Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.mft
File:                     BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.mft (raw, json)
Hash identifier:          PHkQwypTq6C5FQz3QhSaEPBUliD0QlitCDWdtxgKlpQ=
Subject key identifier:   6F:BB:33:DA:10:9F:3D:EC:34:92:FB:9F:7D:20:F5:D1:DB:A7:3F:FE
Authority key identifier: BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00
Certificate issuer:       /CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
Certificate serial:       22B88830030FF71109025D7FF28FCBCE41587C3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.mft
Manifest number:          0126
Signing time:             Mon 15 Apr 2024 12:15:32 +0000
Manifest this update:     Mon 15 Apr 2024 12:10:32 +0000
Manifest next update:     Tue 16 Apr 2024 12:44:32 +0000
Files and hashes:         1: 3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa (hash: a1HfMbs/dyusdTLFwuUc7b7CnBhl8c5lBTbXaV6IHFM=)
                          2: BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl (hash: DiAPxF4eCMSR2D3pAjOnBm14A6l+dp9XaAW9WlDdwGA=)
                          3: 3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa (hash: 0OIJn8oMkpyQy2YyaEWRHp2GlBykYkady5glD2hu7Bg=)
                          4: 3133382e33362e3139342e302f32332d3233203d3e20323634353835.roa (hash: 4kUj0pp63KrR4JwkKXwQ2A62ZJ6hQVTLM8njZ0sWOnM=)
                          5: 323830343a323230303a3a2f33322d3332203d3e20323634353835.roa (hash: BBYHZzVJBMEuL+W+JYQJALJFA+PI9PR2Z2O1QGfIg48=)
                          6: 3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa (hash: IAA6e3q/BiJ2leqaCMmqzcEE7HqamcV/aDiQ1N5bWCM=)
                          7: 3133382e33362e3139322e302f32322d3232203d3e20323634353835.roa (hash: 4B4cvqOhulTYf+YklKD426oEkblsdMwdRQf8MI7QVWM=)
                          8: 3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa (hash: lRjSAriTYOl/LcdxWPcuw8TlDoxJmoSSQ4xT81ncJ7Y=)
                          9: 3133382e33362e3139322e302f32342d3234203d3e20323634353835.roa (hash: DvsdVdRA+qMrPFnwgxYlobg2ywa9jkuPuA8nBwQe594=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b8:88:30:03:0f:f7:11:09:02:5d:7f:f2:8f:cb:ce:41:58:7c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
        Validity
            Not Before: Apr 15 12:10:32 2024 GMT
            Not After : Apr 16 12:44:32 2024 GMT
        Subject: CN=6FBB33DA109F3DEC3492FB9F7D20F5D1DBA73FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:01:06:52:f0:8b:fe:39:ee:05:e9:63:42:
                    cd:2f:99:b9:15:53:72:1e:51:d4:96:38:83:d7:32:
                    4b:c1:6d:bd:76:c1:fd:98:82:83:f6:7d:b1:91:37:
                    39:a2:d7:a7:43:fa:5b:c4:b6:4f:68:71:7c:22:a8:
                    b7:79:fc:e1:5b:7a:b0:5a:a3:03:ad:aa:11:57:ce:
                    a8:eb:54:72:4a:52:20:41:6c:6b:c4:e3:05:6f:da:
                    1d:70:2f:3d:0f:57:fc:71:19:ff:71:82:7f:c3:fb:
                    0a:3d:4e:62:4a:b5:ce:4e:92:ac:49:41:e7:48:04:
                    c1:00:1f:83:c7:1b:1c:4f:3e:18:a0:49:bd:d7:78:
                    48:0f:b3:1c:c4:43:bd:0f:6e:02:82:32:26:c4:23:
                    c5:04:8e:fa:d7:1f:44:2a:f8:47:9a:91:33:4a:64:
                    1f:6f:d2:37:63:d6:4f:1f:af:00:52:9a:bc:bf:2c:
                    65:e7:ce:17:25:10:b4:15:3a:69:5b:b1:80:c5:62:
                    20:84:25:5f:68:c8:91:07:3f:79:0a:53:fb:6f:61:
                    ab:50:09:6b:23:de:99:af:5a:88:aa:48:7b:67:5c:
                    3c:2a:cd:aa:24:57:d6:1c:25:35:f5:9a:9c:6c:27:
                    07:7d:ba:0c:ff:38:3f:48:da:59:68:4b:37:bc:ff:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BB:33:DA:10:9F:3D:EC:34:92:FB:9F:7D:20:F5:D1:DB:A7:3F:FE
            X509v3 Authority Key Identifier:
                keyid:BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:08:ca:0b:b5:da:b3:70:c8:0f:36:ec:13:e1:20:39:8e:89:
         28:ed:02:29:be:a0:15:d6:b1:63:b0:da:07:25:47:37:b5:4b:
         7f:c7:72:b6:8d:a2:aa:0e:24:03:f7:31:04:be:6e:84:b2:f9:
         5a:27:a1:d3:50:ea:a7:64:f2:a1:fd:0e:36:ca:44:51:c2:73:
         bb:7d:1c:a5:33:f4:f9:1a:70:15:54:8d:59:20:f6:eb:ee:ce:
         9b:49:f5:79:0f:79:39:d2:72:24:6f:58:15:68:f5:e1:64:f8:
         74:4c:8e:0d:d5:be:c5:c2:5c:7f:57:a7:a5:37:eb:8e:35:38:
         a7:9a:4f:0c:df:cc:d0:ee:c9:72:9a:27:69:b5:8b:98:1e:f8:
         ac:4b:d0:d8:64:0c:85:04:ff:c5:29:a6:98:8a:05:fb:ac:03:
         05:bc:75:bb:24:f6:79:07:42:67:40:97:5a:cc:17:29:f5:d7:
         7b:ff:39:69:a5:da:6f:ed:57:a8:aa:69:74:60:f5:5e:de:85:
         e4:ca:c6:a1:9e:9b:61:e7:0b:c3:8f:64:a4:f6:1e:f0:a7:dd:
         25:a1:23:41:a8:3b:62:29:5c:f4:e2:1d:95:e6:ef:9c:69:fc:
         ec:d1:46:b0:93:2d:81:f4:b1:be:a3:71:06:c5:c0:fa:5f:bb:
         6e:ac:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:09 2024 by rpki-client on console.sobornost.net