Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/72D1B347D7BE5A4B27B0A52D28552F7B647889B3.mft
File:                     72D1B347D7BE5A4B27B0A52D28552F7B647889B3.mft (raw, json)
Hash identifier:          GZQCazvadM3dYetSVUaDB3lgntuQ7fMoV0ytoB/n5II=
Subject key identifier:   A6:AF:98:9C:A2:B0:F6:00:97:A9:E3:7A:E5:E0:8B:B3:4A:F5:46:61
Authority key identifier: 72:D1:B3:47:D7:BE:5A:4B:27:B0:A5:2D:28:55:2F:7B:64:78:89:B3
Certificate issuer:       /CN=72D1B347D7BE5A4B27B0A52D28552F7B647889B3
Certificate serial:       0B723617565FD127FACFCA9B9A1A80BBCF84DC1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D1B347D7BE5A4B27B0A52D28552F7B647889B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/72D1B347D7BE5A4B27B0A52D28552F7B647889B3.mft
Manifest number:          05
Signing time:             Sat 25 Jan 2025 19:01:31 +0000
Manifest this update:     Sat 25 Jan 2025 18:56:31 +0000
Manifest next update:     Sun 26 Jan 2025 20:52:31 +0000
Files and hashes:         1: 72D1B347D7BE5A4B27B0A52D28552F7B647889B3.crl (hash: 1Crk8d45D3GnJvYH4O9gXQDTV1/RHjWcfl+gjml0Bxk=)
                          2: 323830343a363437383a3a2f33322d3334203d3e203533313233.roa (hash: RFAQGZFQAbslUyCaojqa/Os/Hdv+UxLyrfznV7WsKzg=)
                          3: 3138372e3131312e3230342e302f32322d3234203d3e203533313233.roa (hash: jkJmdQnvqroUnRfjY4g69/OHSDOpr/5DKnO5NhZrtrg=)
                          4: 3138372e3131312e3230302e302f32322d3234203d3e203533313233.roa (hash: ZxdHo1UnmHoBsy8tX+7IyLgesYtotgRz8eaNZol6vBo=)
                          5: 3138372e3131312e3139322e302f32312d3234203d3e203533313233.roa (hash: uaoF/V/QsiEi8cW9cTxaQ0oDXB4MK28J+YX1eil5RHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:72:36:17:56:5f:d1:27:fa:cf:ca:9b:9a:1a:80:bb:cf:84:dc:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1B347D7BE5A4B27B0A52D28552F7B647889B3
        Validity
            Not Before: Jan 25 18:56:31 2025 GMT
            Not After : Jan 26 20:52:31 2025 GMT
        Subject: CN=A6AF989CA2B0F60097A9E37AE5E08BB34AF54661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:bd:0c:1e:f8:d3:5c:28:f9:5a:be:0d:0d:
                    91:bb:a3:57:f5:73:c9:fe:5e:6f:ea:4a:1d:7a:f9:
                    af:59:c0:0d:2e:74:3e:be:22:37:8d:e9:1e:40:68:
                    95:47:a7:39:b5:6f:f5:c4:a2:3e:37:a6:a1:ca:a1:
                    40:23:44:b0:e1:db:1f:ac:b2:39:c1:cf:48:47:2c:
                    a6:ef:e8:c4:4d:1f:f9:54:aa:14:e6:62:18:d1:be:
                    5c:3f:71:d5:3b:c7:26:b1:0a:0b:b4:e5:d9:9d:cd:
                    58:c7:4b:eb:1d:59:d8:bb:ca:84:72:95:f9:96:a6:
                    c4:b2:86:d5:ae:6f:ad:78:0a:4d:2c:d5:4e:f5:92:
                    88:1d:d2:4d:6e:26:54:91:b9:5d:11:ec:c6:ed:a2:
                    97:59:77:dd:6e:68:74:fd:ef:a1:b7:24:c1:44:29:
                    96:af:dd:1b:c4:8e:a7:93:10:c9:21:66:17:66:27:
                    39:5f:fc:50:c3:b5:71:67:29:5f:27:e5:c8:83:08:
                    41:d1:3a:35:f4:15:33:44:6b:67:eb:3a:97:95:a1:
                    ff:ed:c3:88:12:80:4f:e2:6a:67:24:f5:15:3a:d9:
                    fe:e9:17:fa:aa:c8:d8:d3:a3:4b:10:be:19:c0:3a:
                    d5:e9:9d:c9:17:b9:02:55:06:9f:66:64:5f:42:7f:
                    85:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AF:98:9C:A2:B0:F6:00:97:A9:E3:7A:E5:E0:8B:B3:4A:F5:46:61
            X509v3 Authority Key Identifier:
                keyid:72:D1:B3:47:D7:BE:5A:4B:27:B0:A5:2D:28:55:2F:7B:64:78:89:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/72D1B347D7BE5A4B27B0A52D28552F7B647889B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D1B347D7BE5A4B27B0A52D28552F7B647889B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/72D1B347D7BE5A4B27B0A52D28552F7B647889B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:0c:9a:7b:67:f5:bc:b4:83:d4:4b:b4:ed:01:98:ff:0b:
         b4:79:7d:08:13:ec:64:b5:00:76:19:9b:f0:86:d4:2a:93:a6:
         91:47:3a:48:1f:20:54:ad:d7:a5:f7:66:26:24:56:99:2d:b2:
         af:3b:d9:46:28:ae:61:c2:f0:8b:ff:48:dc:7a:c2:d8:c9:71:
         f5:35:75:4b:1f:88:b2:23:dd:72:0d:95:47:49:ff:9f:68:91:
         9b:d3:03:c2:4a:72:6d:1e:d8:81:cf:b4:e1:cd:7e:06:83:d8:
         84:d9:d4:d0:bd:5a:24:fa:78:6b:e1:5a:0b:51:8b:b8:0b:3a:
         25:fb:c9:1e:df:e0:91:0c:d2:8b:f9:b3:23:55:23:1b:a0:57:
         06:a2:92:8e:61:3c:76:1e:bd:b3:be:39:e2:ff:0c:84:7c:78:
         e5:4a:d9:58:9f:0c:a7:b5:0f:c2:16:58:f3:63:c0:e9:7f:a7:
         04:4f:cb:eb:f0:72:bb:4c:d2:07:3b:91:ac:67:ab:89:ab:17:
         20:f1:a0:bc:de:09:cc:76:8c:8e:9d:38:5a:2a:c1:b5:3e:8a:
         d8:8e:95:ca:6c:2e:46:03:99:42:e9:cd:6e:2d:2e:52:16:1c:
         a8:28:12:db:ee:6d:8e:d7:8c:a8:a7:59:c0:9b:74:77:15:26:
         8d:c1:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 30 01:38:42 2025 by rpki-client on console.sobornost.net