Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.mft
File:                     2FBE13F1826AF12492EA0793337A3CD8B27334F8.mft (raw, json)
Hash identifier:          dyIAfeFMAT8NbJ49eKsQ5VX0hdGnljoundarejMhL3E=
Subject key identifier:   1B:37:6C:01:75:DE:3E:9F:EC:7D:92:AA:27:9C:44:3D:B4:5A:D5:59
Authority key identifier: 2F:BE:13:F1:82:6A:F1:24:92:EA:07:93:33:7A:3C:D8:B2:73:34:F8
Certificate issuer:       /CN=2FBE13F1826AF12492EA0793337A3CD8B27334F8
Certificate serial:       10C1BD260A12F253FB127811E414296B7AE5B54D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.mft
Manifest number:          0308
Signing time:             Mon 15 Apr 2024 08:42:30 +0000
Manifest this update:     Mon 15 Apr 2024 08:37:30 +0000
Manifest next update:     Tue 16 Apr 2024 08:56:30 +0000
Files and hashes:         1: 2FBE13F1826AF12492EA0793337A3CD8B27334F8.crl (hash: H4nBmDVVawzfzSmB5pgJPmCLw9dDtGTVrRg39/4uHw4=)
                          2: 323830343a313866633a3a2f33322d3332203d3e203631373637.roa (hash: f3DjJhErJDSST/P5oN8o6s2LUxcImO/397tQBKbp/80=)
                          3: 3230302e37372e3138302e302f32322d3234203d3e203631373637.roa (hash: QGHEEu3Leylm7TEcTO2cWoAlGNbL6KbADLxWRnIW0V8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c1:bd:26:0a:12:f2:53:fb:12:78:11:e4:14:29:6b:7a:e5:b5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FBE13F1826AF12492EA0793337A3CD8B27334F8
        Validity
            Not Before: Apr 15 08:37:30 2024 GMT
            Not After : Apr 16 08:56:30 2024 GMT
        Subject: CN=1B376C0175DE3E9FEC7D92AA279C443DB45AD559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:02:c9:aa:2c:e0:fb:59:da:af:4a:de:1c:19:
                    ef:d7:11:b5:c7:50:68:60:6a:9e:57:20:a1:40:3d:
                    cf:4b:8e:8f:45:2c:e4:2b:8c:b4:23:90:71:8b:83:
                    b3:1a:40:a9:7e:76:47:10:2e:86:28:78:20:7e:be:
                    d8:5a:d5:35:db:91:41:bc:e9:e2:c3:10:42:02:62:
                    bf:b6:40:4d:5f:19:12:90:df:a0:29:e8:82:47:e9:
                    bf:db:ed:ec:92:78:a5:8e:db:82:ea:a8:33:67:a9:
                    28:d3:32:00:2c:69:b1:ee:d6:fa:9f:e1:3b:f5:d3:
                    bd:06:6a:7e:f0:6e:a0:2c:2e:e0:13:75:fe:f2:ec:
                    1e:e1:5c:4b:70:c0:63:d7:60:1c:d6:bd:88:a2:4c:
                    17:e7:37:2c:75:29:7c:09:3e:8f:d2:40:fd:bc:2f:
                    74:69:5b:f8:19:20:e2:54:68:2b:e5:23:5b:ee:44:
                    96:06:50:17:a6:e6:1e:f6:53:c0:8f:82:49:a9:2b:
                    07:f9:6f:57:42:1b:bd:28:dc:7c:b8:7a:8c:f1:b4:
                    99:26:51:ca:40:47:8b:e5:6d:12:6c:08:8d:b7:b6:
                    e1:74:28:95:ce:d1:8e:5c:ad:84:d1:fa:86:53:d7:
                    fa:96:b4:16:a4:83:8c:78:9c:87:e1:2a:1e:7d:95:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:37:6C:01:75:DE:3E:9F:EC:7D:92:AA:27:9C:44:3D:B4:5A:D5:59
