Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/AAEBF65D30344968C1E10E9E446DB92398D67D27.mft
File:                     AAEBF65D30344968C1E10E9E446DB92398D67D27.mft (raw, json)
Hash identifier:          RswMVg9/v6Cp/77Zpsd0ezDvOCPj9R0wzCObWj5HTsw=
Subject key identifier:   BB:6B:00:6E:9F:AC:19:82:14:43:E0:7A:77:F3:D5:D5:87:8A:D1:A2
Authority key identifier: AA:EB:F6:5D:30:34:49:68:C1:E1:0E:9E:44:6D:B9:23:98:D6:7D:27
Certificate issuer:       /CN=AAEBF65D30344968C1E10E9E446DB92398D67D27
Certificate serial:       30E1770B950C7B6F7A503222FEEB97952CD55F9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAEBF65D30344968C1E10E9E446DB92398D67D27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/AAEBF65D30344968C1E10E9E446DB92398D67D27.mft
Manifest number:          0C
Signing time:             Tue 28 May 2024 19:08:56 +0000
Manifest this update:     Tue 28 May 2024 19:03:56 +0000
Manifest next update:     Wed 29 May 2024 21:51:56 +0000
Files and hashes:         1: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: Rr2c3Zi5ExIeUp+RXDCNn3HjL/L/2vmtj+gtDp+wvi0=)
                          2: AAEBF65D30344968C1E10E9E446DB92398D67D27.crl (hash: Ri7EkV6Pik1VWZqTkQD3XXYMrE4SDvHMiOX62kokZJ8=)
                          3: 323830343a353936343a3a2f33322d3336203d3e203631363133.roa (hash: 1PSFHOKM8XRbo5ir6C3TwyjHftitA2YMj5Ab23SD+ds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e1:77:0b:95:0c:7b:6f:7a:50:32:22:fe:eb:97:95:2c:d5:5f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEBF65D30344968C1E10E9E446DB92398D67D27
        Validity
            Not Before: May 28 19:03:56 2024 GMT
            Not After : May 29 21:51:56 2024 GMT
        Subject: CN=BB6B006E9FAC19821443E07A77F3D5D5878AD1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:92:2d:b8:a0:60:f1:a4:3d:fe:0a:96:e1:
                    20:69:a7:e4:94:83:7e:38:7f:4e:9e:5b:c9:d8:3b:
                    f5:37:24:10:5a:1e:58:85:37:65:b2:e5:d4:38:40:
                    f6:25:80:ff:44:5d:97:a8:ac:1d:0d:f6:87:05:77:
                    7a:33:0b:d4:ea:ed:2d:22:62:7b:64:6b:96:d4:5e:
                    c6:2f:03:73:db:67:74:80:dc:75:af:17:0b:15:aa:
                    de:72:68:d2:6c:54:de:c8:51:53:e1:5d:5e:12:6c:
                    20:58:01:04:cf:b8:65:95:81:a2:90:b0:c6:ea:71:
                    f8:43:da:59:f4:7d:43:e1:5a:10:fb:62:ff:41:6b:
                    4d:f6:97:e8:9b:55:bb:c5:47:18:05:87:58:20:77:
                    72:6d:41:95:ef:a5:1b:97:9a:04:e0:91:f1:55:91:
                    50:b2:aa:60:52:db:b5:31:c5:a4:fa:be:26:77:c7:
                    95:0b:43:9b:5e:4d:9a:34:a1:1e:47:82:54:25:3f:
                    10:16:9d:7b:05:d7:fd:bc:cd:ae:87:45:14:70:3a:
                    91:cc:cd:1c:12:c3:8d:ca:03:ec:68:38:57:f4:44:
                    9c:bc:0e:c5:47:57:92:fa:ca:c2:86:c3:5c:cc:1e:
                    71:b9:0a:21:dd:f8:19:37:1c:b7:10:18:9d:75:2e:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6B:00:6E:9F:AC:19:82:14:43:E0:7A:77:F3:D5:D5:87:8A:D1:A2
            X509v3 Authority Key Identifier:
                keyid:AA:EB:F6:5D:30:34:49:68:C1:E1:0E:9E:44:6D:B9:23:98:D6:7D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/AAEBF65D30344968C1E10E9E446DB92398D67D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAEBF65D30344968C1E10E9E446DB92398D67D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/AAEBF65D30344968C1E10E9E446DB92398D67D27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:22:98:5c:81:c8:51:3a:91:74:73:1c:b7:af:fe:21:97:69:
         de:c3:aa:fb:e7:5c:cd:78:73:09:89:89:ad:2e:c4:5d:ad:37:
         7f:d8:f5:8a:ea:ff:08:d7:6d:c9:c8:7a:93:26:ec:76:b5:d4:
         f7:65:88:e0:4c:e4:c9:09:56:8a:78:4e:1b:44:93:81:b1:7d:
         91:c7:1f:6e:a2:e9:53:4d:58:22:4d:b1:83:6a:41:ee:4d:b0:
         8c:b4:95:86:f2:c3:0e:7d:5e:01:10:a2:7e:6d:2b:7c:f7:3d:
         8c:ea:33:74:68:60:77:92:49:a4:c3:f1:93:05:4b:2d:ee:bb:
         54:36:2f:ff:37:5e:29:46:2f:46:f1:0f:11:e2:19:14:94:dd:
         f2:a5:a3:d1:17:b0:d3:02:e5:8c:c0:31:3d:f7:27:94:f7:4e:
         f0:d4:2c:43:3d:4b:b6:82:7c:0c:27:81:c6:1d:ad:db:5f:b5:
         14:a3:6e:b9:09:4b:08:ff:83:97:4c:eb:92:bd:92:a2:db:6c:
         4e:65:49:c7:02:3d:93:cc:48:b9:66:35:48:ef:30:bb:39:59:
         f2:8f:f4:77:ca:d3:31:8c:97:27:77:d0:8a:ed:ab:14:ff:4f:
         79:0d:77:c3:ba:8f:c4:9e:11:e2:31:c3:1d:01:f4:d5:83:ba:
         32:e4:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----