Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/465DF349D1DB2C40A2312E684100847C1A89CE71.mft
File:                     465DF349D1DB2C40A2312E684100847C1A89CE71.mft (raw, json)
Hash identifier:          CJjEAmLjup7JJBYKcrOuJLri+NqqgFR2RhV+ElHU2R4=
Subject key identifier:   BC:28:09:0B:A0:49:30:ED:44:99:0A:E4:80:39:67:E2:B7:B6:BE:3F
Authority key identifier: 46:5D:F3:49:D1:DB:2C:40:A2:31:2E:68:41:00:84:7C:1A:89:CE:71
Certificate issuer:       /CN=465DF349D1DB2C40A2312E684100847C1A89CE71
Certificate serial:       7EEB23DE6F06FCEEED105487AA554CD1427B0869
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/465DF349D1DB2C40A2312E684100847C1A89CE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/465DF349D1DB2C40A2312E684100847C1A89CE71.mft
Manifest number:          24
Signing time:             Sat 01 Jul 2023 04:36:35 +0000
Manifest this update:     Sat 01 Jul 2023 04:31:35 +0000
Manifest next update:     Sun 02 Jul 2023 05:42:35 +0000
Files and hashes:         1: 323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (hash: hLqaw1z+ureKBIvdLLCwkEB4dWZ2u7Kg6HoSerwbR/g=)
                          2: 323830343a386235633a3a2f33342d3334203d3e20323733373238.roa (hash: 3qmVYfLBzkwmo7ykMYLV54AkCtMYoM+MB4sL2JLklOU=)
                          3: 323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (hash: r+tUKyJArGPNCmaFlCOYMFAO/aA8bq++LUsjRP5YXd8=)
                          4: 323830343a386235633a3a2f33332d3333203d3e20323733373238.roa (hash: wlofmr847CqrOZuwwYVvCy2/uOB7NmvyNRy8CbhCAoU=)
                          5: 323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (hash: FGBQ0/mGmozpofsfcvgeqNjxz7fDxroTTxjsPM8J+FU=)
                          6: 323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (hash: 1QNTkFoIK9dfRx6bFHT8FDQ3xTo/uOlpPH4lRifl+OQ=)
                          7: 323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (hash: lXh9fvcNW2eSsn5qYXOFpy+kKRfWBcIWiqmMhnhZEgY=)
                          8: 465DF349D1DB2C40A2312E684100847C1A89CE71.crl (hash: VHveuxZBjKbUNGs3zK6oj1i7lt5/IK/m5/ptSRSCmGc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:eb:23:de:6f:06:fc:ee:ed:10:54:87:aa:55:4c:d1:42:7b:08:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465DF349D1DB2C40A2312E684100847C1A89CE71
        Validity
            Not Before: Jul  1 04:31:35 2023 GMT
            Not After : Jul  2 05:42:35 2023 GMT
        Subject: CN=BC28090BA04930ED44990AE4803967E2B7B6BE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:03:5b:10:59:d3:a1:49:6f:a6:c9:b6:74:
                    e0:5c:ab:c0:36:e8:23:02:57:f6:2c:ff:bb:13:05:
                    9d:5a:bf:77:2d:24:c2:fd:f8:f9:39:8f:28:c8:17:
                    8b:99:58:28:38:85:5c:8d:f6:0d:e3:00:9d:ee:78:
                    79:f7:32:57:13:2e:c7:d4:c3:3a:20:eb:3d:39:8f:
                    b2:16:c4:df:d9:a8:a5:e0:bc:fd:a5:7d:6d:e1:63:
                    45:1e:6a:04:a6:38:c6:aa:0b:e1:43:db:ae:47:b2:
                    be:8b:9c:1b:76:b3:62:3d:1f:68:9c:c8:6e:5a:3f:
                    53:63:93:14:d9:ce:e0:e2:50:67:5e:20:38:b1:f2:
                    44:09:04:fa:bf:30:ec:9f:73:a2:e4:ed:34:c2:b8:
                    2a:e2:3c:4a:85:6c:58:95:e6:cd:a9:81:d6:2f:e5:
                    29:dc:c7:4d:52:66:3e:d8:8a:74:77:15:f4:ab:04:
                    de:1f:0e:74:ce:ec:65:b4:7f:eb:e9:da:25:07:11:
                    84:eb:2e:57:c0:a5:b3:0c:44:56:86:c9:b5:47:49:
                    3d:d6:e7:ab:1a:46:b9:28:ab:d9:8d:9e:c9:8a:0e:
                    32:b5:06:2e:83:74:9c:7f:0e:40:7e:6f:f7:0e:cd:
                    8f:1b:1f:6d:1f:50:6e:2f:7a:f0:54:c7:3d:59:10:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:28:09:0B:A0:49:30:ED:44:99:0A:E4:80:39:67:E2:B7:B6:BE:3F
            X509v3 Authority Key Identifier:
                keyid:46:5D:F3:49:D1:DB:2C:40:A2:31:2E:68:41:00:84:7C:1A:89:CE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/465DF349D1DB2C40A2312E684100847C1A89CE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/465DF349D1DB2C40A2312E684100847C1A89CE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/465DF349D1DB2C40A2312E684100847C1A89CE71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:d3:e3:88:30:7b:27:fd:ac:32:10:32:40:92:d5:b7:a0:
         5f:f7:ee:3a:60:7d:10:7a:d8:d6:79:c3:c1:11:8e:11:22:98:
         d7:96:f1:8f:19:b9:53:3c:8e:ac:be:2a:01:87:fb:68:30:56:
         65:49:6d:90:71:30:cf:51:15:85:84:c1:90:56:0c:39:2b:df:
         22:0b:31:19:c6:44:ff:09:d3:a9:b8:3a:f0:ef:8e:e4:7c:a8:
         37:48:8b:4d:a0:2d:99:8b:27:d5:ef:bf:0d:5f:e3:a0:8f:a9:
         21:59:eb:4b:67:b7:b6:be:66:ce:33:34:59:d7:cb:c2:1b:07:
         fd:9f:a8:cf:1e:94:45:53:0a:66:84:0b:dc:2b:17:1f:f4:1e:
         a1:72:c1:95:82:7d:ec:2f:1d:2e:0a:66:71:4c:d0:48:bb:14:
         c9:87:75:97:bc:97:7b:d6:b6:ef:e9:f0:99:e1:bc:03:82:68:
         48:dc:c4:0d:19:22:77:f6:75:58:fc:0c:13:f0:a1:6f:b3:05:
         b6:d2:80:c4:19:a6:84:02:1f:87:a1:db:31:37:7d:c8:fe:d3:
         09:4a:9b:72:af:3d:ce:f1:fa:c9:bf:4b:6e:ed:0c:96:31:71:
         ca:01:ce:92:fe:83:1f:73:6e:39:83:ec:a3:4c:bf:92:49:61:
         4d:da:5b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:47 2023 by rpki-client on console.sobornost.net