Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft
File:                     9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft (raw, json)
Hash identifier:          JSQZYV26vltI54aDwgJM4lD3CGiHY4Ap1dqQCBBMNDM=
Subject key identifier:   FE:95:D6:26:B5:12:B0:00:52:13:82:AC:C4:BE:32:4B:91:F8:EB:17
Authority key identifier: 9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85
Certificate issuer:       /CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
Certificate serial:       2B152AFCBDEBFD343DA55E742213F584C0038B27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft
Manifest number:          019A
Signing time:             Mon 03 Feb 2025 11:38:52 +0000
Manifest this update:     Mon 03 Feb 2025 11:33:52 +0000
Manifest next update:     Tue 04 Feb 2025 13:54:52 +0000
Files and hashes:         1: 34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa (hash: AY+0UKqSeFi+VcA328CtiUwEKZiGPUTg47u6izctak0=)
                          2: 34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa (hash: ial675of+ZesGVVCtl0oHXA8v7Tu2e/aWwmHDmtjs8M=)
                          3: 9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl (hash: vXDvfv+qR+hiO5U2nOTmZ2m9c/pqBxZfxdqtGXpvItY=)
                          4: 34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (hash: 5JEQ41mS93qIAQdS67rT4lBibFdkhJ+y7yw43mriUAQ=)
                          5: 34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa (hash: wGNZNggHaM/yBWZqJaTvcpNdRoYux0P6aMXlI344qXg=)
                          6: 323830343a353534633a3a2f33322d3332203d3e20323632383939.roa (hash: MEr3O6ibKU80eMFQUkD/Hv7j++TL7CgWOIDvUfG/vjQ=)
                          7: 34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa (hash: 4OqhzCXvSddMPt+vmOXwPa24eXLfWoS2EWQsDiXKasA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:15:2a:fc:bd:eb:fd:34:3d:a5:5e:74:22:13:f5:84:c0:03:8b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
        Validity
            Not Before: Feb  3 11:33:52 2025 GMT
            Not After : Feb  4 13:54:52 2025 GMT
        Subject: CN=FE95D626B512B000521382ACC4BE324B91F8EB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:91:27:39:7f:a3:27:d4:12:b0:3d:c7:2f:
                    d2:aa:a7:51:c2:93:97:18:d3:95:18:bc:fe:1d:7a:
                    1b:83:71:b5:7e:02:70:0d:e4:7e:77:da:87:19:9d:
                    13:89:f6:15:1b:0f:1b:99:c1:cc:88:7a:42:1a:41:
                    fb:88:e3:00:e3:74:8b:ff:b1:06:98:e1:02:ee:e4:
                    bf:30:93:cc:cf:0e:b3:40:f2:92:ac:06:74:4b:97:
                    0d:8c:2b:b4:50:f0:ee:02:be:1f:28:19:f3:8f:ea:
                    75:a4:cc:15:a5:a7:1c:09:4f:1d:d2:39:ac:e0:e8:
                    d5:78:15:e0:2e:4f:d2:96:9b:8c:8d:ae:ec:f7:5b:
                    47:f9:54:2e:f4:4a:7e:17:b6:fc:b0:84:3d:14:cf:
                    62:ab:f1:f4:8a:e3:7d:74:46:23:d5:1b:f9:72:a3:
                    e6:1b:d3:0f:6d:67:4e:f0:37:0f:b3:e3:cf:c2:a8:
                    44:ab:12:a3:9c:fe:97:78:de:97:22:94:09:44:d5:
                    30:07:68:6b:62:4e:9f:7c:0b:57:57:5a:c7:40:22:
                    1a:ec:ec:3f:4d:d9:f1:e5:9a:65:ed:8b:b9:63:e3:
                    54:b3:e4:6b:67:47:d8:c3:cb:4b:25:c3:ef:3b:5e:
                    5d:ae:78:7a:d9:20:8a:ff:f8:38:2b:c3:8b:08:79:
                    dc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:95:D6:26:B5:12:B0:00:52:13:82:AC:C4:BE:32:4B:91:F8:EB:17
            X509v3 Authority Key Identifier:
                keyid:9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d7:8b:86:72:17:a3:b0:f0:4a:a0:b9:60:c2:9c:4b:d8:69:
         1e:26:28:a8:d6:e0:3b:ee:98:2d:6a:1c:9f:ca:ec:f8:cf:cf:
         77:26:0d:d4:c8:11:60:ab:46:80:d5:ad:80:5a:7b:38:cf:1a:
         04:00:8f:e2:d4:14:6a:d5:5e:2b:14:08:c8:5f:a6:70:2a:fe:
         25:e8:9d:98:f5:9f:86:bc:f2:d3:5b:b6:50:2b:eb:e2:58:fd:
         8c:e3:29:63:72:a0:c4:72:48:e3:b2:0e:1f:19:87:e5:7a:90:
         7e:3a:3b:fa:17:d4:a0:4d:b6:45:44:f9:ab:6b:96:28:da:d6:
         56:16:fa:78:9c:b2:2b:1b:87:e5:b2:53:1c:d8:0d:84:50:89:
         e5:c6:74:76:7c:60:7e:4b:7c:01:65:98:14:0e:3b:69:e3:64:
         c0:bc:2d:a1:66:06:db:48:8c:e7:24:49:e0:4d:7b:f9:33:e6:
         02:3f:24:7e:10:5a:d9:77:10:ae:cf:3b:05:9c:1f:b6:3d:b3:
         c0:5c:9f:9a:1c:25:47:52:94:c1:8a:ff:81:1b:5e:28:79:91:
         99:68:9a:09:8d:6d:91:80:e9:eb:3b:10:08:0d:b4:36:af:af:
         9b:a9:97:c6:6b:03:de:54:6e:19:9d:dd:0f:6f:52:22:81:90:
         92:47:1d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 03:26:38 2025 by rpki-client on console.sobornost.net