Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/0/9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089.mft
File:                     9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089.mft (raw, json)
Hash identifier:          iS3rqzIlzh+25mjrRzAWnmNqQ95DSy5Dbl2/14Kz6OM=
Subject key identifier:   7E:5F:09:23:B8:95:B3:70:B3:A3:9E:EF:E4:1E:63:DD:A6:51:CC:DF
Authority key identifier: 9F:34:D0:64:3C:03:16:B9:F7:B3:8D:9C:CE:4C:9C:82:DF:21:B0:89
Certificate issuer:       /CN=9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089
Certificate serial:       1D531423EA2D756E916F2E7ACD3F87832E3CADE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/0/9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089.mft
Manifest number:          50
Signing time:             Tue 04 Apr 2023 20:09:27 +0000
Manifest this update:     Tue 04 Apr 2023 20:04:27 +0000
Manifest next update:     Wed 05 Apr 2023 22:19:27 +0000
Files and hashes:         1: 3137372e39312e3232382e302f32342d3234203d3e20323730383939.roa (hash: PJOj5MAtd49Ig9atQ35sj6TJBVZsW6QI3E3d+SI0mpw=)
                          2: 323830343a373332383a323030303a3a2f33362d3336203d3e20323730383939.roa (hash: frIH1mdZNBeQx2YBrW8FDm9+/aWPxEPqQwwZQ9ZAH2E=)
                          3: 3137372e39312e3232382e302f32332d3233203d3e20323730383939.roa (hash: evl9nyj9/dCTgWLfJFSjKvArYEAD7UejWrSHUt2e72Q=)
                          4: 323830343a373332383a3a2f33362d3336203d3e20323730383939.roa (hash: PJwqJv3cb5ThO4WEb2QYSbzHuyQ1pTnHNNx4zn45eUA=)
                          5: 9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089.crl (hash: 4l8JnGLQh/+9Hr5F9QjAHW8vJ3c9xRei+xj3g6ddl4A=)
                          6: 3137372e39312e3233312e302f32342d3234203d3e20323730383939.roa (hash: 4jx0/fzX++jA/9BDwCWFuBWfueWe6Er0qILRX2k8vF8=)
                          7: 323830343a373332383a313030303a3a2f33362d3336203d3e20323730383939.roa (hash: lF/+Aj9YDMqAr6zIQMzsyjzbXDUPfxONkxLOzwHv3Uk=)
                          8: 3137372e39312e3233302e302f32342d3234203d3e20323730383939.roa (hash: Ty76smS0n4MUvwKdjfQ446HLTCubomhm12lQ7McEIrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:53:14:23:ea:2d:75:6e:91:6f:2e:7a:cd:3f:87:83:2e:3c:ad:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089
        Validity
            Not Before: Apr  4 20:04:27 2023 GMT
            Not After : Apr  5 22:19:27 2023 GMT
        Subject: CN=7E5F0923B895B370B3A39EEFE41E63DDA651CCDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:c2:2c:a1:78:4d:bd:e8:1b:2b:0a:15:18:
                    36:86:11:fe:ae:12:1e:af:af:47:81:c4:40:85:77:
                    1c:f5:a4:37:6d:73:4b:b6:39:8d:56:69:9b:b3:1a:
                    79:5f:c5:d1:b8:83:0a:ce:3d:f6:61:d4:4e:32:95:
                    c4:5f:fa:89:4f:c7:52:e6:17:ac:36:bf:ec:19:45:
                    09:ec:d6:9b:6c:91:aa:45:63:51:1e:a9:54:ea:a7:
                    75:e9:5c:f1:b0:65:2d:01:91:3a:5e:02:62:3c:81:
                    f0:8e:f6:79:39:4e:f0:88:33:94:06:b4:a2:ae:b4:
                    da:86:cd:9b:66:a1:63:1a:f5:a9:fe:9f:fb:4a:0f:
                    95:c0:49:5b:64:f3:74:ba:08:1a:16:e9:53:9a:41:
                    16:85:fc:18:19:4b:24:de:f8:f6:73:73:4d:bd:cb:
                    9e:b0:5e:44:b1:34:fe:40:84:b7:5f:93:0d:a9:a2:
                    1c:56:3d:53:5a:8c:73:cb:41:15:e4:68:bc:b4:1c:
                    0f:bb:eb:73:29:62:48:e5:d4:44:8a:2d:14:b3:98:
                    f8:43:26:01:90:6e:38:14:b8:e2:0a:aa:fc:73:1b:
                    2e:8f:56:aa:aa:1b:87:32:58:20:62:af:f6:70:98:
                    37:df:2e:ba:1a:d2:a7:1c:89:f8:bf:ad:2b:2f:03:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5F:09:23:B8:95:B3:70:B3:A3:9E:EF:E4:1E:63:DD:A6:51:CC:DF
            X509v3 Authority Key Identifier:
                keyid:9F:34:D0:64:3C:03:16:B9:F7:B3:8D:9C:CE:4C:9C:82:DF:21:B0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/0/9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/0/9F34D0643C0316B9F7B38D9CCE4C9C82DF21B089.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:0b:ff:a1:65:b9:ce:fb:cc:83:e7:cb:81:c1:34:79:74:
         f0:64:58:cd:33:27:54:e9:a4:16:22:b0:46:df:b8:e2:63:44:
         3e:af:67:1b:61:12:72:40:14:2b:9d:69:28:fb:bd:98:90:d9:
         8e:b0:f5:93:c7:9b:64:4e:46:52:31:db:ce:ff:67:87:e1:fe:
         e6:4a:91:2c:29:71:57:59:62:a1:ff:40:ea:22:cb:6b:2a:b8:
         9c:84:27:82:aa:1a:31:8a:71:df:91:8d:a5:1d:16:af:e6:b9:
         a2:c2:c3:0a:12:1b:d2:e5:68:fd:80:4e:a0:7d:f3:42:0b:bb:
         71:25:4c:0d:1c:d9:71:54:aa:92:87:07:d1:6d:e6:b9:f4:db:
         78:f5:77:be:61:2f:24:d2:36:cc:29:9a:48:41:2c:6c:43:f0:
         5d:22:c2:b9:d6:c8:37:f0:b4:d1:45:eb:b1:6d:c2:fa:16:a9:
         4b:f2:0d:2a:ca:b0:ed:51:35:ca:2e:df:cc:20:80:54:d0:71:
         ce:4a:d1:8c:e6:58:16:f6:34:3e:72:7f:df:99:31:b8:04:1c:
         9a:31:3b:62:29:62:05:22:69:00:9f:38:d6:10:ea:1f:6d:52:
         c8:cd:39:f8:b1:d0:d8:36:26:ab:63:10:75:eb:b6:70:ea:ee:
         6b:40:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:38 2023 by rpki-client on console.sobornost.net