Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.mft
File:                     A3948DF92873B3152952F292409AE5A8EE92371C.mft (raw, json)
Hash identifier:          GaxzUNGOef3z14mLnGua7UWpxp1VQ4fCH4eZyWR+B9s=
Subject key identifier:   1A:27:38:CD:D9:5A:D4:88:70:F6:0F:5F:D2:C0:63:13:94:3F:D5:BD
Authority key identifier: A3:94:8D:F9:28:73:B3:15:29:52:F2:92:40:9A:E5:A8:EE:92:37:1C
Certificate issuer:       /CN=A3948DF92873B3152952F292409AE5A8EE92371C
Certificate serial:       2490D84557739D252408EFBFDF3C1F321912804A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3948DF92873B3152952F292409AE5A8EE92371C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.mft
Manifest number:          64
Signing time:             Tue 04 Jul 2023 12:13:56 +0000
Manifest this update:     Tue 04 Jul 2023 12:08:56 +0000
Manifest next update:     Wed 05 Jul 2023 15:42:56 +0000
Files and hashes:         1: 34352e3138352e39362e302f32332d3233203d3e20323639333732.roa (hash: dzVqqRwnNw1tsFiL+CJLi4SAgbbb/xkXI1aZNlyGLrg=)
                          2: 323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa (hash: yaefXwDZN4t98adgnmq0ujC3XYQebYHwD68n3C3QErk=)
                          3: A3948DF92873B3152952F292409AE5A8EE92371C.crl (hash: fc4gb77ya6Px0sRAraElItUJ3Z3sJuFCwfcINYkNodc=)
                          4: 34352e3138352e39392e302f32342d3234203d3e20323639333732.roa (hash: Kn5lsE7l1Ft6dD9ioTGdaKvQ46GWT9jP5SB99pLe3yU=)
                          5: 34352e3138352e39362e302f32342d3234203d3e20323639333732.roa (hash: duP/6nY/46ZfDg4TAWdbkgnpE8ixiynyFiN6nWLLhYE=)
                          6: 34352e3138352e39382e302f32342d3234203d3e20323639333732.roa (hash: SZvrYzyp7SpJT5sQ5QGyef38JegzrQ9VbWJq37SsHR8=)
                          7: 323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa (hash: W4AAqnSEVkE5WnReIus+QYTZWe+lruHKG8CwRKq/G2o=)
                          8: 34352e3138352e39372e302f32342d3234203d3e20323639333732.roa (hash: LSDMxTKsvIV+uCexwMVfFz7+zppW2K2mX4/zyPuqbJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:90:d8:45:57:73:9d:25:24:08:ef:bf:df:3c:1f:32:19:12:80:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3948DF92873B3152952F292409AE5A8EE92371C
        Validity
            Not Before: Jul  4 12:08:56 2023 GMT
            Not After : Jul  5 15:42:56 2023 GMT
        Subject: CN=1A2738CDD95AD48870F60F5FD2C06313943FD5BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:ef:30:99:dd:c4:fb:f1:63:ee:03:40:4a:
                    46:72:b6:4d:3e:85:bc:4f:1e:09:d8:46:95:f4:80:
                    0b:22:55:1d:34:47:f1:b9:04:a1:2f:1e:d4:78:d1:
                    2d:33:d0:2b:25:d9:4e:79:3f:50:91:93:50:c3:be:
                    5d:d4:08:0d:cd:1c:99:2b:15:70:66:a6:a7:f4:ed:
                    fb:42:49:9d:51:aa:6b:ec:a0:29:78:81:ec:06:92:
                    be:e1:92:42:af:3f:d4:a9:a6:f5:94:dc:9b:da:fd:
                    ab:1c:ec:c5:9e:e5:a9:8e:ea:4a:85:95:03:a3:fd:
                    40:b6:f5:ba:c6:74:68:23:46:1d:92:f3:26:19:68:
                    5c:1b:7e:c5:05:ad:72:ef:38:7d:77:10:3d:72:20:
                    bc:06:4a:ba:12:ba:7b:ef:7b:97:cd:57:be:39:75:
                    fb:45:c0:00:8e:f6:55:88:a2:9e:68:51:a9:72:06:
                    18:07:be:a3:2c:36:55:d6:2c:f2:25:fd:48:68:5d:
                    92:85:e1:a0:7f:3a:5e:c9:f3:51:a7:39:bd:7c:ed:
                    31:d4:96:0f:a7:66:c0:03:f8:41:70:07:30:7e:32:
                    83:22:80:36:cd:db:af:53:69:fe:75:66:fa:c9:63:
                    34:5b:a5:4f:82:1b:9b:40:e5:ad:d0:b6:66:79:03:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:27:38:CD:D9:5A:D4:88:70:F6:0F:5F:D2:C0:63:13:94:3F:D5:BD
            X509v3 Authority Key Identifier:
                keyid:A3:94:8D:F9:28:73:B3:15:29:52:F2:92:40:9A:E5:A8:EE:92:37:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3948DF92873B3152952F292409AE5A8EE92371C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:95:6c:41:09:6e:59:9b:58:e5:80:2e:9d:67:f4:b5:9b:
         de:20:92:18:bc:f9:27:a1:41:24:f9:3a:56:5f:8f:a2:1d:11:
         66:26:f9:d1:e9:87:8d:18:09:3b:ed:ad:08:ae:e4:0c:16:a3:
         f6:fc:df:da:38:54:c7:63:62:08:db:6a:17:04:0c:55:75:ff:
         34:53:e5:14:6c:42:4a:99:6f:40:82:a8:af:dc:b1:3f:56:f3:
         4a:aa:bb:c2:1e:e9:07:33:82:f4:d9:a8:62:1c:30:80:6a:40:
         d5:0c:29:c4:df:83:21:c1:d7:ab:f0:e7:33:f2:0c:05:f0:ab:
         b3:b5:04:59:47:b7:fe:ae:66:46:11:7f:67:08:2f:d4:3a:7e:
         6a:93:47:4c:79:2f:6e:65:0e:6f:5c:5f:45:ce:43:db:72:8e:
         90:52:a1:a3:c0:76:e6:e2:d3:d3:d2:12:03:4a:77:93:48:02:
         26:2f:37:72:26:98:4f:99:f7:90:6d:18:e0:87:50:5e:8d:cc:
         b0:41:4a:1f:e0:eb:ed:e7:a6:4f:d2:53:ca:da:66:00:60:4a:
         e3:f7:c1:35:95:c7:6b:74:4f:af:33:ac:2c:8e:3d:a1:ee:4b:
         38:3a:b5:57:18:29:48:c5:6a:e4:ec:d9:6c:a0:c5:4f:d7:9d:
         67:a4:74:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net