Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/AA7DD0399E0192DD2E1740148BE2B4962F522878.mft
File:                     AA7DD0399E0192DD2E1740148BE2B4962F522878.mft (raw, json)
Hash identifier:          1VqLz0xgIbhxJHkFW1IDgInN+1s6G6JYbqL3Aou1zd4=
Subject key identifier:   7C:7A:A6:A6:AF:0D:1F:8C:5A:CD:D7:B4:47:3D:05:0B:A1:02:19:39
Authority key identifier: AA:7D:D0:39:9E:01:92:DD:2E:17:40:14:8B:E2:B4:96:2F:52:28:78
Certificate issuer:       /CN=AA7DD0399E0192DD2E1740148BE2B4962F522878
Certificate serial:       1A88705E705E9A1BAF72ACA42CD3FEB02CD6C94F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA7DD0399E0192DD2E1740148BE2B4962F522878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/AA7DD0399E0192DD2E1740148BE2B4962F522878.mft
Manifest number:          1A
Signing time:             Fri 01 Nov 2024 06:15:16 +0000
Manifest this update:     Fri 01 Nov 2024 06:10:16 +0000
Manifest next update:     Sat 02 Nov 2024 10:07:16 +0000
Files and hashes:         1: AA7DD0399E0192DD2E1740148BE2B4962F522878.crl (hash: UM6T0C9JnTLj+pjieqNBs+Dxiyl0m0CHROavjpwyHPM=)
                          2: 3138372e37332e3139362e302f32322d3232203d3e203533303534.roa (hash: +mWT92QLywgqa8t/fDB65pofJ1GpH7mKY2/VZ7A8rBw=)
                          3: 3138372e37332e3230302e302f32332d3233203d3e203533303534.roa (hash: 5kbKoaYeWDkFRcZpyq3jXYQ5XMIbtJERSPaS+MMHODE=)
                          4: 3138372e37332e3230342e302f32332d3233203d3e203533303534.roa (hash: 0qXSfl2Ya+bQSzUbCzPbispNu5qFMYpPsMeprR6T9Cg=)
                          5: 3138372e37332e3230332e302f32342d3234203d3e203533303534.roa (hash: 6wZN4QBKKG+yMGR+mp3RL9h1v5Tr0H6kfrBkmUBs8sA=)
                          6: 3138372e37332e3139342e302f32332d3233203d3e203533303534.roa (hash: YsZnxTJlGKxFuDA0i6ecvGU59BorGLX0aSBw28b5NLI=)
                          7: 3138372e37332e3231382e302f32332d3233203d3e203533303534.roa (hash: 2ftHyaKjqckBICZbSHVyKr7fvR3fCu/nuEt7yLwDDCA=)
                          8: 3138372e37332e3139362e302f32342d3234203d3e203533303534.roa (hash: RK8r0HkKbDmdlpalH0p7y3vopbw2iFYug0p7dHSIxBk=)
                          9: 3138372e37332e3231342e302f32332d3233203d3e203533303534.roa (hash: ruwg9wduCaz9yhbvFl/DBfx7UscrKLLH+i927ZvDT3Q=)
                          10: 3138372e37332e3139382e302f32332d3233203d3e203533303534.roa (hash: ByQttJYXvQxoOESLM2IlxcVwYwfdKCi2K033swdhoKM=)
                          11: 3138372e37332e3139322e302f32302d3230203d3e203533303534.roa (hash: b+Ww5kzL7iH0+4zdHsVTXHhXyblowKQ5z7H5OmYWMNI=)
                          12: 3138372e37332e3139382e302f32342d3234203d3e203533303534.roa (hash: szkKilC+8BsDMlWeCrt4Oqptx+RLg+1EQFOPaqyR7ZQ=)
                          13: 3138372e37332e3139372e302f32342d3234203d3e203533303534.roa (hash: J63FrvFQFb3vXqkPDWgDHP9vENvyDOsOYkmmMZcryko=)
                          14: 3138372e37332e3232302e302f32332d3233203d3e203533303534.roa (hash: +8hgRapaqCd/71E1xqhBM7Uo0kgax1p6PrGITmEzNZo=)
