6:
                    64:c5:21:06:25:b6:1c:60:d0:fb:9c:34:ae:59:e7:
                    a6:81:ab:21:21:94:47:3e:bf:9b:9a:8f:83:b2:28:
                    16:b8:a2:ca:46:99:37:b7:32:57:c8:08:b3:b7:e3:
                    00:e1:80:ed:f6:29:41:14:1c:4c:c4:a7:91:43:3b:
                    5f:eb:91:41:fe:2b:f5:25:23:26:3c:e5:1d:cd:b3:
                    bb:a7:3c:1e:58:fb:1a:76:06:76:1a:14:bb:63:07:
                    39:dd:b7:9f:74:25:02:2b:b1:1c:91:73:8e:67:3a:
                    6f:01:ba:fa:d7:cf:e8:5a:f1:37:c0:46:2c:06:b9:
                    36:88:a7:54:cc:97:2a:97:a9:c2:6f:e0:cd:4c:02:
                    45:28:bc:f7:1e:61:2c:65:9a:6c:53:df:49:59:fa:
                    69:75:b6:a9:8b:ed:5f:eb:f3:d0:90:87:00:12:3f:
                    91:92:9d:73:a1:7e:f7:a3:52:55:1d:3c:ad:83:a5:
                    17:4b:e2:39:70:1f:88:6b:6d:5a:52:7d:0b:a6:74:
                    29:7a:1e:4a:d5:82:bf:aa:88:f9:c4:e6:fd:ce:8d:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1B:0E:11:C2:0C:40:85:5D:C3:CD:17:5F:29:D4:C1:3F:20:49:50
            X509v3 Authority Key Identifier:
                keyid:BF:66:D1:32:5E:66:C6:F4:F6:98:94:4F:DF:44:FF:4E:1B:0E:A9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/1/BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/1/BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6e:98:fd:a5:df:e7:b0:03:2e:22:48:25:6d:cc:9f:7a:67:
         25:31:56:d7:e0:92:fb:55:b7:25:95:a5:a2:fb:f2:e9:89:a8:
         2f:dc:20:57:8e:32:fa:04:c1:8a:37:3f:bc:80:19:8f:41:50:
         8e:9b:3d:cd:49:88:cc:f5:be:57:66:ed:86:b1:70:c6:9d:f0:
         af:99:28:0b:51:60:c8:48:ac:78:a7:38:95:b7:11:87:82:f9:
         26:58:88:28:a7:9b:e9:6e:b9:06:4f:13:d7:39:4a:49:20:52:
         fa:0d:df:ff:e4:8a:a0:b4:76:53:c5:ad:51:41:79:ae:f0:6a:
         72:6e:fb:8b:14:a2:c1:a8:a2:88:d7:b1:25:ac:3f:7c:a4:3e:
         d5:bf:a9:1d:b8:aa:40:52:6e:97:26:fb:61:29:ff:42:3e:80:
         d3:5f:4b:25:f5:75:27:a4:2a:fc:b1:f4:6c:49:fa:7c:07:c8:
         1a:25:e9:9f:79:fe:69:2b:ef:c3:5b:5c:ab:75:8a:56:76:d0:
         67:bc:20:07:cb:ab:66:83:e1:8d:e9:f1:b1:7c:3d:47:27:fb:
         5a:6b:0e:91:95:bf:a9:59:cb:b4:39:0d:6d:18:be:18:62:c5:
         43:c6:a4:2a:e1:8e:69:88:9a:54:c4:e7:b7:83:e9:e4:f2:37:
         ff:2f:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 16:14:07 2024 by rpki-client on console-fra.rpki-client.org