Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.mft
File:                     B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.mft (raw, json)
Hash identifier:          G/F3YDZScoSxj/Ed1ECuUrqymcBtyVRmXmHEeI/hOnM=
Subject key identifier:   C3:D8:30:6B:54:64:7D:72:33:35:8A:C4:4D:CF:B2:BA:1E:18:B4:AB
Authority key identifier: B3:4F:77:83:5A:64:BC:27:B0:DA:5D:EA:4C:70:A8:1A:69:67:E1:3D
Certificate issuer:       /CN=B34F77835A64BC27B0DA5DEA4C70A81A6967E13D
Certificate serial:       7989F408E9BE12D03646FCE517F5ED7ACCF96FB7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.mft
Manifest number:          76
Signing time:             Fri 02 Dec 2022 12:00:24 +0000
Manifest this update:     Fri 02 Dec 2022 11:55:24 +0000
Manifest next update:     Sat 03 Dec 2022 12:39:24 +0000
Files and hashes:         1: 323830343a343239383a3a2f33322d3334203d3e20323637353131.roa (hash: X6VZnafLpnoMFLwJ7GDGAbzwjNYqscKplZZlFQ/A9Cs=)
                          2: B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.crl (hash: e2ihuEYIutmifQxKClvuc7RspG7GhfLM1fdrarnm83I=)
                          3: 3230312e3138322e3130302e302f32322d3234203d3e20323637353131.roa (hash: nkezjKsQIh0e/eSLNXApDhc2PZioYeJnrZz0mGKO5KA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:89:f4:08:e9:be:12:d0:36:46:fc:e5:17:f5:ed:7a:cc:f9:6f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34F77835A64BC27B0DA5DEA4C70A81A6967E13D
        Validity
            Not Before: Dec  2 11:55:24 2022 GMT
            Not After : Dec  3 12:39:24 2022 GMT
        Subject: CN=C3D8306B54647D7233358AC44DCFB2BA1E18B4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:7c:d1:93:7e:16:6f:42:31:26:ad:db:2a:
                    2f:28:fc:da:7e:f8:4b:56:9f:1b:1f:c8:96:28:04:
                    64:66:39:cf:37:1d:01:95:a9:70:79:02:c3:c3:57:
                    bc:98:d1:6c:f8:5a:03:2d:5a:ea:a0:95:64:1a:fd:
                    06:7c:61:49:85:70:bf:5c:89:da:6a:62:c6:e1:25:
                    d5:74:2c:53:74:cc:c9:ee:3b:0a:ca:7b:5a:31:a7:
                    6c:cf:d0:67:85:7d:9b:00:bb:9f:ef:1d:89:73:96:
                    97:47:32:ac:a4:4a:ea:35:5f:1d:21:29:c4:bd:48:
                    cf:95:7c:f4:d7:ca:56:0f:7f:ae:e3:5f:c2:c1:a7:
                    96:cf:1c:fc:28:45:b0:34:1f:76:8d:52:33:dd:44:
                    57:00:7c:5c:67:fd:44:2e:23:f6:a7:8c:c0:19:11:
                    c6:09:c0:8e:d1:7c:98:f4:e5:ea:a0:84:f1:be:4f:
                    70:d3:d8:db:dc:d6:db:a2:55:e0:88:82:08:9d:4f:
                    b5:30:2b:8e:26:bc:a2:e7:da:5e:c4:9b:4d:e2:c7:
                    82:66:52:ea:95:be:3d:b4:74:f4:08:bb:58:23:62:
                    df:0a:7c:dc:2a:fa:4c:45:43:81:d5:0a:fa:6b:cc:
                    5f:2b:ee:7d:c6:0d:cc:59:a2:be:a2:76:9d:91:23:
                    cd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D8:30:6B:54:64:7D:72:33:35:8A:C4:4D:CF:B2:BA:1E:18:B4:AB
            X509v3 Authority Key Identifier:
                keyid:B3:4F:77:83:5A:64:BC:27:B0:DA:5D:EA:4C:70:A8:1A:69:67:E1:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/B34F77835A64BC27B0DA5DEA4C70A81A6967E13D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:83:f8:5b:6e:61:1f:ff:1c:cb:ce:70:8a:88:35:6b:80:
         2f:7e:9d:b4:58:b5:a6:b7:cd:76:f6:11:f7:0e:0c:a2:5f:83:
         77:78:9f:6c:00:68:75:09:6b:88:16:4e:77:3b:ff:e3:8b:bd:
         b0:70:94:1f:07:c1:04:65:78:4a:ef:fe:3f:60:73:16:41:14:
         65:b3:6d:2a:12:21:bc:93:21:bf:d2:da:42:68:72:63:25:dd:
         73:c8:80:ea:9e:80:2c:8f:e1:8b:b8:3d:b0:32:fb:86:52:66:
         b0:8c:b9:d2:ad:8f:ce:c3:b7:7b:d6:be:8a:b5:9e:9e:e6:79:
         f3:c9:69:82:32:e1:8b:9f:03:26:33:0c:8c:de:f9:de:fe:dc:
         42:8a:2e:29:93:e6:ef:45:0f:91:08:8d:25:aa:b3:49:9d:c7:
         36:ab:ed:3d:7d:be:70:25:41:62:4d:38:98:c0:93:67:a9:11:
         c3:b3:79:02:a7:1e:d3:1b:61:1b:8b:8f:7f:71:34:d9:9a:ae:
         81:76:dc:40:66:58:b2:b0:ad:a5:4a:d2:6f:f4:6d:83:b1:11:
         8b:79:7d:cc:be:a2:ff:83:d5:0a:c2:25:7f:9e:b9:33:05:a9:
         42:f1:c1:8e:3d:76:48:b1:ec:06:30:ce:e4:7a:e1:26:19:2e:
         e1:8d:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org