Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft
File:                     B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft (raw, json)
Hash identifier:          m/FwF3YAORSi7Py+vdLMlaR7zydf0WmFSWvV6DbbU7Q=
Subject key identifier:   81:D6:84:06:E8:56:DC:06:52:46:68:1E:C6:87:92:26:CE:0C:FB:24
Authority key identifier: B9:C9:E4:CB:9E:4C:59:B2:8C:E8:A0:9B:5F:16:43:D7:13:0D:A6:D7
Certificate issuer:       /CN=B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7
Certificate serial:       5F9972891DB933923BC9065F92FA5DAE876BD38E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft
Manifest number:          01A3
Signing time:             Tue 11 Feb 2025 16:00:00 +0000
Manifest this update:     Tue 11 Feb 2025 15:55:00 +0000
Manifest next update:     Wed 12 Feb 2025 16:26:00 +0000
Files and hashes:         1: 3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa (hash: cHfpF4wCWODJyZjEUQnAHdQkFrGxz+PJCLif2ZUohgU=)
                          2: 3138372e3132312e3135362e302f32332d3233203d3e20323730393138.roa (hash: atqzuGnGCf8VEQfdLCF7gj0j6UzzIH30tKkiLntKl2Y=)
                          3: B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.crl (hash: sr+O09SWFotruGqDPytWuidz1dT9mN9TxGK0RzgkFg0=)
                          4: 3138372e3132312e3135392e302f32342d3234203d3e20323730393138.roa (hash: g8YexcwsGHwQ8ZMVFu95daRqEE7knWs/x/BxB0HTCrE=)
                          5: 3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa (hash: Yg1i+J+gsbw+EXxmTjjVwwAIJLUuF4YlFjH2qPKXZPA=)
                          6: 3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa (hash: nDy3TSnHlvdfqcIn2zhr3dNGb0hQFBIen594JBSLchg=)
                          7: 3138372e3132312e3135362e302f32322d3232203d3e20323730393138.roa (hash: T6wfV2Cg6aNMC/V2g9COwsobf+d0peW/+8eiMI300y4=)
                          8: 3138372e3132312e3135362e302f32342d3234203d3e20323730393138.roa (hash: boltoKBmCy0ItDoBO8hbjnmRJyXQ2AR5Zm2e4gRVxNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:99:72:89:1d:b9:33:92:3b:c9:06:5f:92:fa:5d:ae:87:6b:d3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7
        Validity
            Not Before: Feb 11 15:55:00 2025 GMT
            Not After : Feb 12 16:26:00 2025 GMT
        Subject: CN=81D68406E856DC065246681EC6879226CE0CFB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:81:86:6b:0a:50:64:ad:34:91:3f:ee:cf:
                    26:e7:66:ea:fa:e6:d6:e5:88:d4:f0:52:be:53:63:
                    0c:79:3e:19:67:1c:6e:23:c0:78:14:5e:c3:35:74:
                    38:79:34:af:7e:95:29:24:45:58:13:39:dd:24:df:
                    2f:17:07:0e:d6:fe:97:1a:d6:fc:40:08:c1:5e:bb:
                    74:54:3c:95:fa:4e:7a:63:5c:c9:f9:be:e0:d8:55:
                    78:53:70:5f:3b:b8:5b:ac:f4:7c:d6:3e:68:d3:e3:
                    46:51:30:26:dd:56:23:1a:a7:a0:33:6f:25:fd:31:
                    d9:a2:b0:13:cd:35:92:55:76:ad:15:dc:73:72:5f:
                    60:ae:10:87:b8:91:db:3f:64:8c:e2:ca:e0:78:03:
                    76:cb:a1:f7:79:8b:08:35:46:be:67:59:98:a3:66:
                    22:5b:05:9b:40:72:70:32:e0:e1:4d:7e:9f:ab:da:
                    b6:35:6a:bd:d4:53:61:60:03:a9:c7:7e:4e:32:74:
                    d0:44:a8:52:3c:49:f9:43:d6:a7:2f:ae:ff:83:e9:
                    27:40:24:24:a7:c1:f2:7d:63:73:bf:07:41:55:12:
                    01:37:1f:35:00:c4:01:c4:9d:7d:84:64:50:34:aa:
                    66:2d:08:82:5c:67:ec:f4:41:d3:fb:7e:45:ad:db:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:84:06:E8:56:DC:06:52:46:68:1E:C6:87:92:26:CE:0C:FB:24
            X509v3 Authority Key Identifier:
                keyid:B9:C9:E4:CB:9E:4C:59:B2:8C:E8:A0:9B:5F:16:43:D7:13:0D:A6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5a:f9:20:fe:25:1f:6e:08:80:ef:c9:10:f1:b7:8a:d9:11:
         47:11:b8:b8:77:2f:a3:24:04:75:05:c2:a7:bb:28:d6:7b:58:
         ef:b2:cc:cb:32:31:dd:24:31:b4:d8:4d:22:b4:8c:b2:6b:76:
         54:e1:93:65:e2:14:cd:2c:de:d3:ec:6b:3c:51:6d:7f:09:fd:
         8a:82:f0:de:70:44:3d:14:4a:4f:44:1c:fc:4a:cc:c9:31:70:
         54:af:c8:11:8e:e4:61:c8:97:32:f5:22:3e:c4:b7:85:a9:ba:
         1f:3e:ca:9b:b4:6a:08:ab:d7:d0:7d:97:9a:8a:74:2f:cf:5c:
         79:f1:65:d1:ee:4b:c6:19:4c:3a:07:c6:1d:85:8f:06:c9:87:
         32:95:2c:96:c3:f8:27:f8:57:cf:b0:98:e6:13:0b:f4:48:80:
         20:80:ed:78:26:2b:ae:3d:e6:9c:09:a3:92:41:23:35:3d:96:
         60:71:cb:4a:b3:9f:38:ff:7e:24:fc:62:a7:9a:58:b3:09:04:
         a8:4a:ed:4c:5f:c6:3a:5d:4c:c1:d8:70:b7:85:01:84:50:53:
         b0:2d:f2:82:18:e2:c7:85:06:73:8c:c1:b4:d5:16:71:95:fd:
         4a:15:20:42:07:e4:40:b4:2e:ae:e7:e9:27:52:02:2e:55:85:
         cc:7e:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 03:49:23 2025 by rpki-client on console.sobornost.net