                          15: 3138372e37332e3230302e302f32322d3232203d3e203533303534.roa (hash: W2awqspaPsQCvFJ0/fyzGlIpD8meOnMxChQ9HHHXeT0=)
                          16: 3138372e37332e3232322e302f32332d3233203d3e203533303534.roa (hash: Tt0AsGYVoFP6Q4mtM80Ic6Vh/j2Uw3ILUhmGxoKmW5c=)
                          17: 3138372e37332e3231362e302f32332d3233203d3e203533303534.roa (hash: uX16d0qvwbuln7Ki/T5TIoPl92R5FrRJ47r4p7NIT5w=)
                          18: 3138372e37332e3231322e302f32332d3233203d3e203533303534.roa (hash: rV/t5oHP94lYYVm+T32vsCRWcQNz3YcP9LfPlQ4VUrY=)
                          19: 3138372e37332e3230382e302f32302d3230203d3e203533303534.roa (hash: KCG1J5l9CoW4iHgP9aTvMPw3xJuAk+ynfsvPRNOq2vE=)
                          20: 3138372e37332e3139362e302f32332d3233203d3e203533303534.roa (hash: 3MRZH1X/gzXRGbPDLRLPvrgJ0c23YMQkmQ1lVRTHeRw=)
                          21: 3138372e37332e3230382e302f32332d3233203d3e203533303534.roa (hash: Rbcu6WLyzdMcz2NU99eeruUTQn0MuoUuc7LuGo9yGqk=)
                          22: 323830343a6133633a3a2f33322d3332203d3e203533303534.roa (hash: zAXckitUi1ignLkbDJn2F8luLgPmvI7rS9AaybszMdU=)
                          23: 3138372e37332e3232322e302f32342d3234203d3e20323632343933.roa (hash: NeU+it5nDDIQJKa8uzTYA8ARWa+uWSv8L1i5MrTufcg=)
                          24: 3138372e37332e3139392e302f32342d3234203d3e203533303534.roa (hash: T+j5WeV3yWsl+4j5S7DsXXEKIu9aWelUmASiQkEcfCM=)
                          25: 3138372e37332e3139322e302f31392d3139203d3e203533303534.roa (hash: ilARv5IAQYZPocumREamVSoCV5HDADo6JcJyWlTzlRc=)
                          26: 3138372e37332e3230322e302f32342d3234203d3e203533303534.roa (hash: etJhAiFQ3+sDuk/8/wlIeXBcytFsW/9GMQq6xRtt73E=)
                          27: 3138372e37332e3230322e302f32332d3233203d3e203533303534.roa (hash: NPXp8UZNSL9afiaDt26ElrXuyraFdI376Pv9mTSlzfg=)
                          28: 3138372e37332e3231302e302f32332d3233203d3e203533303534.roa (hash: JqOS2768f7qCQlKxej7fqNKYnR+EMfT46bPUpuG7Az0=)
                          29: 3138372e37332e3232322e302f32332d3233203d3e20323632343933.roa (hash: pHg7UGA2QLW+1kDNfx8ZMUo7Xx57OYJMevDwwKv60bA=)
                          30: 3138372e37332e3230362e302f32332d3233203d3e203533303534.roa (hash: 23U4UO/tz90FPcVcCg2xBURNgh1mBNyUoQ9HgHJJ9ZQ=)
                          31: 3138372e37332e3232332e302f32342d3234203d3e20323632343933.roa (hash: 8oSElMDZGEGxd6fim5OJIdpU2IeDABjEqZQx5ospDN8=)
                          32: 3138372e37332e3139322e302f32332d3233203d3e203533303534.roa (hash: yiZIm3e660CP3AAA4IQHNNMgHAvNXZHLok7V9nIkSe4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:88:70:5e:70:5e:9a:1b:af:72:ac:a4:2c:d3:fe:b0:2c:d6:c9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7DD0399E0192DD2E1740148BE2B4962F522878
        Validity
