Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.mft
File:                     08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.mft (raw, json)
Hash identifier:          iW0kYn9RPLIvvVFQUNp+em5QXghKtodLbAuLm36NC8k=
Subject key identifier:   36:DC:F2:05:69:2F:B3:E1:6B:71:B7:97:0D:AC:85:0E:1B:F9:E2:1C
Authority key identifier: 08:CD:9A:19:7A:81:5F:3B:B0:C0:2E:C0:CF:6C:BB:9F:8E:03:04:5C
Certificate issuer:       /CN=08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C
Certificate serial:       09D904918DC3443F06BE14675DDF3B4929F6E382
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.mft
Manifest number:          3F
Signing time:             Mon 08 Jan 2024 22:00:13 +0000
Manifest this update:     Mon 08 Jan 2024 21:55:13 +0000
Manifest next update:     Wed 10 Jan 2024 00:47:13 +0000
Files and hashes:         1: 08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.crl (hash: ImhxfKHCV5VFUukiZrSfFil6p63EDlFqAgt4K5l7Tos=)
                          2: 323830343a353330303a3a2f33322d3332203d3e20323638353536.roa (hash: FT6WTahO7DVMcgM1wGyGurZ9uXXSC16DSNAUQ2AfQW8=)
                          3: 34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa (hash: ITWFpEpegES2a/g8675LSZOGrWtzat6cNJlFIwedImE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d9:04:91:8d:c3:44:3f:06:be:14:67:5d:df:3b:49:29:f6:e3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C
        Validity
            Not Before: Jan  8 21:55:13 2024 GMT
            Not After : Jan 10 00:47:13 2024 GMT
        Subject: CN=36DCF205692FB3E16B71B7970DAC850E1BF9E21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:74:19:41:0c:e8:5e:16:81:c5:85:75:f6:
                    d9:07:97:4f:59:f9:91:83:a1:37:0f:d4:04:83:7f:
                    c0:1c:05:93:ff:00:e9:3b:4f:50:27:eb:42:aa:d8:
                    14:85:6b:f0:23:54:1d:28:ee:22:2d:9d:81:08:df:
                    47:26:6d:32:7c:a1:a8:c7:68:b7:49:b8:dd:68:10:
                    cb:eb:e2:9f:1a:a2:33:f4:3b:30:f8:0c:f4:43:e1:
                    21:44:e6:66:0b:9a:ef:73:d3:54:1c:d8:cf:04:cc:
                    2f:04:47:e8:e8:da:05:77:a0:e9:b1:f2:66:51:35:
                    ce:ac:9c:63:ae:69:85:f9:cc:8d:51:55:04:52:1f:
                    5d:05:ff:5e:5b:91:b9:b4:d9:8c:04:c2:08:2c:d5:
                    fb:ef:bf:5a:f9:9a:3d:46:37:29:08:c5:b3:03:0a:
                    c1:ce:06:ee:ec:7b:52:33:db:d1:a3:13:96:bf:0a:
                    2f:d0:e6:48:43:89:e5:a0:e5:b7:72:9e:54:8c:74:
                    ca:92:dc:b6:36:4d:6c:54:8f:e4:83:97:22:34:ef:
                    9f:08:3a:3f:77:60:db:8c:fa:9b:ec:42:ae:d5:ca:
                    8c:0e:7e:5f:69:c1:b2:05:c0:6b:76:51:59:57:30:
                    b0:bd:6d:ea:fb:75:52:21:7f:40:c6:7d:b5:4a:17:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DC:F2:05:69:2F:B3:E1:6B:71:B7:97:0D:AC:85:0E:1B:F9:E2:1C
            X509v3 Authority Key Identifier:
                keyid:08:CD:9A:19:7A:81:5F:3B:B0:C0:2E:C0:CF:6C:BB:9F:8E:03:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/08CD9A197A815F3BB0C02EC0CF6CBB9F8E03045C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:8a:38:e2:1e:82:ab:40:ca:89:61:e9:62:9f:0b:04:f1:
         3a:fc:98:cb:d9:50:b4:03:12:eb:c3:35:ba:59:33:67:82:3e:
         93:e1:57:21:90:52:79:be:9b:9a:0a:72:47:f1:57:a0:5b:2c:
         6d:0c:b9:90:7e:23:75:34:9a:c9:37:05:57:8c:ce:b2:0c:64:
         ba:48:38:56:f3:7b:78:c7:78:53:71:00:fe:5c:ad:9a:c9:07:
         c5:74:07:c1:5f:48:6f:f8:52:5a:0f:e6:51:81:9b:fc:b3:a1:
         1d:20:92:83:58:97:90:83:27:92:b3:b6:30:e8:ad:3f:b8:0e:
         96:88:2b:ad:af:a0:7e:ad:a1:88:7b:6f:2f:dc:4a:a9:6b:14:
         5d:ce:4d:9c:e6:db:ba:6f:02:34:21:ba:ce:1d:63:83:13:10:
         44:1e:ef:9c:9d:04:a7:e0:06:3d:6a:43:a4:58:41:40:f9:71:
         09:27:eb:32:bb:20:73:0f:0f:07:55:b7:c7:0b:08:69:f5:fe:
         04:57:b6:ef:03:4c:21:16:04:a7:66:1a:82:4e:28:66:a0:26:
         8b:72:10:e6:73:e0:23:46:2e:13:92:b2:4b:ba:46:32:fc:f2:
         a3:37:81:ca:64:7e:bb:f5:53:83:53:c8:ab:da:35:43:8a:cd:
         1d:67:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:33 2024 by rpki-client on console.sobornost.net