Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/35121215105D7401F74741FEB8604A2A9FA7E6DF.mft
File:                     35121215105D7401F74741FEB8604A2A9FA7E6DF.mft (raw, json)
Hash identifier:          gAewL8BBAgHeshyRXzvioP0AqsTP9NG7PAqfsnZEC5Y=
Subject key identifier:   BE:48:95:74:85:65:E5:5B:CE:C4:3C:FC:F2:2E:0C:47:20:A2:C3:10
Authority key identifier: 35:12:12:15:10:5D:74:01:F7:47:41:FE:B8:60:4A:2A:9F:A7:E6:DF
Certificate issuer:       /CN=35121215105D7401F74741FEB8604A2A9FA7E6DF
Certificate serial:       42C7A2EA573042D75D95911D2DEEA1A95CE6106F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35121215105D7401F74741FEB8604A2A9FA7E6DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/35121215105D7401F74741FEB8604A2A9FA7E6DF.mft
Manifest number:          2A
Signing time:             Mon 02 Sep 2024 16:42:09 +0000
Manifest this update:     Mon 02 Sep 2024 16:37:09 +0000
Manifest next update:     Tue 03 Sep 2024 18:42:09 +0000
Files and hashes:         1: 3230302e302e37302e302f32342d3234203d3e203131303937.roa (hash: ZRv9X6g6/pPpolwDCO0G5VMQBRgCu++SRmh3avPY5xw=)
                          2: 3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa (hash: tamyNiXbg10jKQKJ2LBGUejrBY+vIvNF6nqt9myrszs=)
                          3: 323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa (hash: oo28VfU9zy8EbPnXPGLZTQ8Jpb6OGAlOlANx+oKvH68=)
                          4: 323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa (hash: 1tpxWjSouQ0xnhqS5S+GY/WwCyF6hoiDIP2XLoHswkE=)
                          5: 323830313a38303a313431343a3a2f34382d3438203d3e203131303937.roa (hash: BpYijsI8xQDGBWGBoWN93AtxJ+tGK1tkjuEPbtUWo2U=)
                          6: 323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa (hash: fm6to/OBxqGX2HeGTpgJdKTPMGI5Tmt1jGBY7D52TRU=)
                          7: 323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa (hash: MUEQqkw3XC6g73TrXN0sxMVQJg5ORpzYZlvgmrCWK94=)
                          8: 323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa (hash: EW6BwTYE44AUmkTPnbEQ1CpCc2+gP3fTCWiFVWJQH6Q=)
                          9: 323830313a38303a313438633a3a2f34382d3438203d3e203131303937.roa (hash: rUoC0Qc++w+NAcG0sEPpejfXqcD3/hZ4RjwzxQhR7Qc=)
                          10: 3139322e3230372e3139342e302f32342d3234203d3e203131303937.roa (hash: 9Elvt1f6D8dPXgZI8blmTzaQwUBTW3iotwFVpQRmHPY=)
                          11: 35121215105D7401F74741FEB8604A2A9FA7E6DF.crl (hash: UdXfDG9lz7TqRhdmFggq8TpMasiiCFrJydOyGyoAdmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c7:a2:ea:57:30:42:d7:5d:95:91:1d:2d:ee:a1:a9:5c:e6:10:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35121215105D7401F74741FEB8604A2A9FA7E6DF
        Validity
            Not Before: Sep  2 16:37:09 2024 GMT
            Not After : Sep  3 18:42:09 2024 GMT
        Subject: CN=BE4895748565E55BCEC43CFCF22E0C4720A2C310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0f:62:99:ec:50:b4:a2:94:fd:87:96:61:a1:
                    54:e2:f1:b5:6d:e7:f7:61:2f:81:58:46:f6:b4:4f:
                    a2:35:b2:be:cb:cf:36:23:e8:c2:82:64:4e:d4:c4:
                    df:50:36:af:ea:c8:4f:55:e5:32:3b:76:75:dc:3e:
                    1f:ae:0e:0c:16:13:ba:22:03:f7:59:f1:56:10:97:
                    c7:42:a4:da:50:16:30:eb:3e:91:0c:88:dc:2e:c7:
                    b6:b2:5f:47:b7:e8:a7:0b:a1:2b:00:f9:c3:4f:b7:
                    28:8f:32:1f:41:c6:32:5b:67:18:43:3c:04:e7:85:
                    ca:6c:c3:a3:0c:96:5c:ef:2f:96:9a:91:2e:ca:b9:
                    84:a8:42:fc:a2:d7:21:96:23:c7:ce:f8:04:51:2e:
                    a7:c5:7b:14:e0:a4:d4:e6:74:7c:8d:58:8c:6c:94:
                    0a:65:2c:07:36:0f:dd:b5:b4:8c:eb:06:a7:b5:c6:
                    87:6d:89:f2:94:44:89:97:3f:28:c1:4a:65:f3:c5:
                    e9:c8:df:ba:09:85:f5:32:19:46:b5:ca:03:4b:12:
                    a9:46:5a:dc:ba:1a:f6:de:9d:58:aa:37:dc:97:34:
                    8c:bf:dd:64:44:6e:c1:38:31:14:40:46:7d:8d:42:
                    ab:24:7e:c4:13:a4:77:17:18:ce:f6:d5:91:59:fd:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:48:95:74:85:65:E5:5B:CE:C4:3C:FC:F2:2E:0C:47:20:A2:C3:10
            X509v3 Authority Key Identifier:
                keyid:35:12:12:15:10:5D:74:01:F7:47:41:FE:B8:60:4A:2A:9F:A7:E6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/35121215105D7401F74741FEB8604A2A9FA7E6DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35121215105D7401F74741FEB8604A2A9FA7E6DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/35121215105D7401F74741FEB8604A2A9FA7E6DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:95:bd:fe:47:5e:d1:02:dd:80:23:80:a0:a5:47:d5:e7:
         a7:f9:bc:16:7b:34:bd:3d:d3:6c:a4:fd:e2:f8:b1:3f:d5:eb:
         db:03:a4:b8:14:99:4a:e1:11:07:95:69:03:f9:6c:0f:71:36:
         8f:3e:2b:d2:4c:ec:9f:12:c7:6a:96:49:89:9a:49:9e:cc:61:
         69:bc:b7:33:9f:ef:41:02:7f:2b:c5:05:d6:72:c0:0e:b0:cc:
         e0:fb:d9:3c:f2:7a:1e:67:8e:80:d2:c9:6b:83:89:24:d4:ce:
         41:55:42:54:2c:e0:62:9f:e9:12:17:dd:d6:11:d0:6c:5a:fe:
         34:7b:4c:a5:29:e5:a3:e3:91:44:ac:e5:fd:a1:a6:08:2e:ea:
         83:38:50:fe:30:bb:b2:1c:48:d4:25:90:be:4c:09:0c:5f:da:
         50:a6:21:6d:0b:a2:69:b3:51:14:2a:21:5e:5c:34:2a:e0:74:
         74:ce:18:16:bb:dc:a2:fd:3b:d0:37:4e:22:0b:3d:ac:6b:18:
         e7:d3:5c:2c:e7:a1:5b:1f:c5:1c:eb:40:c7:8b:55:82:96:c6:
         83:9f:c9:3b:d1:1a:16:29:a0:eb:d9:42:0e:f4:76:aa:ee:f6:
         f7:c8:af:36:18:43:1e:80:c9:82:30:07:1a:b6:3f:09:0c:f8:
         b2:91:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 04:41:36 2024 by rpki-client on console.sobornost.net