Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995.mft
File:                     AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995.mft (raw, json)
Hash identifier:          GIKo1B5jdaU8OvwT2XRKu8ZXfOoSlaD+uXwgbKIJ8R4=
Subject key identifier:   3B:98:3A:53:28:DE:A0:E1:77:09:7B:70:2D:F9:CD:71:53:21:DD:16
Authority key identifier: AA:78:D0:FD:88:AD:C4:50:D5:FD:24:BC:4A:A4:34:9E:7B:7C:F9:95
Certificate issuer:       /CN=AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995
Certificate serial:       7DF79B3009B5D0FF864CD19F8CB38EEB03B4D9A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995.mft
Manifest number:          4D
Signing time:             Thu 18 Jul 2024 20:21:44 +0000
Manifest this update:     Thu 18 Jul 2024 20:16:44 +0000
Manifest next update:     Fri 19 Jul 2024 22:06:44 +0000
Files and hashes:         1: 323830343a386437633a3a2f33322d3438203d3e20323733333630.roa (hash: pB/oBKbrUFRYVYBB8oH2uv3rJtOZdAqWr+zzLLizZao=)
                          2: AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995.crl (hash: Kscy72NwvoC4io5o+7VBA1YS4frcDvOxb2teR8BpsTw=)
                          3: 3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa (hash: HBJn0FtvbpHUFyfjQ/OMVL2TEnGWtrr6X8Shx0s8SBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f7:9b:30:09:b5:d0:ff:86:4c:d1:9f:8c:b3:8e:eb:03:b4:d9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995
        Validity
            Not Before: Jul 18 20:16:44 2024 GMT
            Not After : Jul 19 22:06:44 2024 GMT
        Subject: CN=3B983A5328DEA0E177097B702DF9CD715321DD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:56:b6:f8:29:32:93:a3:89:f5:52:1a:0a:
                    d2:54:e2:0a:58:4b:91:87:91:50:fc:42:ef:d8:24:
                    a5:08:ea:ca:72:73:21:9f:a7:bc:ae:0f:ca:f1:eb:
                    54:08:51:10:d2:54:a0:04:1e:7e:d9:4f:10:cc:7c:
                    53:72:68:7c:a6:39:93:96:8e:15:45:1f:dd:27:21:
                    2f:8e:d2:19:9f:e1:83:7e:ed:18:b0:88:aa:7c:64:
                    5e:48:4e:96:f1:9b:6f:68:be:bb:6f:ad:e4:51:a4:
                    10:bd:2e:b4:c1:a8:70:4c:85:90:4a:03:3b:e1:bc:
                    6c:76:51:c5:d2:e4:28:e2:a2:64:bf:c2:a0:14:cc:
                    b5:e0:67:a7:56:36:0b:91:64:38:0c:96:5d:1d:58:
                    03:f1:dd:d5:8c:ff:5a:28:4c:7a:84:c0:bc:e6:93:
                    d1:d3:03:b7:09:1d:7d:08:c9:29:be:71:1b:c8:b3:
                    4a:94:48:4d:cc:81:55:21:81:8e:cb:94:49:e1:2b:
                    70:a4:12:fe:55:94:17:f2:d7:37:8e:25:39:e0:72:
                    24:5a:dd:f9:00:38:95:20:5a:87:49:bf:7b:b4:77:
                    92:fc:06:d0:62:03:46:de:14:0f:74:fb:ad:b9:e3:
                    7b:2b:86:1d:f0:d0:fa:fc:4e:8a:ac:65:4a:01:37:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:98:3A:53:28:DE:A0:E1:77:09:7B:70:2D:F9:CD:71:53:21:DD:16
            X509v3 Authority Key Identifier:
                keyid:AA:78:D0:FD:88:AD:C4:50:D5:FD:24:BC:4A:A4:34:9E:7B:7C:F9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/AA78D0FD88ADC450D5FD24BC4AA4349E7B7CF995.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:46:0c:f6:81:6d:4b:7b:09:04:cb:02:e0:23:d8:ea:83:c6:
         e2:9e:ed:45:c8:f3:44:52:72:cb:53:5f:0a:3a:47:12:f6:4f:
         58:eb:30:9a:83:7f:da:69:85:bd:92:bb:6a:d1:17:52:a9:96:
         db:8a:6f:ac:e5:fa:6d:df:d8:19:42:92:e4:50:1e:34:e5:85:
         eb:75:47:dd:74:a1:81:0e:20:91:1f:db:fe:69:33:95:49:a8:
         3b:76:77:9a:26:a8:81:21:c0:e5:26:8e:82:51:45:52:21:79:
         f0:37:4f:e0:3f:f8:2b:92:94:2e:98:76:60:78:f7:57:51:3f:
         4b:3e:4e:32:a4:9c:98:2f:1c:0d:02:2c:a4:51:86:aa:c0:80:
         c6:f0:80:58:32:e3:8b:f2:2e:9b:cc:7a:08:f0:18:74:6f:0f:
         15:e8:9b:56:d6:af:f1:45:00:f7:02:50:5a:af:89:2c:ba:36:
         4e:2c:b9:a4:ee:74:d2:54:cc:a0:cd:cf:e8:b2:d8:ce:32:8f:
         a3:7e:4b:4d:3d:9b:2f:5d:14:3a:36:8c:34:28:68:51:af:30:
         98:25:37:a9:ea:e2:d4:0e:49:f9:aa:16:c9:2c:89:e9:d8:cc:
         f7:7e:5d:92:d9:c3:df:8a:db:65:44:ee:20:f9:48:d2:06:d2:
         f8:b5:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net