            X509v3 Authority Key Identifier:
                keyid:2F:BE:13:F1:82:6A:F1:24:92:EA:07:93:33:7A:3C:D8:B2:73:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:82:fe:99:89:dc:ab:61:60:18:1d:4a:17:e8:aa:af:40:47:
         ee:8a:65:07:6f:5c:99:0b:38:97:5e:ba:87:fe:a9:6b:ec:71:
         b4:f1:8c:0e:bc:0c:b8:09:b1:5d:46:a5:ce:90:8a:ac:d0:53:
         b6:5d:c3:5c:07:ad:8d:27:cc:0b:0a:dd:90:80:5a:5a:5d:99:
         29:f5:30:73:d0:a3:f8:63:bd:8b:55:07:31:35:6f:30:09:a2:
         5e:c5:f2:dc:c3:69:46:78:59:91:7f:51:a0:58:5b:b3:63:b4:
         8a:f8:89:09:68:47:87:66:b6:71:50:e1:82:88:17:42:94:0c:
         16:4f:c0:62:a8:c2:78:ef:65:8c:50:c7:52:fe:45:a1:86:bc:
         1f:2b:53:d7:82:40:37:87:a8:49:f5:f5:b0:45:e0:5e:f5:01:
         67:a9:c7:f0:43:56:16:84:65:3a:3f:e2:06:6a:7f:0b:ba:90:
         10:ee:70:4f:16:3f:fc:d4:70:d9:90:63:d1:18:13:26:53:4e:
         23:f4:5a:bc:6c:f4:c0:75:44:5a:03:0d:8a:33:7c:6d:00:3c:
         65:6d:bb:ea:6a:f8:ad:05:e4:85:0a:b6:5a:92:96:f7:df:5c:
         72:2c:98:9e:28:16:9d:52:e0:ca:49:19:c6:27:15:7c:a8:b3:
         69:34:43:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEMG9JgoS8lP7EngR5BQpa3rltU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZCRTEzRjE4MjZBRjEyNDkyRUEwNzkzMzM3QTNDRDhC
MjczMzRGODAeFw0yNDA0MTUwODM3MzBaFw0yNDA0MTYwODU2MzBaMDMxMTAvBgNV
BAMTKDFCMzc2QzAxNzVERTNFOUZFQzdEOTJBQTI3OUM0NDNEQjQ1QUQ1NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAsmqLOD7WdqvSt4cGe/XEbXH
UGhgap5XIKFAPc9Ljo9FLOQrjLQjkHGLg7MaQKl+dkcQLoYoeCB+vtha1TXbkUG8
6eLDEEICYr+2QE1fGRKQ36Ap6IJH6b/b7eySeKWO24LqqDNnqSjTMgAsabHu1vqf
4Tv1070Gan7wbqAsLuATdf7y7B7hXEtwwGPXYBzWvYiiTBfnNyx1KXwJPo/SQP28
L3RpW/gZIOJUaCvlI1vuRJYGUBem5h72U8CPgkmpKwf5b1dCG70o3Hy4eozxtJkm
UcpAR4vlbRJsCI23tuF0KJXO0Y5crYTR+oZT1/qWtBakg4x4nIfhKh59lbdjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGzdsAXXePp/sfZKqJ5xEPbRa1VkwHwYDVR0j
BBgwFoAUL74T8YJq8SSS6geTM3o82LJzNPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGo3ZFdTcTFWQUJWUmo1UFBQWXEzekZTd1RKRDNBZ3FpQWpRcGprZjlI
eHIvMC8yRkJFMTNGMTgyNkFGMTI0OTJFQTA3OTMzMzdBM0NEOEIyNzMzNEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJGQkUxM0YxODI2QUYxMjQ5
MkVBMDc5MzMzN0EzQ0Q4QjI3MzM0RjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGo3ZFdTcTFWQUJWUmo1UFBQWXEzekZTd1RKRDNBZ3FpQWpRcGprZjlIeHIvMC8y
RkJFMTNGMTgyNkFGMTI0OTJFQTA3OTMzMzdBM0NEOEIyNzMzNEY4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADIL+mYncq2FgGB1KF+iqr0BH7oplB29cmQs4l166h/6pa+xxtPGMDrwMuAmx
XUalzpCKrNBTtl3DXAetjSfMCwrdkIBaWl2ZKfUwc9Cj+GO9i1UHMTVvMAmiXsXy
3MNpRnhZkX9RoFhbs2O0iviJCWhHh2a2cVDhgogXQpQMFk/AYqjCeO9ljFDHUv5F
oYa8HytT14JAN4eoSfX1sEXgXvUBZ6nH8ENWFoRlOj/iBmp/C7qQEO5wTxY//NRw
2ZBj0RgTJlNOI/RavGz0wHVEWgMNijN8bQA8ZW276mr4rQXkhQq2WpKW999cciyY
nigWnVLgykkZxicVfKizaTRDZg==
-----END CERTIFICATE-----