            Not Before: Nov  1 06:10:16 2024 GMT
            Not After : Nov  2 10:07:16 2024 GMT
        Subject: CN=7C7AA6A6AF0D1F8C5ACDD7B4473D050BA1021939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:9c:39:ef:ef:1a:75:02:cf:ef:b5:89:58:
                    bb:ce:1b:5d:41:74:ac:8f:1b:ba:7d:0f:d7:2d:2e:
                    9c:23:7a:41:76:90:ff:91:cd:ce:d5:3e:87:2f:3b:
                    20:3a:31:d4:30:46:f6:da:88:d1:2e:83:14:ab:67:
                    c5:ef:d1:72:6b:08:f2:ea:6a:3a:c0:65:66:a7:ed:
                    d3:11:68:56:7a:ff:fa:75:f3:ba:9f:e1:23:a8:05:
                    69:94:97:c3:7f:5f:67:e7:5b:80:b6:7d:0c:4f:5d:
                    cd:b5:45:bf:2c:63:75:b9:78:c8:0b:cb:ed:73:85:
                    61:5f:ce:23:bd:c6:cc:42:75:15:7b:f0:f9:e3:9b:
                    f6:cd:83:6e:58:90:e2:11:fd:25:3a:13:32:53:c3:
                    97:d7:f1:51:c9:09:65:ea:95:b1:6c:8e:3c:ce:3e:
                    7f:24:0c:20:4e:48:a8:40:68:f8:54:fa:e1:84:06:
                    ce:8f:0c:1b:90:ef:03:ea:c3:57:72:aa:a1:c9:5d:
                    16:2a:b8:f2:1a:12:54:52:9a:e9:6e:1a:ee:dd:77:
                    88:f8:13:7f:99:c7:1b:ff:b7:58:4b:1a:93:6c:cc:
                    02:f7:74:2b:03:a0:ca:2a:e9:c0:02:4a:46:82:3f:
                    ac:ed:65:42:84:34:58:b0:e0:db:bf:57:6f:08:30:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7A:A6:A6:AF:0D:1F:8C:5A:CD:D7:B4:47:3D:05:0B:A1:02:19:39
            X509v3 Authority Key Identifier:
                keyid:AA:7D:D0:39:9E:01:92:DD:2E:17:40:14:8B:E2:B4:96:2F:52:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/AA7DD0399E0192DD2E1740148BE2B4962F522878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA7DD0399E0192DD2E1740148BE2B4962F522878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/AA7DD0399E0192DD2E1740148BE2B4962F522878.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:81:ed:2a:dd:fc:13:67:d7:a2:af:91:bf:54:b7:38:64:e5:
         90:c5:bc:e1:7d:88:47:04:f2:4e:35:07:42:d7:0f:86:40:83:
         f8:07:51:0c:8f:3e:45:55:16:65:54:c8:9b:66:29:2c:17:ea:
         21:ba:3e:f6:b6:4d:69:d7:d5:a4:00:e6:09:22:6e:8f:2e:5e:
         e5:b3:41:83:92:74:f6:2b:fd:f6:9f:fb:b6:fe:4e:05:d6:78:
         25:27:dc:6e:35:29:b3:10:5f:35:ca:09:3f:d2:21:e1:06:49:
         d4:3b:9f:fe:f3:c3:11:59:30:09:b6:03:34:8b:df:26:0b:d0:
         2a:e9:b1:20:73:61:4f:06:26:55:38:4c:9d:00:f2:0f:50:5f:
         7c:ac:0d:01:93:74:24:ce:8c:68:a6:44:1e:3d:7c:55:de:64:
         05:3a:73:3e:9d:b2:f6:b9:a5:17:ac:32:65:ab:46:3d:28:01:
         95:24:6b:c6:bd:bc:e9:4e:2b:00:02:3e:4a:1d:d4:3a:4a:40:
         a0:f6:55:f4:ee:da:74:77:4f:9a:9c:9c:55:88:f2:ce:ac:50:
         64:db:1f:7a:84:aa:d4:5f:f6:9d:48:0d:cc:00:b1:f0:d1:d1:
         38:9a:23:76:21:6c:16:a5:d1:9d:56:b5:78:ae:74:8d:68:2f:
         7d:6e:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:15 2024 by rpki-client on console.sobornost.net