Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.mft
File:                     42DC11A6099FD286F81D6C471E47FFD8469A91E7.mft (raw, json)
Hash identifier:          KUslzm+Yd+/nbTSizNadzw1orwEb06pJhIl/kVYf6uI=
Subject key identifier:   A3:D4:98:E1:2F:DB:B2:E1:1A:23:07:A1:E3:FF:58:88:23:41:CF:9D
Authority key identifier: 42:DC:11:A6:09:9F:D2:86:F8:1D:6C:47:1E:47:FF:D8:46:9A:91:E7
Certificate issuer:       /CN=42DC11A6099FD286F81D6C471E47FFD8469A91E7
Certificate serial:       0A1BBD5EA7D36B396D92E98D633CD5DB892B90CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.mft
Manifest number:          4C
Signing time:             Thu 30 May 2024 00:34:18 +0000
Manifest this update:     Thu 30 May 2024 00:29:18 +0000
Manifest next update:     Fri 31 May 2024 03:46:18 +0000
Files and hashes:         1: 42DC11A6099FD286F81D6C471E47FFD8469A91E7.crl (hash: UII0rpalhUu5lUENxchvp2M2cC0inH7FAOYMIx5WFHI=)
                          2: 323830343a336361303a3a2f33322d3438203d3e203631353939.roa (hash: gjMb3SLN3UyOUE3Cl1eRrMXiYPsbHK8oqu/K6HtQ498=)
                          3: 3230302e37312e37362e302f32322d3234203d3e203631353939.roa (hash: VV23hrpvZPO0EL7WiapaeZIiZuWLE6FafzSA1qV8fu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1b:bd:5e:a7:d3:6b:39:6d:92:e9:8d:63:3c:d5:db:89:2b:90:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42DC11A6099FD286F81D6C471E47FFD8469A91E7
        Validity
            Not Before: May 30 00:29:18 2024 GMT
            Not After : May 31 03:46:18 2024 GMT
        Subject: CN=A3D498E12FDBB2E11A2307A1E3FF58882341CF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:d6:ca:f7:43:d2:35:1f:b3:68:f4:08:5c:
                    5f:d2:af:ef:8c:aa:fe:10:20:b7:0f:aa:41:1e:2a:
                    c1:60:23:e0:a2:d2:5f:2f:d1:9f:02:ef:9a:ae:e2:
                    4d:4f:13:12:49:e1:bc:0e:e3:dc:0e:db:b5:b5:83:
                    b3:c6:0b:d0:cd:dc:ff:a2:95:c7:d4:02:56:12:b2:
                    d7:eb:cc:d6:54:eb:30:4b:af:aa:72:a6:91:84:a8:
                    fe:d7:9c:62:40:e5:4f:22:77:75:8d:b3:a2:7b:1a:
                    55:c5:84:2a:eb:93:e7:61:b4:32:b6:29:90:d3:c4:
                    ae:93:ea:46:9d:79:48:ef:2b:2b:71:0e:ba:cb:45:
                    c0:ea:08:e8:09:3e:cd:0c:12:90:0e:38:71:59:e3:
                    81:42:29:f7:04:f6:80:76:22:f6:1f:4a:c7:a7:9a:
                    1a:6e:ab:5b:df:34:6e:fd:50:37:35:a8:fc:3b:60:
                    0a:aa:d1:07:71:9c:14:6e:65:d0:dc:6b:02:51:f5:
                    a1:56:2b:79:a9:a6:e5:08:39:8e:da:e4:d0:58:a9:
                    6f:23:0b:c5:cd:19:3b:c5:86:35:e8:93:a6:8f:db:
                    b4:f5:4c:ba:b0:61:f3:7d:bb:c0:95:87:3e:6d:6b:
                    a4:77:21:de:57:b2:4f:02:06:1f:c8:ba:a1:1a:77:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D4:98:E1:2F:DB:B2:E1:1A:23:07:A1:E3:FF:58:88:23:41:CF:9D
            X509v3 Authority Key Identifier:
                keyid:42:DC:11:A6:09:9F:D2:86:F8:1D:6C:47:1E:47:FF:D8:46:9A:91:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:06:8b:f8:f7:de:ae:3e:c2:1b:d2:9f:03:19:48:05:70:f3:
         52:5c:3b:e1:b3:ad:51:4c:0c:6a:05:ba:ee:1d:1d:d3:dd:a4:
         f1:ff:35:4a:b4:fe:f6:f9:68:7d:f2:98:f6:0e:73:21:02:46:
         03:57:35:e5:89:30:25:77:ad:ab:c3:e4:9c:49:e1:02:28:68:
         9e:fd:b9:62:8f:06:e7:95:44:10:c8:c8:1b:3f:18:f9:ce:fa:
         19:de:37:04:27:ba:ce:4d:b7:55:13:0e:70:26:d6:bf:f6:4d:
         d4:93:53:3c:23:28:93:bb:c2:88:75:ee:b2:bd:16:f6:cb:0d:
         ba:12:34:22:07:f3:be:d7:64:7c:5d:92:fd:22:46:1f:10:d9:
         8d:b9:40:e7:9b:d9:b0:e9:d8:44:f9:23:ee:a0:5b:d1:f3:07:
         3a:d9:79:e6:50:93:0b:63:0d:16:14:f6:a0:e7:0e:3b:e4:f0:
         5d:5a:9b:15:b2:ac:e9:31:4b:eb:96:0d:04:01:ab:40:d0:db:
         d0:fc:86:8f:dd:1b:42:bb:d5:33:c7:5d:d0:19:c1:90:d6:72:
         39:43:c5:95:b4:52:4b:9f:43:8d:22:a1:33:57:fe:e5:65:5b:
         0e:d5:d6:b2:9b:7c:b8:ba:23:1f:9f:ed:1e:8f:ea:72:d5:7e:
         49:89:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 00:46:11 2024 by rpki-client on console.sobornost.net