Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft
File:                     CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft (raw, json)
Hash identifier:          Di27zTqMXjCjim5spO5FN6VCNNIRIX7U0ERYFfFiJfc=
Subject key identifier:   8D:8B:EA:22:38:75:62:89:51:16:9F:7B:AA:C4:13:3E:2B:DF:CC:36
Authority key identifier: CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3
Certificate issuer:       /CN=CF765AF73EDCA320D37792FD19B73025D1DBDDE3
Certificate serial:       519E311C2964475B127F27D45B1441984605E3E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft
Manifest number:          01D1
Signing time:             Mon 15 Apr 2024 12:13:00 +0000
Manifest this update:     Mon 15 Apr 2024 12:08:00 +0000
Manifest next update:     Tue 16 Apr 2024 14:34:00 +0000
Files and hashes:         1: CF765AF73EDCA320D37792FD19B73025D1DBDDE3.crl (hash: FJRYz56sPuyru1fiF7n+5o52TAgq+lsiq6ssPRZvRt4=)
                          2: 323830343a373632303a3a2f33322d3430203d3e20323731303931.roa (hash: sF5vsF5BnThVw99hoQnhMBV5sRzzYbCwx9eCF0ql3HI=)
                          3: 3137392e34382e3136302e302f32322d3234203d3e20323731303931.roa (hash: B7UlodM4PSqTAFkvFGh/wCcIIB6OxToltz3nFwcUBTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9e:31:1c:29:64:47:5b:12:7f:27:d4:5b:14:41:98:46:05:e3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF765AF73EDCA320D37792FD19B73025D1DBDDE3
        Validity
            Not Before: Apr 15 12:08:00 2024 GMT
            Not After : Apr 16 14:34:00 2024 GMT
        Subject: CN=8D8BEA223875628951169F7BAAC4133E2BDFCC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:20:c2:45:c0:7f:e5:4e:6d:ee:a3:d7:c5:
                    cb:57:d4:fc:1b:f3:c5:be:a4:4c:cd:09:c8:11:cf:
                    2a:7a:1d:c1:9e:0b:a9:00:03:3f:b4:d3:40:19:48:
                    92:a5:da:0a:49:9d:a5:d1:67:06:53:e9:1f:6f:b8:
                    6e:ac:20:f7:c9:22:25:71:58:98:4d:e2:3f:8c:c2:
                    79:49:01:36:21:18:07:ee:93:51:3c:4f:5c:f8:58:
                    8a:d9:e7:c7:61:41:a8:26:92:95:61:65:46:d2:87:
                    7d:06:59:80:d9:7d:9d:72:aa:5d:e9:dc:28:b1:f8:
                    d4:b0:a2:9f:75:af:e8:bd:16:1c:c3:a9:d4:fe:4c:
                    dd:1b:f5:86:95:28:2c:53:65:af:45:67:04:bb:b7:
                    27:12:1a:b2:1f:98:ca:ab:d3:a4:ac:a8:ad:01:5c:
                    e9:38:c0:be:18:37:29:1e:46:1a:4b:5b:91:be:57:
                    b3:b3:4b:45:81:bb:29:f9:a8:b6:46:82:8b:87:ad:
                    45:9c:84:a3:0c:bc:50:22:c6:b6:0f:e7:4b:6a:37:
                    5c:fa:23:a2:a2:07:14:c4:fc:bc:45:23:53:21:fe:
                    3c:87:9f:46:e9:e5:da:46:92:77:fa:a5:86:51:5e:
                    15:e5:c4:0d:05:e0:d0:66:65:b8:4c:1a:d3:42:05:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8B:EA:22:38:75:62:89:51:16:9F:7B:AA:C4:13:3E:2B:DF:CC:36
            X509v3 Authority Key Identifier:
                keyid:CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:dc:98:90:0a:9e:c0:d2:c5:e7:83:a2:48:3c:91:a2:3d:
         94:03:e6:02:53:26:76:29:b2:48:f9:14:8d:e8:4f:12:27:ab:
         d8:76:24:9a:47:01:9c:55:2d:bd:80:b9:96:19:93:52:a4:41:
         fe:f7:86:10:bb:fc:f3:74:a8:e9:f0:6e:e7:c5:a2:db:4f:e4:
         ea:2f:a0:b4:24:d1:b9:28:53:a7:84:0b:1e:cc:a0:88:7f:a4:
         64:af:b5:aa:80:8e:ca:85:d3:56:bc:66:bf:34:9a:97:6b:d9:
         fc:e6:13:e3:08:b2:f0:5a:30:3b:9a:c8:4f:4d:54:ac:2c:c5:
         53:f8:2c:c4:32:7f:67:38:ff:8f:c1:d7:dc:31:c5:5a:7c:1c:
         5b:04:62:a7:08:7c:09:6a:1c:21:44:1d:06:6d:34:97:0e:92:
         98:97:a0:ad:c4:35:ef:d6:39:e5:55:b6:c8:11:30:40:23:4d:
         03:96:d4:a5:ef:41:a8:4a:22:5a:8b:f1:9b:ee:5d:ec:7e:b2:
         bc:5d:66:b1:ce:cc:20:b1:03:6e:d9:63:d2:74:c2:db:67:00:
         62:c0:6e:46:91:81:94:3a:25:9a:9a:ec:a3:86:d8:f2:1e:cd:
         12:6a:76:ce:1f:08:ae:15:01:7f:4d:10:d5:3f:0b:36:ed:cd:
         38:ed:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:00 2024 by rpki-client on console.sobornost.net