Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft
File:                     30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft (raw, json)
Hash identifier:          2A9OkwQAqVDvkeLOoUmHydW3apFdUDv4rP1W1f1PQ8s=
Subject key identifier:   00:46:BE:69:4D:D5:66:DD:91:10:AE:63:BC:94:10:A7:1A:A4:08:BE
Authority key identifier: 30:BB:88:BC:1F:4F:C8:5B:1F:7A:2E:DB:16:61:7D:87:C2:AB:67:13
Certificate issuer:       /CN=30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713
Certificate serial:       3035AA1319273AC8F85901AFEF44E720F0DFDF20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft
Manifest number:          8D
Signing time:             Mon 08 Jan 2024 22:21:49 +0000
Manifest this update:     Mon 08 Jan 2024 22:16:49 +0000
Manifest next update:     Wed 10 Jan 2024 00:13:49 +0000
Files and hashes:         1: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: oMIfY7KdesdOgaGqi+jwJCs3n3yQA791v/op8ZLfh24=)
                          2: 323830343a356161633a3a2f33322d3332203d3e20323638373838.roa (hash: CfvlxLLxde3TUfbT/l+f5JjYZmH8QcKPgeD5wLR45V4=)
                          3: 30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.crl (hash: 6SIOQUGGROCO1ouopjF0hIH6Tavz8ZvCl1UtnglaEZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:35:aa:13:19:27:3a:c8:f8:59:01:af:ef:44:e7:20:f0:df:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713
        Validity
            Not Before: Jan  8 22:16:49 2024 GMT
            Not After : Jan 10 00:13:49 2024 GMT
        Subject: CN=0046BE694DD566DD9110AE63BC9410A71AA408BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:54:da:15:ba:24:e6:8f:87:d2:f1:81:35:
                    be:79:f7:43:6b:59:89:2c:23:c4:4e:d5:84:a3:11:
                    ff:16:d0:3d:58:7c:fc:6d:42:e1:d7:c1:54:04:8a:
                    aa:3e:62:c2:25:75:c8:1a:fe:32:6f:e7:e4:8b:e0:
                    9e:8b:ce:74:68:28:ce:28:2f:50:a0:e2:04:30:37:
                    44:7a:90:ee:68:8b:03:db:cf:30:03:e2:22:9a:cf:
                    e6:c4:71:a2:28:2e:34:e9:2e:90:ac:5b:65:68:95:
                    dc:6a:04:ec:d9:67:ec:9b:0b:af:0e:de:dd:93:99:
                    67:19:8e:c2:1b:b7:57:a2:29:ab:c6:81:ed:99:ad:
                    d8:9b:86:a6:ea:a0:a7:fb:5e:34:8e:e4:74:54:a3:
                    8c:01:08:f4:5f:fa:e2:ce:79:40:04:ce:18:37:4b:
                    4f:33:c5:75:50:c0:59:9e:a0:54:8c:50:3f:06:dd:
                    24:e2:55:42:38:d6:f9:00:db:65:f5:ff:f0:37:22:
                    b9:88:21:15:a0:b5:14:51:b8:a2:13:72:3c:e1:e9:
                    a7:7b:b6:1b:50:7f:bc:e6:88:22:d2:f7:95:e3:91:
                    a4:d5:60:80:4f:9e:94:38:79:c5:2d:30:f3:16:e3:
                    29:8d:4b:ff:ca:49:8a:e3:27:10:06:e1:ff:94:2a:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:46:BE:69:4D:D5:66:DD:91:10:AE:63:BC:94:10:A7:1A:A4:08:BE
            X509v3 Authority Key Identifier:
                keyid:30:BB:88:BC:1F:4F:C8:5B:1F:7A:2E:DB:16:61:7D:87:C2:AB:67:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c4:f7:f7:65:82:df:5a:b2:45:01:ae:3a:37:42:07:77:8b:
         16:02:d0:37:9e:7c:83:1a:bb:8e:e3:b8:77:c5:d7:e4:04:b7:
         0f:35:10:ed:c2:b6:b5:dc:67:2d:2e:a2:2f:d7:02:5f:40:29:
         a1:46:bb:a1:5d:69:11:50:26:43:b9:75:5d:96:1c:f6:fe:60:
         31:eb:7c:88:dc:5f:fb:5e:7c:2a:5d:e3:25:fe:e5:8c:a6:1d:
         5d:9d:91:ac:7f:6e:a0:25:7e:ac:2e:bd:c3:d0:fe:2d:35:75:
         ad:f6:da:3e:c1:f8:a6:6e:5c:7a:53:66:a4:92:72:42:34:a1:
         99:98:df:0f:a2:b8:38:41:ae:f8:d6:1e:e6:24:6a:8b:0b:31:
         b0:e9:d2:57:d2:a4:86:69:6c:80:eb:46:92:99:b2:ff:8e:12:
         d5:d6:ac:90:16:90:af:97:f2:85:d1:0f:55:bc:69:fa:15:fc:
         a4:4e:41:69:92:c2:be:c1:da:a5:d0:49:37:5c:5a:e0:f0:c6:
         a6:8d:ac:7d:0b:80:0d:ee:c4:d0:34:f2:1b:5b:0b:cb:66:21:
         17:78:d7:94:7b:98:f4:2b:b6:3e:c2:de:0a:fc:e3:54:d4:c5:
         d4:ef:e7:62:3b:3d:28:9f:8b:9f:af:a1:89:50:a2:6c:62:c4:
         96:f2:40:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net