Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.mft
File:                     DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.mft (raw, json)
Hash identifier:          eiVGqb6/Vh/lhckp1eu33G/f0OIjt5qibZUFaXTYsJM=
Subject key identifier:   D5:5B:B0:ED:0D:8B:5E:98:D8:CD:E1:56:DA:74:F3:51:C6:25:4A:A4
Authority key identifier: DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Certificate issuer:       /CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
Certificate serial:       0FA4F6CAEC73DA2341CDFFE0BBC409950B955F3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.mft
Manifest number:          53
Signing time:             Tue 09 Jan 2024 07:18:32 +0000
Manifest this update:     Tue 09 Jan 2024 07:13:32 +0000
Manifest next update:     Wed 10 Jan 2024 09:06:32 +0000
Files and hashes:         1: 323830343a326236383a383030303a3a2f33332d3333203d3e20323635313532.roa (hash: O8geYIlsDKw9jXQGz1Ebzi68Qz6/K5Z1bc13So8yt9A=)
                          2: 3134332e3235352e3133342e302f32342d3234203d3e20323635313532.roa (hash: NksQC3N44lX57Ljkl0y9PGrwirTEmxoqu8fnibz4/1I=)
                          3: 323830343a326236383a3a2f33322d3332203d3e20323635313532.roa (hash: YjySDJ317zof3ysh25DM7A2QWqiFMuoqrn3dlYaDCvI=)
                          4: 3134332e3235352e3133322e302f32332d3233203d3e20323635313532.roa (hash: 7nM47Viq3H0pv9Qlt/yorw3cJA8piARy9on/giUF6dA=)
                          5: 323830343a326236383a3a2f33332d3333203d3e20323635313532.roa (hash: a0LQnEDZ/OuP4yAV9N2C7K+HUgVJje6B8m6GI/+7EKY=)
                          6: 3134332e3235352e3133322e302f32322d3232203d3e20323635313532.roa (hash: bt4LKcQs/Tu2RfIJRXdCDChNThXLVnkS8U7gMba42sA=)
                          7: 3134332e3235352e3133352e302f32342d3234203d3e20323635313532.roa (hash: AJNNnPg6DPXeJHbuzYlDaKdvmc/JhodyvbRU8hkGTF4=)
                          8: DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl (hash: XMDQHJQGo2/QVJSFGlukwcNXuB4D4Er9Oh18d1Dows8=)
                          9: 3134332e3235352e3133332e302f32342d3234203d3e20323635313532.roa (hash: BXFj21vcb9961klNJBjvTwJMpXbsH8nFW5i+GVGi5n8=)
                          10: 3134332e3235352e3133322e302f32342d3234203d3e20323635313532.roa (hash: EQdiw2kbmRotXsed/EBhEAakGPM3PxgidLLeeVgghz0=)
                          11: 3134332e3235352e3133342e302f32332d3233203d3e20323635313532.roa (hash: vyp69roB7LZmiC/s5qbqqpPQmhpAbBEu5ybuhl9W7ZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a4:f6:ca:ec:73:da:23:41:cd:ff:e0:bb:c4:09:95:0b:95:5f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Validity
            Not Before: Jan  9 07:13:32 2024 GMT
            Not After : Jan 10 09:06:32 2024 GMT
        Subject: CN=D55BB0ED0D8B5E98D8CDE156DA74F351C6254AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:c5:50:e2:6d:07:a1:47:0d:07:7c:e4:ac:
                    98:a5:7f:63:1b:c2:ca:46:15:6c:3b:4c:15:d4:67:
                    41:83:29:31:e8:43:44:0b:8d:f4:d0:02:47:1b:0f:
                    30:f2:53:aa:42:79:c4:64:be:45:5c:50:12:0b:0d:
                    40:26:3d:38:61:37:be:45:c6:f4:da:21:94:19:6c:
                    cc:8d:ea:0f:19:60:8e:47:49:50:07:6b:4f:5b:8a:
                    54:37:d4:6c:e4:4e:22:fd:36:fb:21:58:c4:95:5a:
                    93:c6:44:f3:45:55:86:1f:14:bb:cb:91:49:5d:b0:
                    cc:4a:fe:97:f8:53:b1:4b:1d:6b:19:e5:9a:03:c2:
                    51:d2:af:d1:6e:78:a3:d3:69:8c:ea:66:b5:fa:88:
                    0f:e4:68:90:2e:b1:ee:1c:62:8b:10:71:2d:33:16:
                    16:f7:20:7f:46:36:41:8c:ec:d7:3a:59:e9:76:77:
                    f8:cc:b8:23:fb:5c:b2:21:e2:a6:d2:c4:28:b7:ab:
                    ab:6f:b0:25:67:6f:ed:8e:0c:b6:9d:23:f8:5e:5a:
                    68:ce:0e:dd:e3:1e:7e:33:03:51:4b:d9:47:77:d4:
                    b3:67:c9:cf:be:a7:f0:11:52:10:1c:8e:d6:09:33:
                    10:a5:5c:f5:ac:d7:3c:36:c9:5b:04:a6:8f:a6:25:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5B:B0:ED:0D:8B:5E:98:D8:CD:E1:56:DA:74:F3:51:C6:25:4A:A4
            X509v3 Authority Key Identifier:
                keyid:DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f6:84:7d:da:cf:08:22:cc:6c:07:ac:8c:a1:d4:f3:ca:5a:
         8b:c4:11:44:14:48:28:06:ad:58:d0:62:6b:55:ff:f9:29:7c:
         f0:61:6a:39:cc:56:5c:eb:13:42:a5:29:b2:07:09:69:fe:a5:
         00:cb:fd:3b:e6:bf:d2:e7:86:77:e5:68:2c:96:ce:0a:07:cb:
         62:97:d4:32:da:ef:21:f8:c6:45:a6:f6:1c:54:fe:a3:66:6a:
         a7:20:b2:ab:c3:be:b3:0a:2b:08:28:9c:f7:85:13:20:db:02:
         ff:c5:71:d8:56:27:1c:78:d5:bd:f6:54:aa:a1:11:2a:7c:6c:
         5b:f5:68:35:48:1d:90:b6:79:bf:13:6b:e9:8f:b8:5c:d9:f9:
         7f:6c:42:e8:d0:20:e2:52:e8:e9:95:4c:6a:a5:f6:88:b8:23:
         66:2f:0d:3b:e4:37:c5:be:c6:e1:ea:0b:96:54:2b:4e:a0:7a:
         60:7a:a7:e8:fe:56:8b:9a:13:2e:36:5e:f8:78:6f:3e:46:27:
         87:20:9a:f4:31:33:12:05:36:4a:8e:6c:d8:92:fb:b6:b5:0b:
         98:17:6f:55:12:d7:fd:d5:b1:e2:be:82:7e:8e:8d:aa:23:c1:
         e6:fd:9e:c1:42:e7:76:4f:c0:ca:7e:2c:d7:70:59:38:54:18:
         95:1e:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:58 2024 by rpki-client on console.sobornost.net