Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/1/34509F4658E750ACFA191221A9FF58D143364376.mft
File:                     34509F4658E750ACFA191221A9FF58D143364376.mft (raw, json)
Hash identifier:          eli84+eQAacjhavsrjcvN3gNiTqmq/I8ziVb1LC8H3g=
Subject key identifier:   E3:C8:BF:C0:9B:F4:8E:90:D9:D6:28:24:72:23:61:E7:83:06:BB:03
Authority key identifier: 34:50:9F:46:58:E7:50:AC:FA:19:12:21:A9:FF:58:D1:43:36:43:76
Certificate issuer:       /CN=34509F4658E750ACFA191221A9FF58D143364376
Certificate serial:       30D08A527D19CB265C29B8FFAB30AF5F28658C3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34509F4658E750ACFA191221A9FF58D143364376.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/1/34509F4658E750ACFA191221A9FF58D143364376.mft
Manifest number:          015E
Signing time:             Sat 21 Dec 2024 05:40:10 +0000
Manifest this update:     Sat 21 Dec 2024 05:35:10 +0000
Manifest next update:     Sun 22 Dec 2024 06:13:10 +0000
Files and hashes:         1: 34509F4658E750ACFA191221A9FF58D143364376.crl (hash: 17NTylkevcnkUd5O+CHfZFmv27L6zJI1xoEMwF1QMbc=)
                          2: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: g+50W/GKpyRxUiJQsThhiWa9D5x1F/Gf/61dr6e41bM=)
                          3: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: GH0YqRSNAxzEQuVqRItqsfXwco2NzPU2PVyhgkaKD0I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d0:8a:52:7d:19:cb:26:5c:29:b8:ff:ab:30:af:5f:28:65:8c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34509F4658E750ACFA191221A9FF58D143364376
        Validity
            Not Before: Dec 21 05:35:10 2024 GMT
            Not After : Dec 22 06:13:10 2024 GMT
        Subject: CN=E3C8BFC09BF48E90D9D62824722361E78306BB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:1f:36:4d:6d:d5:f1:50:28:ab:8b:b6:a7:
                    d2:bf:6b:3c:b4:f2:99:ba:3d:fa:75:17:6b:c4:00:
                    bc:07:54:98:e9:23:65:4c:20:e4:c9:c4:cc:01:00:
                    62:eb:ac:b5:97:f2:25:87:25:9f:3c:6a:1b:78:76:
                    87:f6:42:bd:79:e0:9e:ec:17:a5:63:f6:21:fd:0c:
                    2a:d4:7a:3c:fa:38:56:e2:d4:1f:ac:f8:fd:22:c1:
                    cd:8b:69:f3:75:cb:01:87:a1:bb:04:f9:65:89:b4:
                    09:79:6d:9f:f8:19:b5:27:a2:0d:d3:41:29:69:99:
                    58:88:16:6e:ce:0f:b2:a2:84:dc:3b:18:1c:47:64:
                    41:14:ba:dd:e5:11:6d:6f:21:e8:99:39:04:9c:e0:
                    25:fb:c1:f3:cc:59:ef:81:26:08:8c:0b:f7:51:2c:
                    f6:68:99:a5:25:4d:f1:a9:e1:e3:1a:c8:e3:53:20:
                    6e:16:9a:60:b6:64:81:bf:f1:a2:b8:bd:60:87:d5:
                    fc:d5:92:43:14:1c:c4:c6:4a:0b:bf:47:1b:b7:b8:
                    26:07:be:a3:13:4d:ce:dd:1a:be:32:9c:7c:b0:6f:
                    9e:78:6a:e9:97:70:24:ad:d7:f8:f7:e6:48:ee:c8:
                    ce:14:db:6f:6d:46:95:80:ee:4a:87:09:a5:37:1a:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:BF:C0:9B:F4:8E:90:D9:D6:28:24:72:23:61:E7:83:06:BB:03
            X509v3 Authority Key Identifier:
                keyid:34:50:9F:46:58:E7:50:AC:FA:19:12:21:A9:FF:58:D1:43:36:43:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/1/34509F4658E750ACFA191221A9FF58D143364376.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34509F4658E750ACFA191221A9FF58D143364376.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/1/34509F4658E750ACFA191221A9FF58D143364376.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:d1:9f:38:34:a5:3f:51:15:ff:a7:3f:94:99:bf:50:cd:
         cf:93:a4:79:c1:0d:55:2a:9d:6c:7d:76:dd:e6:2f:02:15:a9:
         cd:d5:41:3a:d1:fc:e0:f8:d2:38:c2:1d:9c:e4:f6:b8:57:21:
         3c:64:e1:4e:1b:23:51:69:37:70:01:11:80:3f:72:a7:fc:9c:
         4e:7a:2a:b2:31:a3:0b:80:3b:e8:cc:0c:09:e2:6e:26:3e:1b:
         78:ad:82:10:a4:96:cc:12:a4:b1:14:f9:64:75:9c:22:fb:cc:
         de:be:25:df:8a:49:fd:6e:f6:3b:b9:5b:7b:1a:49:b6:17:d9:
         9d:c7:98:99:ba:32:a0:6d:3c:ca:b0:d4:52:32:f3:f5:ff:70:
         97:3a:7f:06:75:bf:0a:57:47:63:dd:3b:fe:65:fd:1b:7e:70:
         75:5f:70:2b:62:e3:63:4f:12:c5:93:3c:fb:66:eb:cb:ef:05:
         eb:8b:93:db:b6:64:51:ab:fa:ea:1a:2e:3d:55:3b:d4:7a:c5:
         7c:bc:5c:9a:84:ea:3a:27:c9:08:e9:10:49:c1:1a:4a:dc:97:
         c4:6b:f5:b0:66:45:e7:f5:45:67:4f:e5:ec:4e:92:52:34:ec:
         f9:bb:53:f5:8c:62:cc:fa:19:d3:0c:c0:dc:fb:0d:98:b6:db:
         b7:50:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 21 18:42:40 2024 by rpki-client on console.sobornost.net