Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/ACAB551AAA41D00C17FEB2D03995311064730A91.mft
File:                     ACAB551AAA41D00C17FEB2D03995311064730A91.mft (raw, json)
Hash identifier:          AJfExCFTlPdXUPsc7skddtHwzGSY+EW+QRgE+QgvJe8=
Subject key identifier:   07:A7:CD:60:D8:35:77:B3:00:4B:BD:95:76:F2:CA:13:17:22:12:11
Authority key identifier: AC:AB:55:1A:AA:41:D0:0C:17:FE:B2:D0:39:95:31:10:64:73:0A:91
Certificate issuer:       /CN=ACAB551AAA41D00C17FEB2D03995311064730A91
Certificate serial:       61B40E0564A885914656D3AC3B7B786C5E0D2CDA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACAB551AAA41D00C17FEB2D03995311064730A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/ACAB551AAA41D00C17FEB2D03995311064730A91.mft
Manifest number:          56
Signing time:             Mon 15 Apr 2024 01:58:00 +0000
Manifest this update:     Mon 15 Apr 2024 01:53:00 +0000
Manifest next update:     Tue 16 Apr 2024 04:28:00 +0000
Files and hashes:         1: ACAB551AAA41D00C17FEB2D03995311064730A91.crl (hash: xg21zl3ECZdY2XjEALG+6AsaocPaJ0Mgp8wzVaaIM2s=)
                          2: 3137302e37382e35322e302f32322d3234203d3e20323635343935.roa (hash: wKcxByzisjLDMxfjyd1xrTOxcYSgPHY+DfL7Ci8J7XM=)
                          3: 323830343a333530343a666630303a3a2f34302d3438203d3e20323635343935.roa (hash: rJQfqI9kbS85cFoEsZ7E6V2/GcCBVhFyH66/LSo52SA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b4:0e:05:64:a8:85:91:46:56:d3:ac:3b:7b:78:6c:5e:0d:2c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACAB551AAA41D00C17FEB2D03995311064730A91
        Validity
            Not Before: Apr 15 01:53:00 2024 GMT
            Not After : Apr 16 04:28:00 2024 GMT
        Subject: CN=07A7CD60D83577B3004BBD9576F2CA1317221211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:08:f8:d6:fc:31:15:04:08:1c:46:14:1a:ef:
                    26:d7:86:97:fe:32:a3:be:f9:82:32:f5:eb:75:f5:
                    bc:9e:8b:d8:ef:96:2a:34:b3:ab:93:d9:d6:6b:9b:
                    de:1a:4a:75:fc:1e:66:0b:1e:90:0e:98:db:4e:8b:
                    43:2b:1e:cd:09:bf:17:50:23:fd:32:50:06:2d:07:
                    20:d8:7b:d9:08:65:c2:f9:bb:b7:08:ca:ac:89:2a:
                    36:5f:79:c8:77:3a:36:19:1e:7e:1a:c4:3f:ea:54:
                    b9:e9:11:59:cd:c2:69:0e:c5:7d:50:15:26:6a:43:
                    f7:35:33:b7:51:a9:a0:27:36:dc:3b:61:8b:0e:8d:
                    75:e8:15:d6:68:d1:0e:bc:37:37:0a:2c:c7:0c:36:
                    0c:6f:ba:c9:7d:86:e3:ca:73:9f:b5:6f:06:27:ad:
                    db:c6:dc:ec:2d:e4:8b:3f:14:82:e2:a2:7b:7e:f6:
                    7b:30:fc:d4:64:fa:b0:f0:10:c2:89:e0:ec:58:8b:
                    48:33:2b:31:37:4b:17:85:89:3b:8b:e6:7b:30:76:
                    5a:b3:8c:4d:74:16:54:60:44:05:f5:fd:77:4e:c7:
                    a9:46:18:3d:7c:ef:ff:55:7a:5e:01:8d:d8:db:6c:
                    99:65:af:14:3e:66:86:3c:63:c9:17:e5:34:5f:93:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A7:CD:60:D8:35:77:B3:00:4B:BD:95:76:F2:CA:13:17:22:12:11
            X509v3 Authority Key Identifier:
                keyid:AC:AB:55:1A:AA:41:D0:0C:17:FE:B2:D0:39:95:31:10:64:73:0A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/ACAB551AAA41D00C17FEB2D03995311064730A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACAB551AAA41D00C17FEB2D03995311064730A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/ACAB551AAA41D00C17FEB2D03995311064730A91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:81:46:be:5b:48:d7:d4:db:ee:b9:fb:77:30:59:c6:72:7f:
         cc:67:60:91:5d:c3:92:34:3b:16:d1:41:9d:39:ac:72:1d:e4:
         26:0e:9b:1c:ef:89:bf:27:bf:3b:86:70:e7:47:df:d5:78:d1:
         2f:1a:42:69:ff:44:1c:89:08:aa:a8:00:89:8f:0a:b4:26:7f:
         e3:5e:d1:17:0f:63:b6:1a:17:58:01:5c:b6:cc:86:03:b7:07:
         9b:a2:a8:95:4c:49:fb:fe:27:c5:bb:09:e2:c5:08:ee:2c:0c:
         25:80:4c:c0:8c:4a:e0:d4:79:5c:10:26:aa:ba:76:b2:0e:96:
         e4:33:25:a6:32:82:76:de:28:de:a6:d3:33:c2:dd:a8:7c:dd:
         d0:99:08:e7:0b:d7:ca:f6:41:38:ba:78:36:21:9c:27:33:fa:
         dd:9a:9f:8b:53:cf:82:00:d7:05:64:7a:89:fd:05:6e:ef:aa:
         f5:b7:de:49:67:e6:a3:c3:c7:9d:74:e6:fe:5a:cf:80:c0:62:
         eb:c6:07:71:95:17:4d:1d:25:e8:2c:97:df:3b:af:dd:98:f0:
         fa:b3:a6:48:14:d9:35:e3:4a:ac:77:3a:10:ca:4c:0c:52:eb:
         82:88:ea:49:a7:87:4b:5d:87:15:cf:b8:83:84:37:05:09:29:
         46:fd:2e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org