Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.mft
File:                     DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.mft (raw, json)
Hash identifier:          lbJ49S6DR8z0PPXOJ6f0gUTBIl9p/yA2MqiNNRXtXWM=
Subject key identifier:   A4:08:E3:CF:83:65:2B:1E:91:32:27:E0:C5:3A:FC:A2:DE:AA:67:87
Authority key identifier: DD:21:3D:69:C1:AF:23:05:1E:81:F0:B9:E6:C2:ED:BF:7B:C2:3B:73
Certificate issuer:       /CN=DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73
Certificate serial:       258D23C89D91DA1365C12D7E2AE182FD38447407
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.mft
Manifest number:          08
Signing time:             Fri 01 Nov 2024 20:58:44 +0000
Manifest this update:     Fri 01 Nov 2024 20:53:44 +0000
Manifest next update:     Sat 02 Nov 2024 22:08:44 +0000
Files and hashes:         1: 323830343a333934343a383030303a3a2f33342d3334203d3e20323636303232.roa (hash: Cv1Nmcxb/2LRaWwzd1ZxWj/2O4nzEQSxpiqo3Z/RKOM=)
                          2: 3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa (hash: T+7mBshLtKdFu795K230xATYjCb2YSBreHTsbE/BsMk=)
                          3: 323830343a333934343a3a2f33322d3332203d3e20323636303232.roa (hash: QpIQMg+a3ZpW3C605XaJ5eZ5HULwJs6W7fqHUbUb28g=)
                          4: 3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa (hash: Z3OtjO3C+ATtcH6K4fQz5ibL0K3duiZ8PyeWubpTIhg=)
                          5: 3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa (hash: QvDIwyTuzxDE0QmAMXGwg4xube4d8OSu2GI6d5wgn3A=)
                          6: 323830343a333934343a633030303a3a2f33342d3334203d3e20323636303232.roa (hash: RWgX/Pa9tcA9Nt01cXnXc5HEokAmuGPUUPbLRcVfIUY=)
                          7: 3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa (hash: k0uBHzbQYiK4TScJg3zAOlgxhRc81d/wkZ2mIdZSOYE=)
                          8: 323830343a333934343a343030303a3a2f33342d3334203d3e20323636303232.roa (hash: lr8zfa9dONMd9z623WN+Amo1tVLvYCYeTcecY0e+PAM=)
                          9: DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.crl (hash: yr9VRST7xoZVawFJk6oKFjylVRcGrJHFOPJhL3fSSYY=)
                          10: 3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa (hash: I3IC905YDHTgLbj103aj57GZNFTc8bolmrAAh0UWBbY=)
                          11: 3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa (hash: JFgUTwncpJK0FaPkPqmjoEczXpyjf5sjuLZ8sc3IhXU=)
                          12: 3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa (hash: xF6hFr4ot6/uTRCAryQYiogwSI/ilS7dkmPMpn2k/1Q=)
                          13: 323830343a333934343a3a2f33342d3334203d3e20323636303232.roa (hash: PQ5VBX68sLJ5cBRF6jTEUysKhonx5E0DuwEu3PtWjNk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8d:23:c8:9d:91:da:13:65:c1:2d:7e:2a:e1:82:fd:38:44:74:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73
        Validity
            Not Before: Nov  1 20:53:44 2024 GMT
            Not After : Nov  2 22:08:44 2024 GMT
        Subject: CN=A408E3CF83652B1E913227E0C53AFCA2DEAA6787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:25:70:06:e6:03:d2:d0:74:4a:8e:0f:df:
                    75:b6:b2:ab:f0:0f:f6:b7:be:e4:22:71:82:57:d4:
                    41:c7:84:1b:c1:cf:32:b0:d2:d7:b5:d4:3d:8a:ed:
                    fb:65:5d:02:3e:29:33:5c:47:fc:bc:f5:d7:ae:84:
                    9f:e8:b5:f4:57:b6:02:af:21:fc:9d:73:df:30:01:
                    fb:25:67:1a:f1:d4:1e:3c:7e:a1:bd:bf:c1:65:4e:
                    cd:61:4c:e6:fc:60:c0:27:75:70:c9:a7:6c:59:33:
                    70:f0:15:d1:cc:72:b0:cc:08:0c:e0:8a:7b:e7:ec:
                    84:52:47:f0:b6:d1:48:b9:d5:5a:1e:62:31:92:08:
                    db:56:17:6f:c0:9b:5d:92:de:e8:e9:89:f7:da:40:
                    8f:fc:de:be:0e:99:67:d6:0b:87:be:db:4b:d1:1a:
                    cd:c3:7a:22:97:2c:6d:de:7a:14:a5:64:67:29:77:
                    a9:f7:39:38:c0:f1:de:44:1a:8b:73:b6:7a:86:d8:
                    11:50:fc:69:f2:b5:cc:65:42:70:56:49:56:f5:eb:
                    dc:a4:a0:f0:5a:89:c0:34:c7:4e:44:f9:84:ba:4d:
                    c4:c8:77:0a:96:bb:0a:8c:5c:89:96:39:a7:28:7d:
                    f0:00:87:4d:32:69:81:bc:1b:49:62:42:b0:56:cc:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:08:E3:CF:83:65:2B:1E:91:32:27:E0:C5:3A:FC:A2:DE:AA:67:87
            X509v3 Authority Key Identifier:
                keyid:DD:21:3D:69:C1:AF:23:05:1E:81:F0:B9:E6:C2:ED:BF:7B:C2:3B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/DD213D69C1AF23051E81F0B9E6C2EDBF7BC23B73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:24:83:26:07:ba:4a:4c:38:ab:d0:ef:5e:3e:4f:c6:11:
         6e:b9:1d:e4:a9:a3:c4:f2:2b:4f:67:ba:03:2b:43:8c:6e:3c:
         74:de:34:9e:d6:c4:90:1e:a5:2f:25:24:db:dd:64:54:d9:bf:
         b1:96:97:35:6e:a4:32:6e:bd:00:9f:46:86:3b:5a:a1:a1:a1:
         22:30:e8:c9:98:ac:aa:3c:4e:04:a5:28:32:c7:d8:5d:17:ba:
         80:9e:a6:0a:32:f2:29:29:3c:33:2b:04:8c:af:26:e0:72:18:
         b5:03:84:1f:8b:1f:ed:6c:28:5a:7c:e6:72:e3:02:5f:fc:c0:
         ef:aa:62:0d:08:13:1f:e4:68:3c:93:d2:9e:29:fa:a5:c5:05:
         4d:99:c0:84:1d:7b:36:60:df:e7:9f:38:42:ef:63:01:49:8e:
         b7:a4:6a:10:65:30:9c:f3:b9:66:29:40:8a:c0:6c:de:f1:3f:
         5a:97:79:c7:e9:63:08:95:9d:85:25:5c:68:39:6d:b5:18:ad:
         53:cb:3b:3e:19:09:c3:52:ac:2f:e4:37:01:85:fc:cb:d0:f0:
         5d:b6:98:76:00:a1:73:c0:f8:b6:8f:04:8d:f5:7f:6d:cc:5a:
         47:e7:0a:00:d2:b4:f6:f7:9a:05:53:4f:29:c0:82:12:52:01:
         4d:6f:ac:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:16 2024 by rpki-client on console.sobornost.net