Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/8E675512B33F4E853DE8C25225A7AC2E55AAB792.mft
File:                     8E675512B33F4E853DE8C25225A7AC2E55AAB792.mft (raw, json)
Hash identifier:          U8o9ERJZbPWEiIQfBwt6aFz6z8ZfAHXmyX/pIoasNSQ=
Subject key identifier:   F0:88:EC:3E:0E:65:C4:C6:20:64:8E:87:50:80:F7:9A:BC:7B:AA:95
Authority key identifier: 8E:67:55:12:B3:3F:4E:85:3D:E8:C2:52:25:A7:AC:2E:55:AA:B7:92
Certificate issuer:       /CN=8E675512B33F4E853DE8C25225A7AC2E55AAB792
Certificate serial:       4570F5DA01270D17C647236FB40F92DE9F5EC9D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E675512B33F4E853DE8C25225A7AC2E55AAB792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/8E675512B33F4E853DE8C25225A7AC2E55AAB792.mft
Manifest number:          33
Signing time:             Mon 08 Jan 2024 22:56:25 +0000
Manifest this update:     Mon 08 Jan 2024 22:51:25 +0000
Manifest next update:     Wed 10 Jan 2024 02:15:25 +0000
Files and hashes:         1: 323830343a363838343a3a2f33322d3332203d3e20323639363938.roa (hash: weyPNxS/5nNRdw5Ov0LHRRhRdrD7MLVqeg7/BJlH3Hc=)
                          2: 323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (hash: iMu/p7d6P4T17kQF0AcQHOgKaIoMWOlrGlkenwGe5uA=)
                          3: 34352e3139312e382e302f32322d3234203d3e20323639363938.roa (hash: 0YtVS92a5KBBxe8dK325X5ONzToBh6JYMmvhkfc7rO4=)
                          4: 8E675512B33F4E853DE8C25225A7AC2E55AAB792.crl (hash: tgFsEs9PI/aOxajY4LwKRUGHakQjM0Uazi+fOScVv3Q=)
                          5: 323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (hash: UowVEYkypgxod26iJFwo576untwYnoDd8lmuBqfu25k=)
                          6: 323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa (hash: X4v4ILD/k2SPE/m28TIj2HI7g9nRplYDfoF1Eqx8xXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:70:f5:da:01:27:0d:17:c6:47:23:6f:b4:0f:92:de:9f:5e:c9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E675512B33F4E853DE8C25225A7AC2E55AAB792
        Validity
            Not Before: Jan  8 22:51:25 2024 GMT
            Not After : Jan 10 02:15:25 2024 GMT
        Subject: CN=F088EC3E0E65C4C620648E875080F79ABC7BAA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:33:a6:94:4c:a8:a2:45:53:fc:00:1c:1c:
                    e7:75:09:44:af:6a:0f:2e:32:2b:73:7c:c6:2e:58:
                    b7:cb:58:69:51:cb:2e:df:98:4e:be:2b:9d:d6:ce:
                    62:04:39:d5:da:92:37:a0:a2:0c:9c:88:c0:98:b1:
                    61:f8:16:3e:b0:01:e9:89:b8:80:ce:46:ef:48:e4:
                    46:e1:27:f6:dd:9a:81:ed:81:b7:39:2b:db:86:91:
                    9d:a2:9c:78:0a:8f:c1:c6:ac:82:f6:6e:c0:ca:3d:
                    81:09:c4:50:2d:7b:52:69:14:93:dc:ca:03:fe:4b:
                    9c:f4:14:c4:50:6e:b7:32:fa:19:2e:14:fc:51:4b:
                    5c:53:f6:58:b5:b1:21:35:42:15:f1:fe:99:ce:41:
                    ba:e0:ba:4b:fc:4a:24:7a:a8:1b:bd:1a:39:fb:0f:
                    fd:81:5d:9a:8a:85:79:31:ef:a5:cf:ad:2f:f4:42:
                    0d:0d:9d:85:e1:ef:ae:0a:62:73:31:25:f4:d8:e2:
                    2d:1c:3b:19:53:f6:5a:a5:8f:b6:fb:44:6d:e2:18:
                    a0:57:41:48:06:d4:a1:ca:cc:72:c8:96:31:7b:89:
                    5e:c7:6e:60:88:68:05:56:a1:2d:e1:bf:72:f6:51:
                    ad:0c:e9:f3:83:29:bb:d2:b6:dc:0a:2f:75:df:8f:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:88:EC:3E:0E:65:C4:C6:20:64:8E:87:50:80:F7:9A:BC:7B:AA:95
            X509v3 Authority Key Identifier:
                keyid:8E:67:55:12:B3:3F:4E:85:3D:E8:C2:52:25:A7:AC:2E:55:AA:B7:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/8E675512B33F4E853DE8C25225A7AC2E55AAB792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E675512B33F4E853DE8C25225A7AC2E55AAB792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/8E675512B33F4E853DE8C25225A7AC2E55AAB792.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ef:7f:6d:71:d4:e1:66:3e:31:2a:7c:94:65:46:7e:52:6d:
         13:43:a4:7a:e0:71:43:ce:ad:ff:55:17:bc:88:32:66:4f:da:
         95:6c:1f:85:3f:cf:a0:b5:0e:23:9c:ea:88:85:10:e0:8c:19:
         fc:0f:0d:57:7d:65:3d:29:4f:d3:bb:c3:82:ac:7f:3d:d4:07:
         0c:a1:39:b4:39:03:9e:93:af:63:27:80:86:e2:d6:7f:dc:55:
         72:a2:e4:38:bf:f3:16:30:8f:59:1b:41:09:0d:bf:64:34:93:
         5d:53:ab:2b:bb:40:db:15:c2:ac:c1:63:61:ed:2c:df:02:ee:
         e5:0b:d0:35:4b:53:07:12:8b:ba:74:15:ac:4f:2c:2c:c1:7f:
         83:14:ba:54:7d:2f:95:37:e4:98:fd:44:ba:c3:a1:8f:66:7d:
         39:5d:19:6d:99:09:60:e5:2c:b8:8e:92:b3:f6:7d:40:62:54:
         3b:3e:2c:d3:35:ef:2e:20:31:c1:6b:1b:e9:5a:7c:a5:28:7c:
         2b:0a:9a:fe:db:e4:13:2c:95:91:15:01:94:00:a5:90:fd:0a:
         6d:24:a5:71:22:43:c3:60:31:27:fd:53:83:76:bb:10:e9:6a:
         79:85:2c:88:22:94:d9:8b:0a:be:6f:46:46:25:2e:98:a7:59:
         0c:a4:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:00 2024 by rpki-client on console.sobornost.net