Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.mft
File:                     2BE96A9D00DF227936266A4035089C530868CA3A.mft (raw, json)
Hash identifier:          Yb5F/a9P9BHHo7xQDwKv6WU88GGlAD/c4v+cgmOml+g=
Subject key identifier:   D2:9A:B0:82:8D:86:DB:82:05:B9:A2:13:CF:29:C2:19:DE:58:D6:A8
Authority key identifier: 2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A
Certificate issuer:       /CN=2BE96A9D00DF227936266A4035089C530868CA3A
Certificate serial:       385290D14ED7D6A24696C0C72C49D1D314BF1D0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.mft
Manifest number:          F0
Signing time:             Mon 23 Sep 2024 16:25:44 +0000
Manifest this update:     Mon 23 Sep 2024 16:20:44 +0000
Manifest next update:     Tue 24 Sep 2024 16:47:44 +0000
Files and hashes:         1: 2BE96A9D00DF227936266A4035089C530868CA3A.crl (hash: 0T7K+w2TMTiZJ6eG9FBSBJztOVee66euyvhQHy8ylZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:52:90:d1:4e:d7:d6:a2:46:96:c0:c7:2c:49:d1:d3:14:bf:1d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE96A9D00DF227936266A4035089C530868CA3A
        Validity
            Not Before: Sep 23 16:20:44 2024 GMT
            Not After : Sep 24 16:47:44 2024 GMT
        Subject: CN=D29AB0828D86DB8205B9A213CF29C219DE58D6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:71:85:ac:39:22:4c:12:fb:a9:8d:06:6b:
                    1a:2b:52:59:4e:b8:1f:38:2e:e7:e6:b4:64:d2:16:
                    a5:e5:4e:5e:f1:44:b4:ba:32:4b:82:63:c0:a5:f8:
                    3d:13:57:0b:d4:f8:43:c0:88:7d:71:f0:6e:df:cf:
                    ab:f2:99:64:f2:38:30:30:f3:9d:97:8f:82:37:e3:
                    14:1e:4e:48:5a:4d:da:b7:e5:2d:71:b5:b2:90:64:
                    ec:0f:3b:a7:22:db:1e:d2:bf:fd:fe:b9:7c:73:26:
                    77:21:92:63:fe:ae:61:b6:60:71:40:6b:c6:bf:b4:
                    61:78:c5:3a:c2:71:08:24:2a:4d:51:52:13:c9:20:
                    92:dd:da:4a:b6:96:81:a0:4e:a8:03:b6:a6:29:8c:
                    eb:8c:21:c1:3e:8d:59:de:ce:e0:38:13:af:83:9a:
                    f6:a4:58:3b:29:51:d9:a1:47:96:79:82:19:08:64:
                    52:fc:1f:0a:0c:30:1d:40:f7:1e:f7:4c:6a:b2:34:
                    49:86:91:13:15:07:65:74:b8:51:60:87:f3:73:1d:
                    61:b9:9b:7a:f7:7b:70:77:07:09:98:f0:70:b8:1c:
                    e1:cc:fc:3e:13:a9:bf:f7:80:3f:43:c6:70:ba:73:
                    75:e0:99:1d:48:3c:0e:23:43:59:22:2e:d7:df:3b:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9A:B0:82:8D:86:DB:82:05:B9:A2:13:CF:29:C2:19:DE:58:D6:A8
            X509v3 Authority Key Identifier:
                keyid:2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:5c:31:10:80:24:56:2c:cb:c5:95:02:b5:34:30:19:1c:
         ec:a3:39:2a:d2:4e:cc:ae:13:9f:d9:c9:e7:20:d0:4b:21:d1:
         02:d0:18:89:29:32:47:f7:46:7f:c0:25:80:91:3e:5d:0c:9f:
         03:1b:fa:b6:a1:8f:0f:6a:1d:1c:5a:dc:24:95:ab:56:e2:ed:
         5f:4b:62:9f:ff:54:1d:2e:a0:17:96:3e:65:9c:67:d1:2f:08:
         cd:a4:d8:69:44:e2:94:10:b5:0d:ae:36:66:0f:45:9d:8d:2d:
         3f:2b:64:9b:39:ee:d5:5d:6f:56:19:aa:c9:6b:3b:14:f1:d8:
         77:04:24:44:d8:0f:ac:8c:8d:99:34:0a:df:f3:71:42:0e:b4:
         bb:0a:aa:14:6c:ba:49:bd:57:17:2c:05:ea:0d:71:60:19:77:
         f3:d5:35:11:ce:fe:5c:ee:7a:cc:1a:47:13:05:b4:8d:44:ae:
         af:47:1a:46:da:c7:d3:c0:78:e6:88:bc:3c:4b:7a:cf:f2:f3:
         cf:50:e8:e8:4b:49:81:3a:c7:7f:74:57:cb:1b:b9:8e:5d:8d:
         3a:ee:5e:85:36:ce:e2:ea:01:a4:59:13:d3:74:8a:fb:a7:b5:
         8a:00:3c:cd:f5:55:3a:7f:d2:4d:8a:d4:32:1b:66:55:22:19:
         ff:e9:90:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 19:19:20 2024 by rpki-client on console.sobornost.net