Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.mft
File:                     C7DC1B24AD54C5A941093FBA50F385A50A175975.mft (raw, json)
Hash identifier:          Bu1SrhrebuK5onQ5GrNggyUjwMpB7mD3VT+yc7fpYZM=
Subject key identifier:   45:FF:8A:03:29:13:9C:A9:F3:FA:DB:FF:55:AD:8A:81:D7:37:61:21
Authority key identifier: C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75
Certificate issuer:       /CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
Certificate serial:       3A7F63FCBFBAE988589E20150F0345B90CDDD51B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.mft
Manifest number:          43
Signing time:             Fri 24 May 2024 03:02:09 +0000
Manifest this update:     Fri 24 May 2024 02:57:09 +0000
Manifest next update:     Sat 25 May 2024 05:17:09 +0000
Files and hashes:         1: 3133382e39372e3232342e302f32322d3232203d3e20323634323038.roa (hash: phc6b7jx5qWyyAbtB5J8rqlltFM57bRR7gTXlTgk2oQ=)
                          2: 3133382e39372e3232352e302f32342d3234203d3e20323634323038.roa (hash: 3HIqRDmH2Xy3A8a3BR9TPN925YYmEuA8KcdkwhT3ItE=)
                          3: 3133382e39372e3232342e302f32342d3234203d3e20323634323038.roa (hash: lENr4qB37/n5fRNMWfFm7SrldmgO38vPFLJ8uDgyB2Q=)
                          4: 3133382e39372e3232362e302f32332d3233203d3e20323634323038.roa (hash: GyCORLJZKkEQ0yf0hg2VhdAOemRxXm9e0+kRWqy+oLA=)
                          5: C7DC1B24AD54C5A941093FBA50F385A50A175975.crl (hash: D7931NsXbwKmSv3Z2/Q7Ce1/LPtIC6Z07+urIRU/Cp8=)
                          6: 3133382e39372e3232372e302f32342d3234203d3e20323634323038.roa (hash: nkPlN0Vv8CcmP5kYfiEjlGpyoaqkePn3dnm2Lbw8cBo=)
                          7: 3133382e39372e3232362e302f32342d3234203d3e20323634323038.roa (hash: tCYCyu9tmlOWtps7RQs1q/JYNlQgBVqslqdX1OuwFBU=)
                          8: 3133382e39372e3232342e302f32332d3233203d3e20323634323038.roa (hash: KI3HJkNBdKypMe/q4I03GNW/yZNT8uCBbOb6dzfojRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7f:63:fc:bf:ba:e9:88:58:9e:20:15:0f:03:45:b9:0c:dd:d5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
        Validity
            Not Before: May 24 02:57:09 2024 GMT
            Not After : May 25 05:17:09 2024 GMT
        Subject: CN=45FF8A0329139CA9F3FADBFF55AD8A81D7376121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:a6:00:bf:74:b7:4c:c7:03:49:7f:dd:4b:
                    59:6f:c3:8b:06:ff:c8:f5:2f:a7:7b:05:58:38:bf:
                    50:60:5d:91:8d:8c:c2:c8:39:71:49:f7:bf:1f:f4:
                    a4:9d:51:db:f5:a1:b7:71:86:a2:a2:79:15:50:d4:
                    91:18:22:fc:fe:e9:cc:5c:e4:60:9a:c4:11:96:c0:
                    46:e2:ec:6d:a7:50:6a:b6:eb:46:e5:35:f3:20:e2:
                    ca:83:a9:b6:f4:f8:3f:24:41:1f:7b:74:1c:5e:1e:
                    56:46:ab:43:71:86:c6:ed:9e:7e:00:71:4c:1d:d1:
                    17:a3:6a:fe:99:4e:0a:1c:2d:22:5e:97:90:66:b1:
                    9a:34:e1:20:5b:2c:c6:27:7a:39:4c:c7:44:1d:ab:
                    20:91:6a:0b:04:b1:27:12:34:d8:d9:6a:49:94:ed:
                    50:d6:83:cf:34:bf:12:10:35:17:74:df:ea:b9:90:
                    ba:65:91:57:ab:a6:fb:c1:50:2b:18:e5:0b:a8:19:
                    01:48:b7:82:35:f3:37:66:69:1a:d4:d3:c8:51:c2:
                    34:a0:14:09:07:77:96:21:85:44:3e:be:a1:5c:69:
                    00:41:16:1f:e3:37:13:2c:a1:cf:1c:e8:29:3b:10:
                    95:ed:36:85:d3:72:71:79:4e:fa:40:0f:45:df:ae:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:8A:03:29:13:9C:A9:F3:FA:DB:FF:55:AD:8A:81:D7:37:61:21
            X509v3 Authority Key Identifier:
                keyid:C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c2:50:df:0a:dd:2c:df:6e:d0:42:1a:b1:20:26:2a:f8:e5:
         bd:f7:d5:b5:e4:59:02:fd:2f:f8:38:77:04:df:9f:18:b0:e8:
         de:0e:a8:a4:19:4b:d5:f5:8f:ae:1e:2b:bb:bb:8b:07:b8:bb:
         da:80:82:7b:9f:38:38:aa:88:60:c7:2f:64:1e:37:da:3c:43:
         47:5c:cf:f5:bd:3e:38:49:9e:90:4c:54:48:0b:cb:1e:82:b2:
         5f:a3:55:a9:43:7f:e8:20:4a:5e:7b:2b:f9:4a:df:76:ef:e5:
         67:59:30:68:04:21:ae:fa:98:61:72:2d:6b:06:be:44:2c:33:
         64:50:55:11:46:d0:c6:fb:1d:f8:9a:ab:9d:f8:64:b1:70:5a:
         5b:db:b3:34:f2:41:16:17:68:d2:27:3c:e2:05:fb:a9:d2:b9:
         92:75:43:e1:d3:34:7e:a9:06:ed:0c:ce:ce:58:f2:3d:55:d9:
         6c:a3:2b:20:51:4b:83:7d:b3:8d:ee:bf:cf:fe:4e:73:78:d6:
         a8:91:b8:d1:a1:70:a4:70:29:8a:0a:1b:8d:be:dc:de:f7:e4:
         9f:3f:f7:47:27:e7:3d:1e:eb:61:b4:14:92:ff:87:4e:cf:7b:
         a3:06:1b:33:d7:57:9b:2b:75:c8:a5:c3:3a:04:14:fb:29:79:
         51:1f:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 18:26:13 2024 by rpki-client on console.sobornost.net