Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.mft
File:                     E43F929F1A53246574F0400683594164F34379B9.mft (raw, json)
Hash identifier:          15k2PB4ty90AwRZ+RHy/f5/o043F6K1cdofBKk9ebjs=
Subject key identifier:   36:22:FF:94:DE:42:D7:EE:8B:3C:7C:55:7C:D7:D8:38:57:E3:3E:F1
Authority key identifier: E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9
Certificate issuer:       /CN=E43F929F1A53246574F0400683594164F34379B9
Certificate serial:       60FC60DCA8439AB2E63FE730893DDAA81E4A38B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43F929F1A53246574F0400683594164F34379B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.mft
Manifest number:          AA
Signing time:             Sat 10 Aug 2024 09:26:41 +0000
Manifest this update:     Sat 10 Aug 2024 09:21:41 +0000
Manifest next update:     Sun 11 Aug 2024 11:57:41 +0000
Files and hashes:         1: E43F929F1A53246574F0400683594164F34379B9.crl (hash: CF+u7PngVTx/C3TTYB2d4h8BybyCL/aWP3rL0hnczkk=)
                          2: 323830343a346638633a3a2f33322d3438203d3e20323638333333.roa (hash: RbFZmU5QSte/rsxPgSXyPEX6HMdrynehH7FB9tVRCJg=)
                          3: 34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa (hash: EyFOUIl8im+yGID6QoOH1H7Kg0MLPJglij+2yI73N5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fc:60:dc:a8:43:9a:b2:e6:3f:e7:30:89:3d:da:a8:1e:4a:38:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43F929F1A53246574F0400683594164F34379B9
        Validity
            Not Before: Aug 10 09:21:41 2024 GMT
            Not After : Aug 11 11:57:41 2024 GMT
        Subject: CN=3622FF94DE42D7EE8B3C7C557CD7D83857E33EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:66:ab:8f:63:2a:d3:98:b2:29:61:5e:3f:
                    dc:9c:17:fb:f7:af:d5:78:99:6d:1a:cf:2c:57:e2:
                    98:c2:25:c5:ba:83:d4:05:51:4f:59:00:77:24:61:
                    1b:be:61:e8:3b:07:8f:d1:66:7a:d5:8d:ac:7e:1a:
                    5c:61:85:45:70:66:97:18:1d:e0:9c:67:f6:7d:04:
                    ca:b4:fd:0a:49:68:e0:b3:50:df:6d:c1:28:cc:c2:
                    1e:1b:7f:21:d3:a3:74:65:de:60:55:18:21:db:33:
                    52:b1:18:a7:be:7f:78:18:63:83:af:93:d2:26:c8:
                    cd:e1:ab:43:29:86:e3:b3:27:13:50:e5:74:59:d7:
                    b5:9c:a3:7a:5f:ee:fd:e9:6a:06:5a:b1:56:2e:68:
                    19:fc:9f:93:7f:6c:f7:e5:ed:f7:54:00:85:ba:b2:
                    4f:31:6b:58:64:0d:96:0d:39:82:7d:da:a1:3f:00:
                    a8:38:86:3c:e4:51:f8:2b:a9:21:5f:7b:cf:a4:b8:
                    33:6e:8a:d0:29:dd:80:60:49:a4:db:f2:88:38:1c:
                    dc:5f:36:5e:b1:ba:6e:25:e5:b1:39:ff:59:1e:b5:
                    6d:b1:c1:c3:da:7f:49:b5:2b:83:0c:38:be:26:11:
                    bc:c0:28:c8:71:14:85:e3:07:e0:7f:a5:28:b1:bf:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:22:FF:94:DE:42:D7:EE:8B:3C:7C:55:7C:D7:D8:38:57:E3:3E:F1
            X509v3 Authority Key Identifier:
                keyid:E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43F929F1A53246574F0400683594164F34379B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:55:7a:b8:c9:82:f4:bf:1d:8c:1e:d5:25:ad:f3:cc:6e:6e:
         a6:e2:6c:5b:75:3b:27:8a:d9:35:31:d6:f4:82:d8:e3:e2:c8:
         bd:b3:47:ad:3d:af:cd:59:0a:9c:50:28:31:f8:b7:a4:8b:b7:
         60:b1:93:96:9e:34:cd:24:1b:ed:33:2c:f7:85:8d:bf:c9:1b:
         6f:40:d4:eb:46:80:a5:34:8f:35:4e:ba:f2:fc:24:8f:db:33:
         7c:7f:e6:ca:29:23:55:15:47:d4:95:f0:c8:11:9d:af:bc:a0:
         b9:5f:52:96:f1:58:73:11:5a:39:9c:ad:a9:8d:dd:4a:c1:cb:
         37:77:9d:1a:92:04:cf:98:9d:51:7a:e9:43:a8:f9:93:40:c1:
         2a:b5:c6:c7:7a:b3:21:a2:54:5f:a0:39:3c:3b:00:60:29:2a:
         05:d5:ab:19:26:27:df:c1:0c:76:41:9a:8d:b3:40:ac:c7:53:
         c7:e8:25:fd:6e:13:1a:12:15:67:a9:d1:2a:5b:04:23:9f:41:
         a4:29:68:75:2f:a4:da:d9:47:6e:14:51:f7:a1:db:72:56:f2:
         92:11:8f:c9:41:a7:64:2a:90:12:44:db:0b:c0:01:02:63:7c:
         c3:62:25:e9:1f:c1:95:8c:e2:f7:3b:03:ae:eb:f2:73:46:7e:
         15:3e:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 03:06:47 2024 by rpki-client on console.sobornost.net