Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/A488EB929E276DBA8147B6EC31F79FA1FBC94E62.mft
File:                     A488EB929E276DBA8147B6EC31F79FA1FBC94E62.mft (raw, json)
Hash identifier:          piKnQH0EJYo6/PifhUzwTS8kU9kfqG6AuA9n8iCQs10=
Subject key identifier:   B9:3D:7E:4C:F6:C4:60:DE:C1:97:81:B6:09:07:99:01:FD:87:60:05
Authority key identifier: A4:88:EB:92:9E:27:6D:BA:81:47:B6:EC:31:F7:9F:A1:FB:C9:4E:62
Certificate issuer:       /CN=A488EB929E276DBA8147B6EC31F79FA1FBC94E62
Certificate serial:       1EAFBD98E270570E1079B7120E68C113EF8D1B1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A488EB929E276DBA8147B6EC31F79FA1FBC94E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/A488EB929E276DBA8147B6EC31F79FA1FBC94E62.mft
Manifest number:          0C
Signing time:             Mon 04 Mar 2024 19:27:42 +0000
Manifest this update:     Mon 04 Mar 2024 19:22:42 +0000
Manifest next update:     Tue 05 Mar 2024 22:05:42 +0000
Files and hashes:         1: 34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (hash: xUyJKI9CdcpvPHvm8M8F6y0rUSPrwekorn75nFfFglQ=)
                          2: 34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (hash: LKdV2R3xY2GT0gN9ZX3M7ACuPFMDNC0LQlC3JS6z7QQ=)
                          3: A488EB929E276DBA8147B6EC31F79FA1FBC94E62.crl (hash: UZrnJhcR03MfuUFMA2FjVlUs+f9/XT7oC3Lj8WiMX3Q=)
                          4: 34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (hash: yPkovle72hU4ivzu9eLoX7QJaoSVkx00/AD5UnUyCZ4=)
                          5: 34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (hash: fYQ+mlt8tQElEQOR514itew0Dc0q59w7m320JbB6UZo=)
                          6: 323830343a363762633a3a2f33322d3438203d3e20323639363437.roa (hash: JaEUpGTJuDobeWFY6GMVxDZs5BtbtWCOn9lv71n9+M8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:af:bd:98:e2:70:57:0e:10:79:b7:12:0e:68:c1:13:ef:8d:1b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A488EB929E276DBA8147B6EC31F79FA1FBC94E62
        Validity
            Not Before: Mar  4 19:22:42 2024 GMT
            Not After : Mar  5 22:05:42 2024 GMT
        Subject: CN=B93D7E4CF6C460DEC19781B609079901FD876005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:08:7a:da:29:68:ab:02:d0:8e:83:67:6e:
                    35:1e:06:4e:dc:0c:16:46:37:45:a9:83:9f:8c:7b:
                    3d:c7:8a:e9:e3:36:9d:0f:ed:8c:3d:13:8a:ce:c0:
                    88:43:32:80:19:d5:6e:fc:4d:00:06:29:c8:a2:bd:
                    a0:38:52:69:5b:8d:63:0f:e3:e8:7c:9d:ec:45:db:
                    99:cc:68:d8:e4:5e:9f:7f:f9:b7:4c:d8:84:2e:ee:
                    11:9b:06:0f:be:f9:b4:e1:0c:ca:bb:26:a7:08:6f:
                    a6:99:45:df:fa:ee:c4:9e:c8:87:62:6f:c6:5d:7a:
                    e9:ae:f3:24:f8:1f:5f:6a:f4:42:15:fd:67:bd:5f:
                    4d:7c:1d:d4:ba:a9:60:08:c6:b9:27:99:2d:3e:b3:
                    c4:e3:65:e4:62:cf:9e:09:a3:0e:59:b6:ab:bf:92:
                    9c:3a:ed:d5:28:4a:70:04:28:a3:30:b0:35:88:2b:
                    c8:8f:9f:a8:6e:0d:b9:fd:6a:37:db:26:9f:ea:47:
                    df:8a:c1:e5:23:38:0b:30:26:a6:c0:21:cf:9d:57:
                    1d:44:80:a1:99:fb:a0:61:eb:c1:50:ca:1e:7d:c4:
                    18:7f:8d:2b:cb:33:e8:fe:48:5d:a4:fa:e2:7f:74:
                    70:24:20:e2:28:58:07:c1:00:b0:71:b3:9c:84:4f:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3D:7E:4C:F6:C4:60:DE:C1:97:81:B6:09:07:99:01:FD:87:60:05
            X509v3 Authority Key Identifier:
                keyid:A4:88:EB:92:9E:27:6D:BA:81:47:B6:EC:31:F7:9F:A1:FB:C9:4E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/A488EB929E276DBA8147B6EC31F79FA1FBC94E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A488EB929E276DBA8147B6EC31F79FA1FBC94E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/A488EB929E276DBA8147B6EC31F79FA1FBC94E62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:68:ca:52:17:a8:f5:31:58:8c:d0:16:e0:db:d2:4d:2c:fa:
         c9:f5:39:89:5b:96:2a:23:64:be:03:ab:3d:64:ba:77:04:29:
         7b:f9:91:89:03:02:db:36:78:e0:e9:a3:bd:7f:51:93:44:10:
         c7:31:79:f2:14:19:0c:b5:5c:d7:c7:12:cb:5d:00:0d:2c:d8:
         fe:b4:6a:e1:e0:03:f8:e1:eb:90:b3:db:76:e7:f5:7d:3c:a2:
         ea:f0:dd:07:62:16:c4:f3:e0:2d:6c:a5:e4:63:c6:24:60:0d:
         9f:18:8b:d8:f7:58:a7:3e:42:70:ec:b1:31:c8:40:e4:a6:8e:
         01:6e:f6:98:1d:0c:3c:df:fb:bf:06:fb:7e:f7:06:c0:2f:2e:
         46:6c:65:c1:b8:52:96:4f:20:bc:e9:a4:59:56:53:86:44:6b:
         29:89:53:c0:20:88:fa:16:7a:f0:01:41:9a:a2:61:c6:64:28:
         30:67:73:56:9d:a0:d3:f8:0c:79:dd:de:6b:fc:05:0f:12:d7:
         db:31:2d:79:20:31:54:42:fd:5a:46:7f:f8:47:fe:69:f6:35:
         72:89:ae:cb:70:78:36:5f:92:78:6d:59:b3:85:9d:e4:2b:0d:
         af:4f:f4:86:a9:37:e7:ae:5f:88:af:1a:09:c1:83:0f:69:a0:
         61:c3:b0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 18:57:56 2024 by rpki-client on console.sobornost.net