Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/234F64922A212C21046D3F316A32BBA74BE88DAB.mft
File:                     234F64922A212C21046D3F316A32BBA74BE88DAB.mft (raw, json)
Hash identifier:          fDg0/8yV7vKx9nLCkObCXd2/lw2m9acUSLMZE2KZf1U=
Subject key identifier:   3E:0D:AC:CF:81:A3:58:93:63:56:05:AE:AB:BB:66:91:99:2B:2B:A8
Authority key identifier: 23:4F:64:92:2A:21:2C:21:04:6D:3F:31:6A:32:BB:A7:4B:E8:8D:AB
Certificate issuer:       /CN=234F64922A212C21046D3F316A32BBA74BE88DAB
Certificate serial:       5DF4D96FD277B5456B954084AADE262FEF6652B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/234F64922A212C21046D3F316A32BBA74BE88DAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/234F64922A212C21046D3F316A32BBA74BE88DAB.mft
Manifest number:          4E
Signing time:             Fri 03 Nov 2023 20:31:07 +0000
Manifest this update:     Fri 03 Nov 2023 20:26:07 +0000
Manifest next update:     Sat 04 Nov 2023 22:35:07 +0000
Files and hashes:         1: 323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa (hash: PJaiQEvjcpkmwjL313jX85vMoeJU3rgXE1KfU/I3S8g=)
                          2: 3230312e3231362e3132312e302f32342d3234203d3e20323730333035.roa (hash: EaILV6pPgReTk/98IJYIrMRuAaM5c2ScUOSKOFB053o=)
                          3: 323830343a366130303a663030303a3a2f33362d3336203d3e20323730333035.roa (hash: +/hhh5sRXzoWESsIF9EuxvjOaNKCaOS79c64Dn31QF0=)
                          4: 3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa (hash: qEsCZsr7QNSjaGFhU+0+oMe1f7amTaWzD+z5TdQyw78=)
                          5: 323830343a366130303a3a2f33322d3332203d3e20323730333035.roa (hash: thpxO5b7JWMrwgxXNoEJVV18FxRrw4dT2+40blEiSLM=)
                          6: 3230312e3231362e3132332e302f32342d3234203d3e20323730333035.roa (hash: Bpj6Q4KIqXent/e33nqKHepkfWBtg9PH7TOml+e17c0=)
                          7: 3230312e3231362e3132322e302f32342d3234203d3e20323730333035.roa (hash: AIn8HsK5cepl06HTwyL03G447PgkF/TUbzfYqtjn1hk=)
                          8: 234F64922A212C21046D3F316A32BBA74BE88DAB.crl (hash: IDjD8lcrl4QvXaCZ3k98tKyN0tsxFjRuNSfnDa3sk8I=)
                          9: 3230312e3231362e3132302e302f32332d3233203d3e20323730333035.roa (hash: 5b2lRVAswvl0tM2wjvMTM5IRpPDO+dD2F9Mx1597kqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f4:d9:6f:d2:77:b5:45:6b:95:40:84:aa:de:26:2f:ef:66:52:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234F64922A212C21046D3F316A32BBA74BE88DAB
        Validity
            Not Before: Nov  3 20:26:07 2023 GMT
            Not After : Nov  4 22:35:07 2023 GMT
        Subject: CN=3E0DACCF81A35893635605AEABBB6691992B2BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:52:43:c0:f1:f3:78:c9:04:8e:a9:75:1b:
                    87:0d:ff:ff:c6:92:fd:78:f5:8f:b8:b8:e6:6c:26:
                    ab:b2:b2:c6:2f:09:09:7d:b0:8b:e4:4d:1c:b4:83:
                    3a:d1:5c:7c:e9:bb:2c:b1:0e:26:41:4f:03:78:01:
                    77:e9:21:0a:08:82:fe:34:b2:04:9f:0c:22:16:e1:
                    f0:b1:88:8e:fb:63:7d:78:0c:1b:8f:b8:51:90:b0:
                    c3:23:e9:37:e6:c3:bf:7e:93:8f:2d:ba:ed:60:9b:
                    e5:fa:40:8d:a2:da:7c:74:b5:ae:f6:76:9d:df:52:
                    82:79:14:65:e1:62:75:45:8b:cf:0e:27:0a:97:52:
                    0b:fb:25:74:7e:ff:57:5c:0f:75:d3:46:0b:66:64:
                    06:25:42:57:44:a2:09:39:20:9f:2b:51:65:d8:bf:
                    b6:76:e5:ad:42:69:cb:e8:c1:2e:1e:a3:7b:ea:3b:
                    a9:22:1f:29:0e:7d:95:00:e7:60:79:ee:dd:59:71:
                    d4:2c:c1:69:fd:6f:7a:3a:95:11:35:bb:d7:cd:be:
                    8d:b4:a0:12:52:66:75:3b:30:e6:cf:c9:26:9a:8f:
                    16:9c:f0:b1:70:0e:4e:63:12:b1:d8:da:14:b6:6c:
                    28:aa:37:d6:c5:3e:db:c9:7a:cd:d6:5d:d0:11:05:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0D:AC:CF:81:A3:58:93:63:56:05:AE:AB:BB:66:91:99:2B:2B:A8
            X509v3 Authority Key Identifier:
                keyid:23:4F:64:92:2A:21:2C:21:04:6D:3F:31:6A:32:BB:A7:4B:E8:8D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/234F64922A212C21046D3F316A32BBA74BE88DAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/234F64922A212C21046D3F316A32BBA74BE88DAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/234F64922A212C21046D3F316A32BBA74BE88DAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:cd:14:a3:68:34:2c:be:04:e5:1f:34:b8:77:fc:1b:31:3d:
         c1:dd:3a:ad:db:47:97:bb:b1:7f:18:e6:34:19:94:04:52:6c:
         9c:c6:70:6a:26:12:6a:e2:b4:b7:cc:fe:1f:ca:01:42:30:82:
         29:63:a7:4c:6e:69:be:c1:14:06:67:e5:2d:24:28:9d:02:03:
         12:bb:1a:28:55:a7:7f:66:e8:b4:77:74:ea:aa:4b:74:ab:8c:
         99:84:b7:16:f6:dc:2b:b3:14:41:27:31:ec:07:1d:2a:81:4b:
         6d:40:bc:b4:87:3a:b0:2e:ad:4f:5a:7f:e7:dd:cb:a2:d3:12:
         6a:36:9c:76:19:20:42:61:33:84:ea:46:16:f1:e0:62:8e:1f:
         64:66:7f:62:d9:b6:60:a4:54:21:b6:a8:80:e1:99:d7:78:3f:
         7b:93:68:ff:02:3d:cf:22:c2:cd:ca:62:62:24:1a:c7:e8:f3:
         0e:dc:ab:40:d6:0e:61:ca:d5:14:05:d4:e1:d6:ac:0c:fb:a1:
         51:2c:40:6f:8b:da:7d:e5:6e:57:8e:a8:37:99:dc:b3:c1:33:
         f5:90:01:e5:8d:6a:85:65:af:04:07:c9:bc:d2:2c:0b:21:38:
         37:87:6a:9e:55:5d:d1:ed:a4:01:98:b7:44:ea:89:da:2d:c4:
         46:15:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org