Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/E54A9C7B6751540C380B4080CC3F4CB26ED99480.mft
File:                     E54A9C7B6751540C380B4080CC3F4CB26ED99480.mft (raw, json)
Hash identifier:          fZahvLi98b/KRaY4klUj1jyC8sEr6EtKMfTEtKrbKRc=
Subject key identifier:   24:B3:41:F8:59:E2:D0:9A:91:B7:B2:57:51:88:E4:F7:9D:FC:FA:DC
Authority key identifier: E5:4A:9C:7B:67:51:54:0C:38:0B:40:80:CC:3F:4C:B2:6E:D9:94:80
Certificate issuer:       /CN=E54A9C7B6751540C380B4080CC3F4CB26ED99480
Certificate serial:       5CA534793E6D1EA0D2EA6FB69EB8465CCAFAFC0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54A9C7B6751540C380B4080CC3F4CB26ED99480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/E54A9C7B6751540C380B4080CC3F4CB26ED99480.mft
Manifest number:          3F
Signing time:             Wed 11 Dec 2024 17:27:15 +0000
Manifest this update:     Wed 11 Dec 2024 17:22:15 +0000
Manifest next update:     Thu 12 Dec 2024 20:24:15 +0000
Files and hashes:         1: E54A9C7B6751540C380B4080CC3F4CB26ED99480.crl (hash: /3r+AjT8XzZH3aqY0CftkCIoQNGe57bmbP06HhoVlKM=)
                          2: 323830343a343738383a3a2f33322d3332203d3e20323637303630.roa (hash: OQePynFuSfrFhuKYxhHd4HGgAr0LsLzm1fLBk1vsaN0=)
                          3: 34352e3232382e3131322e302f32332d3233203d3e20323637303630.roa (hash: iaqH+fN0kxlCuCT71ihFUqoxLlhHz26xy+hJn+JZ3nA=)
                          4: 34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa (hash: 9HCmQmdRVv4PMOt6DVqQLrf/BsANz6L2S2qaHCB2HZk=)
                          5: 34352e3232382e3131322e302f32322d3232203d3e20323637303630.roa (hash: pxOBP/Iok2U1AGqglJiAnG9Xf+JL/lOh3743ZYJvMrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a5:34:79:3e:6d:1e:a0:d2:ea:6f:b6:9e:b8:46:5c:ca:fa:fc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54A9C7B6751540C380B4080CC3F4CB26ED99480
        Validity
            Not Before: Dec 11 17:22:15 2024 GMT
            Not After : Dec 12 20:24:15 2024 GMT
        Subject: CN=24B341F859E2D09A91B7B2575188E4F79DFCFADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:4b:a2:76:22:da:aa:7c:4c:7b:41:7f:10:
                    1d:ec:75:cd:94:3f:85:1b:9b:26:66:72:86:cb:98:
                    73:e1:2d:d5:7b:3d:62:2a:bb:59:86:b0:80:27:51:
                    e0:0f:00:51:57:70:a1:54:f5:0e:e2:63:19:32:38:
                    3e:9a:ed:2c:2c:4b:25:c6:58:41:ac:5f:67:1a:22:
                    c6:6e:80:68:e8:a8:fe:c4:bb:c3:b2:3f:97:b5:b0:
                    49:8d:e8:e3:2c:36:74:b2:48:7a:a2:0b:7a:66:0b:
                    ef:1f:73:fb:12:58:c4:b6:b5:10:4a:38:32:f7:40:
                    73:a8:87:60:25:5c:b9:4c:61:87:42:ec:04:c7:1d:
                    62:24:45:59:35:4f:d6:1a:a7:9b:2c:fd:5e:07:e6:
                    e3:2c:b1:37:de:fd:be:34:d8:90:f6:41:cf:04:34:
                    a5:22:be:d3:07:80:85:8f:88:32:37:4d:61:bc:32:
                    66:81:98:3b:a6:4b:96:03:3e:88:d0:95:8b:21:cf:
                    3b:6c:4e:b3:cf:a5:25:1a:8f:e1:83:85:c3:59:2e:
                    04:56:42:d5:6c:3d:fb:86:40:56:d1:dd:9b:c3:99:
                    ca:09:67:09:5d:20:11:1f:95:7b:6e:7e:e0:d7:f5:
                    da:86:ca:62:61:c3:ca:c6:53:12:1a:4d:bf:4e:ed:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B3:41:F8:59:E2:D0:9A:91:B7:B2:57:51:88:E4:F7:9D:FC:FA:DC
            X509v3 Authority Key Identifier:
                keyid:E5:4A:9C:7B:67:51:54:0C:38:0B:40:80:CC:3F:4C:B2:6E:D9:94:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/E54A9C7B6751540C380B4080CC3F4CB26ED99480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54A9C7B6751540C380B4080CC3F4CB26ED99480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/E54A9C7B6751540C380B4080CC3F4CB26ED99480.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:70:81:8d:88:37:0f:bc:67:e4:8b:79:6d:8b:1b:30:97:3c:
         b4:e3:04:6d:51:1a:5f:06:66:d1:4e:66:ac:53:ca:bf:e5:67:
         b3:1a:05:0e:02:d6:b9:52:ab:d8:89:7b:d2:1c:76:ec:d3:38:
         c1:fd:dc:4b:f2:12:55:eb:98:e9:9d:c9:b3:b3:23:f5:7c:bb:
         6a:e9:7d:f2:ba:18:fe:8f:7e:26:8d:54:51:3d:1f:95:ce:06:
         66:44:60:88:20:99:03:d8:24:46:c0:c1:16:69:35:f2:19:f7:
         11:d6:00:88:aa:f8:8e:74:88:1e:5e:13:65:22:c0:0e:b4:c8:
         3b:29:9c:e0:25:2e:da:e4:12:1b:3e:1b:5c:d9:60:72:fc:9a:
         9b:0b:ca:18:34:47:17:5e:5b:59:39:92:3d:d8:5b:9f:72:d0:
         16:92:43:9d:6d:17:0c:34:d4:40:1f:79:47:da:97:98:28:6c:
         e1:ae:8e:78:44:fd:89:37:79:0e:5e:56:33:17:5c:80:bd:71:
         6f:82:41:f3:09:e9:8d:23:60:06:01:b2:ff:ea:a0:f7:90:19:
         2a:de:73:a4:fc:f8:d1:b9:06:ed:07:52:58:8b:3a:0a:13:88:
         a9:22:84:62:78:f9:6f:57:fb:c5:5c:79:cb:6a:6f:95:4b:e8:
         12:5b:54:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 17 15:46:04 2024 by rpki-client on console.sobornost.net