Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.mft
File:                     57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.mft (raw, json)
Hash identifier:          +dv2IEHfPtUkugiOErl6hRgB8uIt6Yc1b9MhFL7PKlo=
Subject key identifier:   0D:5F:F7:1C:E3:72:36:2D:93:23:91:0C:6B:FE:99:39:2B:76:E0:40
Authority key identifier: 57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65
Certificate issuer:       /CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
Certificate serial:       666CE7802737D3E7C033912283FEAD451823D8F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.mft
Manifest number:          02EC
Signing time:             Tue 09 Jan 2024 00:09:07 +0000
Manifest this update:     Tue 09 Jan 2024 00:04:07 +0000
Manifest next update:     Wed 10 Jan 2024 01:27:07 +0000
Files and hashes:         1: 57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.crl (hash: swfRtlAJdttGKqZGyNr12lVppb7BSuapf5XMmPlbLmk=)
                          2: 3138362e3231392e3235322e302f32342d3234203d3e203631373435.roa (hash: NucX6JE8INMiRMZnPT9GNUiuy6cRTSgfb9pMmm3G8XE=)
                          3: 3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa (hash: KXv5W+PP0T2DzhuxBhPfbMLjvX7Yc1UyZdp4ZJ5V9uI=)
                          4: 3138362e3231392e3234382e302f32322d3234203d3e203631373435.roa (hash: pXpgpc+1SQsT3ahVpvmCRpbt9lzOSgNWw3bDf6PyJFU=)
                          5: 3133312e37322e3135322e302f32322d3234203d3e203631373435.roa (hash: e/IaP+Z08yHfYb99p64NAaoCYzLpXVPMPLOFyuGux1s=)
                          6: 3138362e3231392e3235322e302f32332d3233203d3e203631373435.roa (hash: 6BBJMmq5FAmBUQUjfkz2oCdPfkAumxKtrfwK8zLymR8=)
                          7: 323830343a316262383a3a2f33322d3438203d3e203631373435.roa (hash: uwMZSv2gkmbcss8KjUSYvMMywcUC6kbXHV8zWyU9q6s=)
                          8: 3138362e3231392e3235342e302f32342d3234203d3e203631373435.roa (hash: Kth9TdAWTNr2l83gJtxMHF/NrH+vrTcRcwsQsyT2S4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6c:e7:80:27:37:d3:e7:c0:33:91:22:83:fe:ad:45:18:23:d8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
        Validity
            Not Before: Jan  9 00:04:07 2024 GMT
            Not After : Jan 10 01:27:07 2024 GMT
        Subject: CN=0D5FF71CE372362D9323910C6BFE99392B76E040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:86:a8:59:05:25:8d:e6:2f:94:69:9e:6d:
                    8f:9d:7d:2e:7a:89:31:d1:c1:fc:d9:32:f5:76:1c:
                    03:fb:37:12:b5:3e:fa:ca:5f:1f:c1:c3:b0:86:5c:
                    5c:6f:94:2e:40:15:f9:b8:ad:22:cc:f6:5b:86:3d:
                    dd:f0:41:69:dc:e0:c5:ae:5d:5b:d0:ec:8a:f2:a8:
                    05:8f:df:7f:0f:42:a2:77:3c:84:c7:5e:a9:bb:91:
                    2c:17:ff:89:95:bd:01:c3:58:7c:f8:13:27:ba:d4:
                    2d:f4:6f:81:86:26:e0:90:ff:e3:ec:9e:4a:40:23:
                    09:aa:18:ff:bb:78:db:3a:08:07:3f:a3:56:b4:ac:
                    02:94:47:bf:c0:a6:c1:3b:f0:ec:9c:66:c3:ef:3b:
                    7c:f0:0c:92:42:4b:15:f7:21:1c:9b:89:e7:22:ae:
                    a3:f2:44:c0:d1:62:55:a7:8e:e0:4a:2e:6e:39:54:
                    64:3f:6e:0a:62:08:d8:43:3c:0a:2d:24:7d:44:2d:
                    50:77:d1:6e:c8:43:93:2b:65:9d:35:5b:44:57:42:
                    59:7f:2b:37:25:fa:1f:17:e3:71:39:77:a4:8f:26:
                    c0:a6:81:87:24:77:08:3c:dd:8a:34:0e:8c:28:e2:
                    01:e3:be:d8:be:af:49:eb:cf:80:3a:7e:e1:ee:4f:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5F:F7:1C:E3:72:36:2D:93:23:91:0C:6B:FE:99:39:2B:76:E0:40
            X509v3 Authority Key Identifier:
                keyid:57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:32:15:57:9e:1d:f8:b3:93:90:4c:09:d7:92:ab:01:8c:
         60:3d:42:9b:46:64:9d:ad:a7:c1:c8:33:45:b5:e2:8a:35:f4:
         c2:e5:ab:5b:de:35:cc:87:e1:43:6d:a9:89:75:f9:d7:1e:21:
         2f:1b:18:0f:31:55:7c:bc:72:55:19:04:7e:ac:ed:83:c2:9c:
         1f:fa:45:92:c8:6a:7c:97:50:e6:83:88:2b:99:63:f8:82:44:
         cc:03:ca:c8:dc:ea:5b:ff:0c:9d:0d:ff:43:64:bf:bc:db:4c:
         27:9a:aa:2b:d1:25:fd:e0:d7:1d:50:de:8a:e9:52:d0:6a:c9:
         07:09:13:71:3b:c4:23:cb:65:e2:c9:6d:4b:d6:22:e7:45:66:
         3a:59:f8:66:98:64:83:1f:6a:ac:af:4a:eb:36:c7:4c:cf:8c:
         20:ff:96:cd:a4:d3:de:3b:c4:95:d0:6f:c6:54:0e:7f:dd:e3:
         34:d1:c5:31:4f:63:04:7a:c3:99:4f:d0:f0:e0:da:ea:6a:46:
         86:09:54:10:56:d7:32:d4:2b:6c:23:33:2e:72:74:1b:a4:e2:
         f1:b6:a1:69:20:5e:97:ad:dc:9b:5e:04:cb:e3:65:6e:bd:3c:
         fd:ce:98:e1:e7:cc:43:02:8b:45:20:eb:50:af:65:da:a4:0d:
         27:6f:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:58 2024 by rpki-client on console.sobornost.net