Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/6857F0F3AF899445947CD4D6ED497776C359881F.mft
File:                     6857F0F3AF899445947CD4D6ED497776C359881F.mft (raw, json)
Hash identifier:          8H/9nXhKZRs4wIbMYkedcdBAyky0TSuH767kHrQz784=
Subject key identifier:   9E:8D:1D:32:8A:15:7E:F7:A1:AF:EB:43:A2:3B:F1:8D:38:F2:7D:14
Authority key identifier: 68:57:F0:F3:AF:89:94:45:94:7C:D4:D6:ED:49:77:76:C3:59:88:1F
Certificate issuer:       /CN=6857F0F3AF899445947CD4D6ED497776C359881F
Certificate serial:       5E48918C1AA58F5BDB7A6D4B90A729082AD54ADE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6857F0F3AF899445947CD4D6ED497776C359881F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/6857F0F3AF899445947CD4D6ED497776C359881F.mft
Manifest number:          03
Signing time:             Fri 01 Nov 2024 20:05:57 +0000
Manifest this update:     Fri 01 Nov 2024 20:00:57 +0000
Manifest next update:     Sat 02 Nov 2024 22:42:57 +0000
Files and hashes:         1: 3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa (hash: E36NA+jOiUOrMYl1gbWXTj3EzlyZC7wN0BOSu/87x/4=)
                          2: 6857F0F3AF899445947CD4D6ED497776C359881F.crl (hash: L6w9HyKQArcwPjICD/1p/mPRfH2+g9CIhBiHlMVdCHU=)
                          3: 323830343a326566303a3a2f33322d313238203d3e20323634383632.roa (hash: JeuAiHr0bODNMujYgdEo1NV3kbL++3Unotj20piKbv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:48:91:8c:1a:a5:8f:5b:db:7a:6d:4b:90:a7:29:08:2a:d5:4a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6857F0F3AF899445947CD4D6ED497776C359881F
        Validity
            Not Before: Nov  1 20:00:57 2024 GMT
            Not After : Nov  2 22:42:57 2024 GMT
        Subject: CN=9E8D1D328A157EF7A1AFEB43A23BF18D38F27D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:92:cc:73:4f:d1:e6:89:0e:a4:a6:ca:83:
                    f4:b0:f1:05:df:b9:dc:b8:a7:cb:10:2c:2e:17:f4:
                    1c:80:8a:de:5b:9e:5f:1a:18:51:6f:4c:79:7e:46:
                    b5:59:8c:a3:b6:c3:06:f7:9e:4e:bf:41:a0:10:74:
                    51:26:47:5f:5f:f0:5c:dd:a0:61:74:59:1e:18:b2:
                    f3:15:46:ea:95:2a:9d:a5:e9:90:a1:e1:79:68:38:
                    bc:67:10:a8:19:fe:64:95:5a:5e:be:05:c4:35:26:
                    fa:d3:7b:34:4f:ab:2b:26:ed:b7:d4:a6:04:fc:6a:
                    bd:f6:c4:c6:d5:28:4d:cc:72:1e:45:1a:e5:2c:d3:
                    8c:0e:7f:83:3a:2b:d2:ca:7e:16:3f:e4:81:ee:e1:
                    1a:e4:ae:59:60:ec:cc:6d:ab:a6:21:80:1e:e6:9f:
                    c6:00:20:9a:f7:1e:a5:30:2e:99:97:1f:e2:8b:e1:
                    65:a0:f0:b6:24:ee:ad:b5:d5:4f:7e:27:48:89:c3:
                    85:56:b2:5b:bc:06:b7:a1:06:b0:38:3b:04:44:20:
                    5e:74:8e:8f:58:87:a9:57:54:4b:d0:4d:c4:f0:63:
                    59:c1:ad:e2:fe:84:09:0a:64:a0:50:8f:5d:80:32:
                    98:29:1e:6a:ba:03:3f:99:29:86:02:36:55:e0:c7:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8D:1D:32:8A:15:7E:F7:A1:AF:EB:43:A2:3B:F1:8D:38:F2:7D:14
