Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft
File:                     573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft (raw, json)
Hash identifier:          kzMTudWo0oNSA6RP8U6HkgkY8tb0GLj+gfskeDWwAe0=
Subject key identifier:   49:53:78:BA:57:63:59:07:B1:CC:5B:7B:5C:86:6A:74:00:0C:0C:6E
Authority key identifier: 57:3D:7E:4F:EE:62:BC:F8:41:42:82:4A:34:97:9B:B0:A1:3D:1E:07
Certificate issuer:       /CN=573D7E4FEE62BCF84142824A34979BB0A13D1E07
Certificate serial:       0A1A7445FFA7CE52A2D25FAE582311145BB9ECDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573D7E4FEE62BCF84142824A34979BB0A13D1E07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft
Manifest number:          6C
Signing time:             Sun 16 Feb 2025 08:16:52 +0000
Manifest this update:     Sun 16 Feb 2025 08:11:52 +0000
Manifest next update:     Mon 17 Feb 2025 09:41:52 +0000
Files and hashes:         1: 323830343a336264303a3a2f33322d3334203d3e20323636313732.roa (hash: nq3ax6qsRzXjj8zKt2p6DkEpgdnFSsbGK/6TMFYDTY0=)
                          2: 3136302e31392e3234382e302f32332d3233203d3e203236363137.roa (hash: PmJthc3P+sWcR7oxYBE0k4jvRXn3mSs/hq5yDFy2Zj0=)
                          3: 3136302e31392e3235302e302f32332d3233203d3e203236363137.roa (hash: Z0Civgj7rwU1QCWZatX/YVgqOaSPkgB7Uh7iMCAk4eo=)
                          4: 573D7E4FEE62BCF84142824A34979BB0A13D1E07.crl (hash: iqecCiAg+V4QG0jy6Tl2ymZaa8DnWjOIj7s2TyqzJAM=)
                          5: 3136302e31392e3234382e302f32322d3232203d3e203236363137.roa (hash: 73fz1gRXdX/FdwYg94wnA9lzgDsUfxgNhVXkbduFazA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1a:74:45:ff:a7:ce:52:a2:d2:5f:ae:58:23:11:14:5b:b9:ec:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573D7E4FEE62BCF84142824A34979BB0A13D1E07
        Validity
            Not Before: Feb 16 08:11:52 2025 GMT
            Not After : Feb 17 09:41:52 2025 GMT
        Subject: CN=495378BA57635907B1CC5B7B5C866A74000C0C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:26:de:01:9a:56:09:62:84:82:33:a6:ea:
                    0f:4c:cc:5b:8a:21:52:ff:de:39:42:4f:6d:41:a6:
                    9e:fa:e9:6c:7e:32:59:d3:27:c3:1e:80:5b:e6:0d:
                    f6:de:d4:0b:ad:e0:66:5a:8a:fe:51:c7:93:96:48:
                    81:4f:2b:26:2c:f0:40:3a:6b:52:41:a3:59:e8:da:
                    d3:62:c8:85:95:2a:84:c1:ca:65:db:57:b7:22:b9:
                    4c:9e:d4:85:c3:ca:15:0f:53:7b:69:2a:39:fc:07:
                    8c:e8:be:8d:05:95:68:44:10:44:48:bc:b3:8f:ab:
                    15:a8:28:8c:5b:86:8d:ac:5d:5d:c3:df:f5:68:86:
                    b9:7e:9c:23:67:56:18:28:36:be:9d:c5:1e:f5:e5:
                    91:26:66:46:82:9a:68:c5:34:aa:9d:01:73:9f:06:
                    3a:61:dd:ff:5f:e1:7e:06:e3:de:e4:35:40:07:3b:
                    c6:ef:c7:46:d5:c4:0e:c8:89:d0:8d:fe:6d:5d:e0:
                    e9:54:6a:2a:fc:20:23:a1:92:86:f0:22:3d:ea:12:
                    e4:b9:af:e6:63:34:10:b8:e8:27:88:ea:0f:b0:03:
                    4e:a1:31:00:a1:31:37:5c:02:ef:06:e3:88:33:74:
                    ba:9e:fe:1c:b7:ac:b2:f1:8f:4c:39:cc:76:4a:32:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:53:78:BA:57:63:59:07:B1:CC:5B:7B:5C:86:6A:74:00:0C:0C:6E
            X509v3 Authority Key Identifier:
                keyid:57:3D:7E:4F:EE:62:BC:F8:41:42:82:4A:34:97:9B:B0:A1:3D:1E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573D7E4FEE62BCF84142824A34979BB0A13D1E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e0:bc:a7:87:81:5a:ce:1e:66:55:d0:ee:e4:d7:06:d4:22:
         9e:9c:f5:e8:90:09:c2:3d:06:e3:00:8c:e1:8b:a2:79:6f:5e:
         64:22:1d:78:f4:00:7f:9f:4e:f2:e5:b9:5d:62:77:d3:2a:43:
         77:f3:1c:fc:1b:3e:4e:03:89:52:78:d8:80:61:9f:ec:2f:64:
         f9:bb:a2:b4:d5:39:2c:f5:0b:d4:f1:6d:12:01:dc:c5:e5:e7:
         48:a9:7e:0b:21:be:70:d8:4c:81:22:88:88:46:ab:d5:93:5a:
         b5:99:fc:e4:ef:f6:dd:89:43:f8:2a:31:eb:1e:c0:1a:aa:37:
         f3:56:83:be:a8:fc:28:56:be:50:3c:37:d7:56:a7:0b:18:91:
         97:6e:95:ab:5d:7b:00:96:20:24:e1:a0:cb:49:48:47:ce:89:
         8d:c0:70:31:0e:4d:bf:5e:3a:1c:63:1c:5c:b0:72:53:69:9e:
         27:d8:ff:64:e3:93:3b:55:a8:83:1a:ce:f5:ce:49:c2:5b:44:
         5f:a0:83:0a:db:0e:66:b3:5b:f2:97:8e:68:b1:3e:e7:1e:c5:
         98:c9:18:41:59:3d:8d:69:6b:31:3b:92:40:87:55:ca:8f:ab:
         d3:0c:7d:ef:c9:a0:5f:38:02:30:f4:c2:03:45:52:64:d7:c0:
         ba:64:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 03:47:45 2025 by rpki-client on console.sobornost.net