Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9F9B5232D6A4C199290F4138875796FD5B1F1DBC.mft
File:                     9F9B5232D6A4C199290F4138875796FD5B1F1DBC.mft (raw, json)
Hash identifier:          ll4dN7g6Vb0RmTSfx7zABjrY6j3OE0nQQDZBah+8228=
Subject key identifier:   03:62:B4:A5:95:CC:D6:61:F2:58:3E:B0:E4:02:44:41:AC:C1:B2:57
Authority key identifier: 9F:9B:52:32:D6:A4:C1:99:29:0F:41:38:87:57:96:FD:5B:1F:1D:BC
Certificate issuer:       /CN=9F9B5232D6A4C199290F4138875796FD5B1F1DBC
Certificate serial:       3A34C082FCC34585FB7328B75EAA042D06DCFC48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F9B5232D6A4C199290F4138875796FD5B1F1DBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9F9B5232D6A4C199290F4138875796FD5B1F1DBC.mft
Manifest number:          0232
Signing time:             Wed 05 Apr 2023 15:55:31 +0000
Manifest this update:     Wed 05 Apr 2023 15:50:31 +0000
Manifest next update:     Thu 06 Apr 2023 18:43:31 +0000
Files and hashes:         1: 3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa (hash: Gpq3IJQwObQB7Zn3KWvayj8mk62BFM9BvOBiaYTGZz8=)
                          2: 3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa (hash: b+Cf2Dc3BDtKR6VXD8rXYwKbBUlVr5ubKcj765CQD5s=)
                          3: 3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (hash: FlYfg6DsFf0ZvkxO0a1aW9hlUUrX7izzSnyXV3G/ZGs=)
                          4: 3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (hash: aV0k/pC11l29ydy2ACklzrBclLFcqF115TMHJuFTU3g=)
                          5: 3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa (hash: RFH3XcpwKeFy6OGjlTV1Sr5mCc7dxHJX2xAYi4r6ynY=)
                          6: 3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa (hash: DIveyCrlZuo71dcAtsHMY+ICknS86LXG+MhrILbGIT4=)
                          7: 3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (hash: Nnd6yseJ5drzYgyvsq0rOgv8FnlWGBJ46NBCwSi2ZtM=)
                          8: 9F9B5232D6A4C199290F4138875796FD5B1F1DBC.crl (hash: bhJjwmu+T1getzCkvunQK2//onbb5635ITZpTJBa2i0=)
                          9: 323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (hash: cbwoq8loRkJNEoLSerJKyI8lxNplM2kB0rVURdsJQ0I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:34:c0:82:fc:c3:45:85:fb:73:28:b7:5e:aa:04:2d:06:dc:fc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9B5232D6A4C199290F4138875796FD5B1F1DBC
        Validity
            Not Before: Apr  5 15:50:31 2023 GMT
            Not After : Apr  6 18:43:31 2023 GMT
        Subject: CN=0362B4A595CCD661F2583EB0E4024441ACC1B257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:82:82:38:b7:3e:66:bc:9c:4f:0c:57:06:
                    10:d0:52:21:cb:86:48:76:30:53:07:bb:3b:c7:72:
                    e1:e3:67:5d:ac:9f:6f:1c:aa:bc:33:ec:25:0a:77:
                    e1:e4:ba:34:26:b4:64:dd:e6:90:2c:96:78:1b:52:
                    8a:32:5d:ec:ad:6d:03:d8:ad:73:b7:fb:c9:ac:51:
                    2b:81:a4:a5:7b:37:d0:d0:95:a6:04:e9:62:d6:93:
                    ae:45:2e:af:ce:ac:a1:f3:f1:2f:35:59:14:9a:00:
                    61:85:4b:98:50:ca:d6:03:29:1b:61:05:0a:e5:ff:
                    bf:af:88:11:93:66:76:f7:dd:b1:b2:2e:7a:ee:ab:
                    2c:38:b9:c6:48:d6:2d:8a:36:f5:49:96:f3:71:47:
                    d1:53:5b:d9:0b:f1:fd:fd:55:fe:a0:c3:2c:a2:65:
                    68:5d:9b:12:29:69:c6:75:b8:bb:72:ce:22:d8:61:
                    a2:ff:b0:42:6e:e6:38:6d:93:af:d4:6e:a6:84:c5:
                    f6:5c:6e:70:80:75:16:67:48:af:5d:6a:f9:65:5e:
                    4a:8b:a4:48:3c:5b:aa:a8:4d:a3:31:dc:84:4c:f0:
                    e1:90:87:37:1d:71:26:2f:6e:12:21:b7:0a:27:b8:
                    cb:9e:86:3c:06:6a:c0:7f:c6:6e:ec:cc:10:bf:f7:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:62:B4:A5:95:CC:D6:61:F2:58:3E:B0:E4:02:44:41:AC:C1:B2:57
            X509v3 Authority Key Identifier:
                keyid:9F:9B:52:32:D6:A4:C1:99:29:0F:41:38:87:57:96:FD:5B:1F:1D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9F9B5232D6A4C199290F4138875796FD5B1F1DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F9B5232D6A4C199290F4138875796FD5B1F1DBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9F9B5232D6A4C199290F4138875796FD5B1F1DBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:26:e9:a8:4c:c1:05:08:2b:f2:d6:b0:55:8d:08:76:89:
         c4:59:36:ad:05:67:1b:33:87:11:02:9e:52:1f:22:fc:3f:c8:
         4c:0e:7c:c1:4a:de:7f:a9:de:70:0d:fb:44:a2:2e:8f:06:15:
         fb:6f:e4:d6:7b:b5:c5:37:db:a2:06:e0:4d:b0:04:21:8a:b6:
         ef:79:18:bf:81:90:ed:da:31:86:90:ee:42:d7:64:2f:da:07:
         06:61:eb:02:6f:10:3f:4e:64:60:fb:33:e3:40:5a:1b:1c:17:
         5a:f5:b7:63:c9:a2:18:a3:2f:31:02:09:1d:03:ef:25:fb:ce:
         21:5c:8e:c8:b5:88:a1:77:57:d6:5e:25:13:79:18:29:e8:af:
         a8:5c:cc:8b:41:e2:51:b5:34:0f:f7:78:61:ae:43:17:e2:f2:
         fc:42:db:22:06:3c:46:11:c8:dc:fd:3b:dd:c2:62:7b:79:66:
         05:8e:14:8e:40:97:b8:45:22:a8:c3:ca:61:78:df:d4:f5:c4:
         7f:b2:86:f2:c4:91:4b:1d:2a:bd:ff:a3:eb:93:2b:9b:a0:8a:
         98:21:fd:ca:27:54:b6:98:56:1d:d3:d9:16:5a:f3:d0:ff:0b:
         ab:1e:fe:0e:93:6f:6d:6c:2e:09:b5:b9:e2:7c:cd:70:7f:d5:
         dd:59:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net