Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/1/5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.mft
File:                     5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.mft (raw, json)
Hash identifier:          qRCcaIeROAOXlry471n5cHBANd8Pavj8ComGgF949P8=
Subject key identifier:   32:CE:CC:EB:46:50:B4:1D:C2:11:11:03:E0:CC:FE:1C:6D:73:F1:1C
Authority key identifier: 57:84:F5:F6:D8:2B:E2:B6:C9:5B:70:93:85:B7:10:FE:5D:1E:F0:B9
Certificate issuer:       /CN=5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9
Certificate serial:       549297FCD9DBFE07DA587289CF15BBE921D9B7DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/1/5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.mft
Manifest number:          CC
Signing time:             Tue 03 Sep 2024 12:01:32 +0000
Manifest this update:     Tue 03 Sep 2024 11:56:32 +0000
Manifest next update:     Wed 04 Sep 2024 16:00:32 +0000
Files and hashes:         1: 34352e3137302e38302e302f32322d3234203d3e20323632373835.roa (hash: s+m1V0dmRvaiq3jsPSvZKccbY+STdHLHTrMrLCUaKKQ=)
                          2: 323830343a326266343a3a2f33322d3438203d3e20323632373835.roa (hash: +0M611Vv5RZkt1ErB1fGZRPyf7PUnVSOo/ETEgh2Q34=)
                          3: 3136372e3235302e382e302f32322d3234203d3e20323632373835.roa (hash: RQ7uUPvURu7ufMkZ5iy0HE2nEPMpYeov+u590yjpR+c=)
                          4: 323830343a353962303a3a2f33322d3438203d3e20323632373835.roa (hash: V8RpcI+PEitngq1/U6nDackP8Dg7WSia9WVxm2KF1IE=)
                          5: 3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa (hash: b/8QbQi5t36PX0oXuFXZAyp/FPWySjOoiL68f86pAsM=)
                          6: 3230312e36322e34382e302f32302d3234203d3e20323632373835.roa (hash: oHNP5Ffi7wtDH+dRRKHvzPz5ak4mv05Zewgz9sULlI0=)
                          7: 5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.crl (hash: Su+q8bpXW8IIhvkDVNgtOfqGgM37kQt/x1yziqx+xms=)
                          8: 3230312e37312e33322e302f32302d3234203d3e20323632373835.roa (hash: IfLWgzYKkqgv3h3PEWTERmIypkGDIMp4Y3udkEs5OJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:92:97:fc:d9:db:fe:07:da:58:72:89:cf:15:bb:e9:21:d9:b7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9
        Validity
            Not Before: Sep  3 11:56:32 2024 GMT
            Not After : Sep  4 16:00:32 2024 GMT
        Subject: CN=32CECCEB4650B41DC2111103E0CCFE1C6D73F11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:f0:ad:fb:90:0f:a2:d5:59:89:fb:b2:f1:
                    ef:5f:4e:32:70:e0:55:bf:9f:0d:af:cb:74:25:20:
                    e6:6d:b4:16:08:ec:da:c7:97:65:dc:9e:72:6c:00:
                    1e:e2:62:7a:60:ae:d8:81:a1:68:f5:79:5a:c6:5b:
                    01:b1:a8:01:3d:d6:a0:cc:8a:7f:d7:67:91:82:f0:
                    b0:af:b7:92:cc:f6:32:4e:c3:4b:b8:ab:2f:2e:6c:
                    aa:02:b9:14:82:00:20:e6:96:30:b0:1e:a9:96:ea:
                    c2:b4:62:6f:a0:e1:3b:88:d0:26:e1:cb:c1:d4:28:
                    42:e4:fc:c1:e2:56:04:ff:b8:31:25:cf:af:41:00:
                    cb:87:e1:9c:ec:74:7d:3b:7a:0e:26:3e:26:bc:91:
                    7a:1b:42:50:f9:af:2c:1d:55:5b:ca:9b:19:f6:1c:
                    d8:c2:05:14:8e:1c:21:e9:ab:9d:43:6b:ae:aa:bf:
                    03:dd:41:c8:5d:fa:38:80:f1:db:ab:d8:ee:75:eb:
                    12:04:5b:00:9a:ce:86:be:a6:21:70:9f:d5:3f:57:
                    29:e6:c1:8d:2d:9f:05:0b:a1:bb:77:22:a5:19:85:
                    31:6a:b6:4c:e9:de:cb:71:a2:93:8f:61:40:ad:e1:
                    bd:c3:6c:04:16:e9:e8:5c:27:bb:cc:8d:32:66:fb:
                    98:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CE:CC:EB:46:50:B4:1D:C2:11:11:03:E0:CC:FE:1C:6D:73:F1:1C
            X509v3 Authority Key Identifier:
                keyid:57:84:F5:F6:D8:2B:E2:B6:C9:5B:70:93:85:B7:10:FE:5D:1E:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/1/5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/1/5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:90:14:85:0c:44:fb:ec:d7:f1:cc:66:f4:40:87:2e:ad:
         84:98:c7:0f:77:d0:1b:0c:db:32:fb:de:1c:bc:24:48:d7:4c:
         af:ac:a8:e0:91:ca:5f:13:07:fc:60:db:1c:d1:65:74:a0:26:
         00:56:e2:91:d3:fc:2e:3d:77:09:71:23:16:fa:f7:ca:59:cd:
         d7:cc:68:cb:2a:67:ce:0e:14:e2:1c:8c:fa:ee:fa:8e:cb:b9:
         75:2b:cc:9f:c3:02:5d:34:63:d5:ab:ab:bc:73:9f:dd:29:51:
         bc:3d:06:7d:9f:1d:5c:b6:82:2e:f6:23:cc:ca:32:8d:b3:ac:
         3a:7f:28:7b:4f:7b:e0:3d:89:37:e2:b3:2e:47:f9:b1:83:a7:
         d2:81:6b:2e:09:3c:8c:29:05:6a:dd:a8:de:27:b3:09:bf:a6:
         1b:64:68:a8:4d:5f:23:e5:7f:5c:7d:d1:12:ec:f9:99:7c:7c:
         5b:0a:40:37:3b:87:01:c2:d2:96:33:ca:c4:a8:b9:1d:7b:5d:
         01:a1:e2:da:7e:f6:55:ba:16:21:3c:6f:87:80:70:25:5e:f9:
         ba:71:d6:02:79:5c:63:03:85:c2:00:00:77:86:b9:de:a4:df:
         70:f2:9e:23:7c:35:7b:a6:ca:de:c9:d9:ea:5a:f2:4d:a4:00:
         ed:f2:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 17:22:12 2024 by rpki-client on console.sobornost.net