Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.mft
File:                     3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.mft (raw, json)
Hash identifier:          Q6rTZ2W4gGCTSU3LdKBskg1TIAwsxLOU6pvkJYdjW6I=
Subject key identifier:   14:11:95:08:1B:51:20:26:99:AA:21:D8:FC:44:75:17:A0:9C:10:90
Authority key identifier: 3D:38:F4:A1:CA:6D:BD:93:4D:E8:9C:11:5C:65:43:9B:BE:50:FB:A8
Certificate issuer:       /CN=3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8
Certificate serial:       2C59299C92FEE5B82F070D51E39681AD3F84B5B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.mft
Manifest number:          11
Signing time:             Fri 01 Nov 2024 08:32:56 +0000
Manifest this update:     Fri 01 Nov 2024 08:27:56 +0000
Manifest next update:     Sat 02 Nov 2024 11:24:56 +0000
Files and hashes:         1: 3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.crl (hash: 8bNT5G2tlTexsa/2s7yDOhDccUyJsp+XScCl3O4Qyio=)
                          2: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: q1m3QIJp4jFUEMeFF2aJhYd4Lp+/32GIqZSqyl24erw=)
                          3: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: rMrkvP9QmWN+h2PB6NEsCgH6dlZXDlDmfpsFIfqiCT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:59:29:9c:92:fe:e5:b8:2f:07:0d:51:e3:96:81:ad:3f:84:b5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8
        Validity
            Not Before: Nov  1 08:27:56 2024 GMT
            Not After : Nov  2 11:24:56 2024 GMT
        Subject: CN=141195081B51202699AA21D8FC447517A09C1090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:ff:3a:a3:b9:94:9b:17:26:77:a6:de:18:
                    54:a1:5c:40:76:1d:d6:ee:98:ef:46:bf:c8:b9:cf:
                    32:d7:fd:44:55:cb:8e:fb:39:e4:68:0d:92:90:05:
                    d3:7f:5a:ff:d9:6a:8a:fe:c0:ad:c2:c5:3e:a6:69:
                    15:8b:5f:f6:e6:f6:75:e6:78:31:80:87:76:ef:7f:
                    05:70:f0:fe:78:6a:c2:a4:ba:44:62:c2:f3:45:67:
                    17:0e:02:00:f1:ad:d6:0e:61:98:4b:e5:ee:1d:19:
                    15:89:f5:c3:af:48:9a:49:36:8b:a1:a3:31:e0:7a:
                    48:08:1a:2d:fe:38:2e:ea:1a:79:3b:f4:ef:76:6e:
                    ef:fc:94:d0:4f:24:ae:50:4f:87:0d:a4:61:24:32:
                    40:a4:2d:84:a6:f6:cc:dd:4d:74:70:fc:33:53:30:
                    74:d0:19:b7:3f:78:3b:e4:59:3f:75:28:5f:0c:18:
                    5f:bb:93:1e:42:96:98:b2:5d:5f:83:79:f4:46:75:
                    bb:e0:25:ec:22:d0:c4:3f:79:1d:bc:48:ed:e8:16:
                    67:7b:53:41:81:0a:0d:0f:9e:6d:a0:54:11:a9:2a:
                    c5:c4:26:37:17:cc:56:b6:01:f6:e1:6d:e1:70:fb:
                    5a:fb:5b:3a:45:21:a7:32:e8:d4:01:5b:54:30:9c:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:11:95:08:1B:51:20:26:99:AA:21:D8:FC:44:75:17:A0:9C:10:90
            X509v3 Authority Key Identifier:
                keyid:3D:38:F4:A1:CA:6D:BD:93:4D:E8:9C:11:5C:65:43:9B:BE:50:FB:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:7c:85:d7:9e:87:ad:69:14:bf:39:8b:ef:88:e4:ad:4b:93:
         3a:ca:a2:48:cf:08:da:6c:9a:8d:7a:aa:41:87:23:5b:41:ee:
         cd:8d:60:08:bf:86:b7:fa:80:46:30:2f:58:80:eb:f6:f9:26:
         b8:c2:31:5d:e3:d2:79:6d:56:00:64:dd:33:1f:81:83:a5:5e:
         34:2f:2a:0a:3e:57:f6:fb:05:a7:3a:b8:5f:6d:0a:4f:ee:b1:
         14:ec:6c:de:61:00:6e:4c:7b:32:eb:70:e5:df:bb:02:f4:79:
         ef:ed:c5:0f:db:d4:c4:5e:25:b0:a6:98:48:44:fd:ee:3a:72:
         2e:bf:53:4e:37:ac:f0:7d:74:31:f9:31:41:4a:05:02:d9:6d:
         79:f5:f0:cc:06:78:66:72:c6:ef:29:d4:32:f1:5e:d7:02:03:
         84:a1:19:32:0d:da:41:ac:19:2a:b4:6e:d4:64:40:24:08:90:
         d5:b6:b4:58:f5:fa:b3:d8:ba:99:29:e0:00:15:a8:b2:8a:08:
         98:40:3b:cf:af:09:98:37:9c:58:41:86:a5:f2:12:76:fa:e3:
         3e:54:28:91:61:a9:84:83:f6:70:f2:bf:43:b9:1f:b1:b1:7e:
         e2:0b:7f:57:ce:d2:ef:fe:4a:fd:5e:8e:de:75:b1:63:0a:d1:
         d1:ba:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net