Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.mft
File:                     11EB5F8C0007E05E5063FA10BBBA5139D96A357F.mft (raw, json)
Hash identifier:          J21XUUyKqTqbXcJaahRxe12mkleoXZCgSJwHOrFyeU4=
Subject key identifier:   8C:4B:76:D3:D7:53:02:A0:EE:98:F2:ED:90:35:66:E7:1C:D4:73:7D
Authority key identifier: 11:EB:5F:8C:00:07:E0:5E:50:63:FA:10:BB:BA:51:39:D9:6A:35:7F
Certificate issuer:       /CN=11EB5F8C0007E05E5063FA10BBBA5139D96A357F
Certificate serial:       3CDBF4E41EE1226D4B4D57EE25F1E45385986DEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.mft
Manifest number:          010D
Signing time:             Mon 15 Apr 2024 01:08:10 +0000
Manifest this update:     Mon 15 Apr 2024 01:03:10 +0000
Manifest next update:     Tue 16 Apr 2024 03:44:10 +0000
Files and hashes:         1: 11EB5F8C0007E05E5063FA10BBBA5139D96A357F.crl (hash: Z5wc+Go8Ttw9RtCkFx8c//1nPHTm/l1GiT1tyrmtGaA=)
                          2: 323830343a326636383a3a2f33322d3438203d3e20323634383839.roa (hash: JMXEkTHmHq+IYfsLnLTKs/nuQpi4bvpyXK1gN8ubxoM=)
                          3: 3136382e3232372e3232302e302f32322d3234203d3e20323634383839.roa (hash: KFOojsGCtyALhLFcrUNHaT325SDIpwNwp0crX1u2sNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:db:f4:e4:1e:e1:22:6d:4b:4d:57:ee:25:f1:e4:53:85:98:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11EB5F8C0007E05E5063FA10BBBA5139D96A357F
        Validity
            Not Before: Apr 15 01:03:10 2024 GMT
            Not After : Apr 16 03:44:10 2024 GMT
        Subject: CN=8C4B76D3D75302A0EE98F2ED903566E71CD4737D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:14:9e:c5:ad:ff:a4:ba:1f:8f:4c:7c:d8:
                    de:e6:af:0c:77:57:52:23:8e:31:4c:60:9a:1a:5a:
                    29:e1:ec:49:c0:63:cb:21:11:f4:3c:d8:85:2b:66:
                    74:ae:ba:e9:6a:e5:1f:1d:e2:94:c1:e4:b5:e2:8a:
                    bf:41:c7:dc:e0:fa:d2:65:08:92:e8:78:33:15:49:
                    4f:88:25:20:25:c6:e4:70:7c:ae:9c:4c:e4:f5:4f:
                    5e:73:9c:37:ff:76:3e:b3:cc:ed:d6:09:06:31:5b:
                    fa:0e:f0:fb:2b:fd:88:66:61:21:aa:e3:da:a8:70:
                    b9:57:14:bd:91:69:75:88:1b:4f:97:8e:31:bd:bd:
                    cb:85:b8:d9:1e:14:cc:a4:1c:58:5b:55:c5:a0:95:
                    2c:fb:9a:2a:fa:5d:d3:fb:e6:49:5f:d3:c4:96:fa:
                    d3:e1:5c:3b:25:71:9c:b1:34:04:e7:5d:62:0b:31:
                    f1:4d:6e:96:ec:40:e0:41:3e:d1:d4:ec:9b:a2:fb:
                    28:1e:36:94:d7:d0:72:85:92:49:c0:1e:bf:1a:a7:
                    4e:c8:00:ad:a0:aa:03:57:78:c9:4a:df:17:30:57:
                    34:68:01:a5:a6:68:30:e2:b8:b6:e1:a6:3b:49:24:
                    ce:d9:18:ad:0c:46:92:3d:b0:f7:43:ab:66:1e:b9:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4B:76:D3:D7:53:02:A0:EE:98:F2:ED:90:35:66:E7:1C:D4:73:7D
            X509v3 Authority Key Identifier:
                keyid:11:EB:5F:8C:00:07:E0:5E:50:63:FA:10:BB:BA:51:39:D9:6A:35:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9c:7d:93:86:73:be:22:82:a5:64:47:96:e7:e9:ba:2b:38:
         b4:ef:0b:40:04:c8:ab:08:d0:e1:86:fd:4d:01:7b:d2:35:c8:
         61:a6:ea:13:61:56:32:37:f1:6b:81:be:af:5b:ec:c7:6e:45:
         89:f1:3a:36:94:71:17:25:b2:79:29:e0:ef:1f:32:5e:c1:05:
         35:60:2c:3e:36:bc:5e:f9:88:ec:af:86:63:c4:0a:74:1c:4d:
         e6:18:e8:8c:98:45:64:c6:ac:c7:da:e3:04:96:d5:da:b0:74:
         bf:31:f7:f8:82:4b:4e:0e:ee:50:8d:09:fe:8d:68:9a:71:a8:
         a6:c5:31:b7:4e:06:d2:61:fd:2b:75:1a:a7:de:4b:c4:e0:6d:
         72:de:d3:31:23:2a:30:4d:4f:fb:b5:1b:22:9d:84:14:c0:87:
         cc:6c:99:b6:cf:97:ee:eb:51:27:58:be:8d:de:a6:b4:0c:9a:
         8e:d8:9f:8f:e5:50:27:85:af:70:11:7f:ba:e4:bc:2d:0f:2f:
         ff:61:f4:f4:c7:83:0f:ed:52:84:c3:a3:7a:f0:f0:6b:33:8d:
         35:07:6b:9c:f1:60:8c:1e:11:40:b0:ee:9b:06:e5:71:34:91:
         78:69:9f:b4:a4:20:b0:ed:dc:c0:c3:11:e8:ef:79:c1:2b:bc:
         07:ef:9b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----