            X509v3 Authority Key Identifier:
                keyid:68:57:F0:F3:AF:89:94:45:94:7C:D4:D6:ED:49:77:76:C3:59:88:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/6857F0F3AF899445947CD4D6ED497776C359881F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6857F0F3AF899445947CD4D6ED497776C359881F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/6857F0F3AF899445947CD4D6ED497776C359881F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:e3:8c:52:95:53:41:fb:6e:f2:64:6d:79:f8:4b:07:ba:
         0a:19:e6:04:50:d2:c4:94:29:61:09:f0:a3:41:55:95:e5:b2:
         c4:51:72:6c:bf:d7:f8:c4:6d:e8:89:a1:91:7a:32:89:76:23:
         19:e5:45:7f:bf:fd:11:2c:28:07:68:b6:94:75:77:67:9e:56:
         31:ea:a7:1d:2a:f0:76:81:f8:ef:0f:f3:a1:86:fa:9d:49:1e:
         6c:76:7a:54:53:bb:b8:55:d8:c9:9d:72:fe:be:7e:96:25:67:
         ad:1c:af:00:b3:1c:86:8d:f5:e3:1f:0e:81:a2:f4:89:1d:de:
         85:2c:6a:7c:e2:77:79:21:d9:2c:b8:ee:2a:77:10:ae:e4:7b:
         69:79:4f:7f:ba:ef:29:60:63:5a:f6:90:16:a8:ae:56:10:fa:
         9c:82:b8:17:62:3a:22:0b:2b:ea:58:70:4b:61:57:ad:37:e9:
         0e:c8:f7:cf:1d:a9:17:9e:73:b3:7b:74:a7:ce:80:c3:bf:e2:
         f2:b1:2f:79:c3:8b:08:20:d8:9e:ce:a5:ff:99:e7:0e:ab:7f:
         2f:9e:95:99:5d:38:d5:9e:29:76:b4:3e:65:c6:c4:d8:ee:a5:
         8d:6f:f0:03:dd:b5:39:f7:9e:eb:8d:4d:fc:a7:5f:d7:23:81:
         b2:f6:2b:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXkiRjBqlj1vbem1LkKcpCCrVSt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg1N0YwRjNBRjg5OTQ0NTk0N0NENEQ2RUQ0OTc3NzZD
MzU5ODgxRjAeFw0yNDExMDEyMDAwNTdaFw0yNDExMDIyMjQyNTdaMDMxMTAvBgNV
BAMTKDlFOEQxRDMyOEExNTdFRjdBMUFGRUI0M0EyM0JGMThEMzhGMjdEMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMG5LMc0/R5okOpKbKg/Sw8QXf
udy4p8sQLC4X9ByAit5bnl8aGFFvTHl+RrVZjKO2wwb3nk6/QaAQdFEmR19f8Fzd
oGF0WR4YsvMVRuqVKp2l6ZCh4XloOLxnEKgZ/mSVWl6+BcQ1JvrTezRPqysm7bfU
pgT8ar32xMbVKE3Mch5FGuUs04wOf4M6K9LKfhY/5IHu4Rrkrllg7Mxtq6YhgB7m
n8YAIJr3HqUwLpmXH+KL4WWg8LYk7q211U9+J0iJw4VWslu8BrehBrA4OwREIF50
jo9Yh6lXVEvQTcTwY1nBreL+hAkKZKBQj12AMpgpHmq6Az+ZKYYCNlXgxwK/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUno0dMooVfvehr+tDojvxjTjyfRQwHwYDVR0j
BBgwFoAUaFfw86+JlEWUfNTW7Ul3dsNZiB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldX
Y20vMC82ODU3RjBGM0FGODk5NDQ1OTQ3Q0Q0RDZFRDQ5Nzc3NkMzNTk4ODFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NTdGMEYzQUY4OTk0NDU5
NDdDRDRENkVENDk3Nzc2QzM1OTg4MUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldXY20vMC82
ODU3RjBGM0FGODk5NDQ1OTQ3Q0Q0RDZFRDQ5Nzc3NkMzNTk4ODFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApoHjjFKVU0H7bvJkbXn4Swe6ChnmBFDSxJQpYQnwo0FVleWyxFFybL/X+MRt
6ImhkXoyiXYjGeVFf7/9ESwoB2i2lHV3Z55WMeqnHSrwdoH47w/zoYb6nUkebHZ6
VFO7uFXYyZ1y/r5+liVnrRyvALMcho314x8OgaL0iR3ehSxqfOJ3eSHZLLjuKncQ
ruR7aXlPf7rvKWBjWvaQFqiuVhD6nIK4F2I6Igsr6lhwS2FXrTfpDsj3zx2pF55z
s3t0p86Aw7/i8rEvecOLCCDYns6l/5nnDqt/L56VmV041Z4pdrQ+ZcbE2O6ljW/w
A921Ofee641N/Kdf1yOBsvYrng==
-----END CERTIFICATE-----
Generated at Fri Nov 8 10:33:17 2024 by rpki-client on console.sobornost.net