Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.mft
File:                     A7295431F9C859586A0B3D2EB4893FF4084176BD.mft (raw, json)
Hash identifier:          gA323FT8ajQUvipjOZK5BH8UPhrShkIFPCR80dVekfs=
Subject key identifier:   0E:FE:6A:5B:6F:90:97:40:C2:20:10:F1:A7:74:43:DC:B8:2B:BB:B9
Authority key identifier: A7:29:54:31:F9:C8:59:58:6A:0B:3D:2E:B4:89:3F:F4:08:41:76:BD
Certificate issuer:       /CN=A7295431F9C859586A0B3D2EB4893FF4084176BD
Certificate serial:       3BF2CFC9E41988C5D01CE6D8A172EF678F8DF44C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.mft
Manifest number:          8F
Signing time:             Thu 18 Jul 2024 13:45:17 +0000
Manifest this update:     Thu 18 Jul 2024 13:40:17 +0000
Manifest next update:     Fri 19 Jul 2024 16:39:17 +0000
Files and hashes:         1: A7295431F9C859586A0B3D2EB4893FF4084176BD.crl (hash: yRf7fZevZYMvzkFUKJlGa9UFK7Jc1H+LiaBOxi8Auyo=)
                          2: 3230302e33392e3134302e302f32322d3332203d3e20323730373736.roa (hash: /0I0gB5sx3m3/a34AScwbDtZFdfiGknoi/G/eC9l5hc=)
                          3: 323830343a373133633a3a2f33322d313238203d3e20323730373736.roa (hash: kNiyvBCmzJVYa44PQcljX9+cr1x+eyDDf2HZ06QvTDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f2:cf:c9:e4:19:88:c5:d0:1c:e6:d8:a1:72:ef:67:8f:8d:f4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7295431F9C859586A0B3D2EB4893FF4084176BD
        Validity
            Not Before: Jul 18 13:40:17 2024 GMT
            Not After : Jul 19 16:39:17 2024 GMT
        Subject: CN=0EFE6A5B6F909740C22010F1A77443DCB82BBBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:3d:3f:b2:68:a6:37:80:83:08:96:7c:9d:
                    8b:21:7c:f9:d9:05:07:53:ab:f5:67:8c:a8:54:d8:
                    55:3b:cf:e8:53:e0:23:6f:c2:f4:da:c5:73:a9:a5:
                    15:5c:be:c2:27:b5:53:22:4e:49:45:f0:b1:33:c1:
                    3a:51:5a:97:74:aa:48:93:f0:eb:1b:21:28:1c:35:
                    dc:6a:24:76:75:3c:15:80:29:c6:14:b5:8e:2d:ef:
                    14:b1:d1:7a:a7:ee:12:04:27:7e:e1:39:c7:ec:24:
                    f8:23:86:5f:d1:89:4b:f7:d3:83:22:6a:47:92:fa:
                    35:b7:13:63:ea:f0:1b:57:85:61:71:01:79:cf:9c:
                    4b:86:83:b3:b5:86:8d:3f:c0:ed:1d:f1:64:bf:a3:
                    07:f7:2f:b6:43:d1:01:6a:ae:b3:71:17:1e:c8:5c:
                    3c:0e:97:08:50:ed:3f:c2:2c:44:55:7c:de:c7:0e:
                    67:db:f3:86:9a:65:00:54:62:8d:d3:ab:31:83:ac:
                    7c:61:75:12:4e:63:22:c8:90:db:9c:73:c0:3d:c7:
                    50:cf:88:aa:25:57:84:e7:48:9b:4c:71:36:04:05:
                    09:eb:82:98:1e:5b:7b:a1:4e:32:24:64:fe:67:b7:
                    93:e2:04:0b:94:aa:3f:10:98:73:15:af:46:26:f9:
                    e2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FE:6A:5B:6F:90:97:40:C2:20:10:F1:A7:74:43:DC:B8:2B:BB:B9
            X509v3 Authority Key Identifier:
                keyid:A7:29:54:31:F9:C8:59:58:6A:0B:3D:2E:B4:89:3F:F4:08:41:76:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/1/A7295431F9C859586A0B3D2EB4893FF4084176BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4e:40:20:93:af:73:2f:54:23:2e:22:17:57:97:03:82:37:
         e6:24:b9:60:63:79:48:dc:ec:c0:2b:40:e0:23:a6:fb:d0:8f:
         3c:81:39:20:b7:93:07:b5:be:6e:8d:f5:cb:d2:c5:79:46:8b:
         3d:9e:ce:81:e6:e3:9d:ec:51:79:11:ee:5b:d1:70:63:b9:b3:
         70:b9:85:31:23:93:08:8c:bb:57:18:1d:ae:84:e8:09:f4:fa:
         d0:ac:7a:0f:dc:0b:df:88:f2:da:22:b8:3f:51:6e:a1:f1:83:
         d1:71:8c:29:db:b4:12:da:80:9f:ec:c5:96:8f:7d:c4:0e:5b:
         d9:31:92:9c:2a:64:79:20:0e:00:7b:a9:81:7f:f3:d5:74:7b:
         20:ed:a5:0a:9d:02:44:1d:5e:5f:7d:53:d3:53:28:69:fe:64:
         31:4e:06:49:9a:59:92:78:3d:9f:98:67:94:29:90:dd:d6:72:
         a0:75:85:fc:0b:f1:88:88:f7:26:59:48:47:91:35:2e:26:ba:
         93:3c:50:e4:79:27:14:72:3f:60:d3:05:08:61:3a:33:f7:03:
         5c:a3:42:1d:d3:5f:4a:40:cb:eb:7e:66:60:a4:26:5f:f3:c7:
         3b:fe:ed:5d:c1:be:a1:3b:f7:3e:da:db:2e:6d:1d:d9:0e:cb:
         d3:e4:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 10:19:39 2024 by rpki-client on console.sobornost.net