Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.mft
File:                     29C49981A06E753E7D8BA04379CF1A6C4CE85950.mft (raw, json)
Hash identifier:          ILbjn1gTOyr3vIxVfN7/pt8A2vvMppBMKjkJmBb45dQ=
Subject key identifier:   82:38:19:AD:C8:B7:E8:8F:78:F3:2D:90:1C:08:50:57:D1:0E:69:91
Authority key identifier: 29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50
Certificate issuer:       /CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
Certificate serial:       1135981FDB6C382D5B16015CB3929EA1B8FB44B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.mft
Manifest number:          0328
Signing time:             Sat 18 Mar 2023 17:23:28 +0000
Manifest this update:     Sat 18 Mar 2023 17:18:28 +0000
Manifest next update:     Sun 19 Mar 2023 21:01:28 +0000
Files and hashes:         1: 323830343a323562343a633030303a3a2f33342d3334203d3e20323634323937.roa (hash: OJdfucljL0zD97LeqlSy/euLgnMJymoR597isHcYTCA=)
                          2: 323830343a323562343a3a2f33322d3332203d3e20323634323937.roa (hash: oTMtY4/sbmYQtzG0n5Z9yAt8dPx/8LStD81JmqaCA74=)
                          3: 3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa (hash: I3QgLiWasJc7nwzbxiu/3o17c4I2b1m8kBBcU35FYr8=)
                          4: 323830343a323562343a666630303a3a2f34382d3438203d3e20323634323937.roa (hash: L3pt2MHWw98EFFG74kdwZmQsBzA67PROPlh0MK/7hno=)
                          5: 323830343a323562343a343030303a3a2f33342d3334203d3e20323634323937.roa (hash: yHaJyy8kdQ6FMlxo2RUv6F9EM+vlqdFQG3Wz6vlgiVM=)
                          6: 323830343a323562343a383030303a3a2f33342d3334203d3e20323634323937.roa (hash: ST8dE8MNLHEdTvkqMTL/J/7g5tofYt5iU07naG036pI=)
                          7: 3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa (hash: FAX3yp3TV2X03RiJVygGBAykqM3zNEQuDSCuFcaWzl8=)
                          8: 29C49981A06E753E7D8BA04379CF1A6C4CE85950.crl (hash: NUomDZbBxw60rqOpCusWoVGQ5uPohcMt10giKAftmGo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:35:98:1f:db:6c:38:2d:5b:16:01:5c:b3:92:9e:a1:b8:fb:44:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
        Validity
            Not Before: Mar 18 17:18:28 2023 GMT
            Not After : Mar 19 21:01:28 2023 GMT
        Subject: CN=823819ADC8B7E88F78F32D901C085057D10E6991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:3a:eb:4b:d7:5d:f5:e0:58:89:49:c8:7b:
                    df:9b:64:3a:df:0d:15:b6:b5:9a:a3:42:2d:8e:d5:
                    67:a7:e9:83:bc:b0:c8:19:81:d5:d0:ad:51:9f:96:
                    b8:57:5d:60:40:ef:dc:d0:87:5a:0f:da:ec:3f:f4:
                    ee:81:38:65:f3:3d:26:36:64:7b:d4:68:9d:39:37:
                    75:9f:cb:1e:2f:17:f2:cb:9d:18:4f:b3:19:81:86:
                    13:9d:ad:d2:13:c6:ba:a3:31:54:3f:fb:ac:48:b5:
                    4e:1d:46:5e:d4:91:b9:43:f9:64:d0:bc:ef:08:24:
                    3f:43:43:08:e4:b6:c0:31:9e:68:41:92:51:b4:e1:
                    54:e2:4e:e7:e2:77:42:40:04:6a:38:c7:84:04:14:
                    07:58:47:53:a9:1f:a7:33:9e:bf:60:ec:cf:76:18:
                    6b:45:0e:fc:47:95:d8:11:d0:c8:51:d5:79:56:8d:
                    62:ae:98:30:ea:05:2e:43:e7:ea:f4:20:eb:93:f0:
                    81:65:f8:ba:ff:98:1b:41:78:ff:35:19:3c:e0:38:
                    7c:21:bf:9a:d7:01:e4:5f:d7:93:00:4c:51:cc:67:
                    32:aa:fe:20:99:3d:c4:75:4f:eb:fe:0b:cd:cc:de:
                    d5:d8:be:7a:0b:80:e5:a6:af:a5:00:30:c6:79:2d:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:38:19:AD:C8:B7:E8:8F:78:F3:2D:90:1C:08:50:57:D1:0E:69:91
            X509v3 Authority Key Identifier:
                keyid:29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ac:d9:0f:dc:de:dd:09:cb:e1:0c:44:ac:c6:dc:32:f9:8e:
         d2:c2:bd:19:cc:1c:87:f8:b1:2f:f0:4c:d1:dd:6f:78:0b:da:
         05:62:1c:65:8a:21:15:e2:17:51:8e:00:4d:20:4c:c9:90:36:
         94:da:05:48:17:39:d1:ad:07:50:f1:52:64:1d:b1:03:9a:64:
         5c:94:3d:39:d7:78:3f:c0:fc:b0:63:f5:5f:d0:6b:78:ba:0f:
         b3:08:50:c8:84:6e:55:d6:90:21:e2:1a:05:0e:06:b5:9f:7d:
         c1:37:45:18:72:74:35:0e:98:07:e7:0d:bf:eb:04:19:50:0c:
         ff:66:47:a3:f4:f7:0e:d8:26:e8:77:33:65:5b:76:68:3c:d1:
         41:2a:b6:dd:1b:55:6d:2d:17:91:27:4e:ea:04:a4:12:fb:16:
         69:1f:bc:96:38:03:f4:c0:be:19:fd:55:96:bb:87:e5:ea:71:
         05:bc:33:c7:2e:c2:db:e2:d0:67:2d:86:2d:f0:bd:69:f7:f4:
         29:92:cd:25:e4:65:b1:9c:58:e2:e8:7e:0e:5b:16:87:e4:5f:
         a8:38:f5:f1:f6:0b:3e:5d:23:a1:88:1a:ad:9b:2c:ed:24:7a:
         ca:c1:6e:a3:e5:28:be:fa:ab:0a:67:12:fc:5c:3a:ad:b2:b8:
         8a:2f:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:30 2023 by rpki-client on console.sobornost.net