Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/1/B3E0877EA01FC47D1413287823E5D2C81DA5955B.mft
File:                     B3E0877EA01FC47D1413287823E5D2C81DA5955B.mft (raw, json)
Hash identifier:          ipJbW9IXAVJgnObgEM/zHFGn9S7usZah9zx/r/0DPbo=
Subject key identifier:   12:88:83:24:A5:A2:72:E1:16:B5:2D:23:0E:FA:6C:C6:33:EF:F0:98
Authority key identifier: B3:E0:87:7E:A0:1F:C4:7D:14:13:28:78:23:E5:D2:C8:1D:A5:95:5B
Certificate issuer:       /CN=B3E0877EA01FC47D1413287823E5D2C81DA5955B
Certificate serial:       5AE568BD5EC9D9FC77A9BF2CB4F33D05B16D248F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E0877EA01FC47D1413287823E5D2C81DA5955B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/1/B3E0877EA01FC47D1413287823E5D2C81DA5955B.mft
Manifest number:          011B
Signing time:             Fri 01 Nov 2024 12:14:15 +0000
Manifest this update:     Fri 01 Nov 2024 12:09:15 +0000
Manifest next update:     Sat 02 Nov 2024 15:51:15 +0000
Files and hashes:         1: 323830343a323138633a3a2f33322d313238203d3e20323634353631.roa (hash: azEOGf7wGGeEjCuXTKvuoY5e6/6jVnsIx87JrorGXYQ=)
                          2: B3E0877EA01FC47D1413287823E5D2C81DA5955B.crl (hash: YQeWGKUUZnp29aZQ6QEU4CLJkEXhnSa7LSghd7pbuyQ=)
                          3: 3133382e302e3235322e302f32322d3332203d3e20323634353631.roa (hash: U0q4N9eQoGc/7g4R0p5/LsPAoMDXfbj8u3ggXe8910U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e5:68:bd:5e:c9:d9:fc:77:a9:bf:2c:b4:f3:3d:05:b1:6d:24:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E0877EA01FC47D1413287823E5D2C81DA5955B
        Validity
            Not Before: Nov  1 12:09:15 2024 GMT
            Not After : Nov  2 15:51:15 2024 GMT
        Subject: CN=12888324A5A272E116B52D230EFA6CC633EFF098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:3f:83:4f:05:a7:15:45:6d:df:63:bb:d0:
                    04:d7:50:e6:5e:7b:7d:8c:9f:82:fb:84:a1:18:d9:
                    c5:ea:9d:41:a6:98:b8:4a:88:c6:53:75:35:62:d2:
                    13:71:94:3c:cf:27:3c:0f:c2:0b:56:d3:05:5e:96:
                    49:98:15:60:b3:05:90:46:aa:0e:9c:c9:3c:00:f1:
                    a0:da:e2:51:a9:a0:74:e3:ef:2f:b2:83:52:2f:21:
                    52:b4:89:8f:07:ac:b4:a7:98:e1:e9:4a:84:16:45:
                    63:cb:69:ef:65:32:98:39:66:3b:ca:cd:f1:3b:48:
                    1b:36:e6:6b:7e:33:c8:55:ee:3d:f0:64:65:9e:c5:
                    69:f1:f2:88:f1:27:13:c7:da:64:ce:a3:ff:42:c3:
                    af:d6:64:96:49:1d:16:53:4b:f8:b7:a6:81:53:02:
                    68:c9:f6:7a:77:23:9b:49:b4:17:d1:11:77:74:99:
                    ce:8d:5d:63:4f:be:d0:17:79:79:24:75:bc:c6:7c:
                    75:a7:fc:24:70:d6:c2:bc:66:38:c8:04:e6:03:63:
                    10:0a:a7:73:15:24:29:43:13:ad:66:ef:c9:77:d0:
                    02:4f:ab:f7:aa:20:8f:59:8b:ef:92:f5:90:e6:c4:
                    5d:6a:be:fd:ab:4d:df:75:fa:20:f8:23:99:0f:3a:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:88:83:24:A5:A2:72:E1:16:B5:2D:23:0E:FA:6C:C6:33:EF:F0:98
            X509v3 Authority Key Identifier:
                keyid:B3:E0:87:7E:A0:1F:C4:7D:14:13:28:78:23:E5:D2:C8:1D:A5:95:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/1/B3E0877EA01FC47D1413287823E5D2C81DA5955B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E0877EA01FC47D1413287823E5D2C81DA5955B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/1/B3E0877EA01FC47D1413287823E5D2C81DA5955B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c2:80:3f:d1:98:ca:ff:9e:8f:39:6f:03:2d:a0:19:a7:e2:
         a6:96:25:ef:87:b8:4e:75:4c:a3:c6:68:86:8c:52:1b:3b:75:
         ff:2e:70:8d:71:7f:14:04:f1:5e:19:97:d5:ec:e9:80:b5:f2:
         e0:46:c4:09:95:42:f0:de:1f:c9:99:c0:03:db:04:06:fe:0c:
         97:07:a0:86:6c:a1:e2:ee:cf:b3:68:94:33:7b:b4:cd:74:cf:
         73:36:c8:33:ee:93:2e:1e:8e:47:d2:14:9b:7b:fc:ee:a8:4c:
         07:ea:4f:57:3e:4e:6d:e2:c7:3c:4e:ff:d1:8b:da:9b:4b:ad:
         28:a6:40:55:f3:a4:4b:11:a5:fd:02:62:83:5e:ff:cc:73:02:
         cd:f9:6a:3a:2d:f8:31:61:f6:b5:db:56:6f:d3:56:ed:c2:04:
         30:35:46:ea:e6:81:33:ce:22:e0:f5:55:7d:db:31:7d:b1:eb:
         a7:8a:a3:c1:35:b6:a3:b6:5f:50:c5:0b:4e:ba:8a:e4:67:bf:
         b7:4e:8d:98:92:8a:56:2a:74:71:83:25:eb:11:3c:e3:8d:0c:
         c9:8a:ae:ba:7c:03:e8:76:61:1d:80:89:57:1b:43:7e:b0:4d:
         71:bb:b7:81:1e:c9:e2:7d:3f:a7:9a:5b:b7:6b:67:2d:ee:99:
         36:87:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 22:02:11 2024 by rpki-client on console.sobornost.net