Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.mft
File:                     11ACCE96940DE0E26CC79CC9DE02FF434F33C267.mft (raw, json)
Hash identifier:          DOcZjeIRwP2TnZbyHKkx+2hH+IV9lguRIS9CtHY+klk=
Subject key identifier:   26:95:D6:19:99:26:3A:BD:FD:72:B2:5B:33:49:F4:46:99:CC:2C:84
Authority key identifier: 11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67
Certificate issuer:       /CN=11ACCE96940DE0E26CC79CC9DE02FF434F33C267
Certificate serial:       34E8CDC05479735954B7AFA1AE4FF09853CA21E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.mft
Manifest number:          013A
Signing time:             Sun 14 Apr 2024 21:53:32 +0000
Manifest this update:     Sun 14 Apr 2024 21:48:32 +0000
Manifest next update:     Tue 16 Apr 2024 00:31:32 +0000
Files and hashes:         1: 11ACCE96940DE0E26CC79CC9DE02FF434F33C267.crl (hash: tkDcV9KUxTtPxb/aVXJ4TluJi2WzeV5a7IW8vrBhpTY=)
                          2: 323830343a313435383a3a2f33322d313238203d3e20323633333236.roa (hash: xXJ3uYBINUIYZMOIvwzhU35LgLQQxl0CalnGoEt+v3M=)
                          3: 3139312e372e3137362e302f32312d3332203d3e20323633333236.roa (hash: 7aNBbxzC1l5lb8lKzGPXT/0aXO9Pp3sQff7owLHL9zM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e8:cd:c0:54:79:73:59:54:b7:af:a1:ae:4f:f0:98:53:ca:21:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ACCE96940DE0E26CC79CC9DE02FF434F33C267
        Validity
            Not Before: Apr 14 21:48:32 2024 GMT
            Not After : Apr 16 00:31:32 2024 GMT
        Subject: CN=2695D61999263ABDFD72B25B3349F44699CC2C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:83:e5:50:67:c7:ab:88:5c:e1:11:94:eb:
                    5d:38:c9:37:95:f2:00:7f:ac:ef:2e:9b:92:66:e5:
                    b1:5c:09:07:80:5b:2f:a9:1c:e3:c0:cd:e1:40:c4:
                    b6:dc:22:a8:02:dd:a4:a9:89:48:0b:c4:79:cb:e4:
                    9d:b7:a5:bf:47:89:7f:b7:04:ef:8a:52:e1:2e:1d:
                    78:bc:97:72:5c:e4:37:d3:ec:35:14:72:06:93:7a:
                    3f:6c:0e:31:5c:fa:a9:0f:dc:42:0d:9f:92:f9:02:
                    3e:b4:4a:c0:fe:42:06:5d:17:aa:ac:cf:6c:03:4e:
                    db:c5:9e:ff:98:3a:4b:f2:f0:0f:93:ce:0a:8a:34:
                    12:b0:5d:fc:92:76:1e:71:5e:81:b0:57:f8:bb:c0:
                    71:a7:81:46:97:c8:3f:18:63:fe:b9:67:eb:5b:c4:
                    96:b0:f1:e1:a0:91:1b:df:40:28:8a:bd:33:d8:d1:
                    a9:06:3d:26:41:90:1b:54:e5:a8:b5:d2:33:e8:75:
                    f1:9a:9b:bd:48:54:92:54:fe:07:8e:37:60:9f:46:
                    05:3e:6b:49:46:5f:8c:8a:6b:d3:66:4c:96:7a:51:
                    54:3d:11:e9:8b:69:07:69:8e:99:62:3b:2f:4b:c0:
                    fe:90:61:4a:bf:7e:a9:51:7c:8a:e6:5d:ff:f3:1e:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:95:D6:19:99:26:3A:BD:FD:72:B2:5B:33:49:F4:46:99:CC:2C:84
            X509v3 Authority Key Identifier:
                keyid:11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:81:ca:06:12:ed:d7:84:22:08:e5:b1:55:8b:70:d5:61:8c:
         e1:24:ad:9d:65:8d:dd:fe:2d:a9:a0:d1:db:a0:3a:cc:63:09:
         12:d2:c8:51:29:94:77:47:b2:0d:aa:90:1e:e2:78:35:77:7a:
         aa:64:00:ff:61:ee:51:cd:99:08:89:fc:89:64:62:59:70:d4:
         c0:50:36:28:ab:fd:ed:b6:2e:0b:34:f3:f8:72:1c:01:bd:35:
         ce:5e:9d:71:43:48:4e:f1:d4:6e:f2:44:2f:15:10:d2:e9:46:
         08:b0:da:33:ee:3d:b8:1c:b5:d1:03:56:33:7d:cc:c3:fd:fd:
         af:24:c4:c3:f1:75:ef:d8:02:43:28:11:4a:47:e7:c8:9c:7d:
         a8:19:55:46:ec:aa:62:10:3a:66:42:92:86:c7:38:e4:d2:92:
         b5:43:25:11:08:f7:28:49:26:7a:25:b0:e4:4a:eb:60:ec:02:
         e0:68:5b:eb:22:b1:be:65:38:88:79:b8:78:7a:8c:bd:a4:98:
         9e:0b:5d:0e:db:c4:1d:c0:a9:b3:42:5c:f3:79:cb:35:66:d2:
         d5:18:f2:14:87:84:64:fa:5a:62:05:b9:20:e2:2f:43:37:32:
         0e:eb:79:ea:14:17:c5:6f:34:4f:b5:69:ea:33:f7:32:2f:75:
         c7:04:7c:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNOjNwFR5c1lUt6+hrk/wmFPKIecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBQ0NFOTY5NDBERTBFMjZDQzc5Q0M5REUwMkZGNDM0
RjMzQzI2NzAeFw0yNDA0MTQyMTQ4MzJaFw0yNDA0MTYwMDMxMzJaMDMxMTAvBgNV
BAMTKDI2OTVENjE5OTkyNjNBQkRGRDcyQjI1QjMzNDlGNDQ2OTlDQzJDODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODIPlUGfHq4hc4RGU6104yTeV
8gB/rO8um5Jm5bFcCQeAWy+pHOPAzeFAxLbcIqgC3aSpiUgLxHnL5J23pb9HiX+3
BO+KUuEuHXi8l3Jc5DfT7DUUcgaTej9sDjFc+qkP3EINn5L5Aj60SsD+QgZdF6qs
z2wDTtvFnv+YOkvy8A+TzgqKNBKwXfySdh5xXoGwV/i7wHGngUaXyD8YY/65Z+tb
xJaw8eGgkRvfQCiKvTPY0akGPSZBkBtU5ai10jPodfGam71IVJJU/geON2CfRgU+
a0lGX4yKa9NmTJZ6UVQ9EemLaQdpjpliOy9LwP6QYUq/fqlRfIrmXf/zHs9ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJpXWGZkmOr39crJbM0n0RpnMLIQwHwYDVR0j
BBgwFoAUEazOlpQN4OJsx5zJ3gL/Q08zwmcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmZWZGZzcWJ0QzdtSGtKRVl4M0hFbmo3NjNpZTFFMVdLdHB0Z01GdXBV
SmkvMC8xMUFDQ0U5Njk0MERFMEUyNkNDNzlDQzlERTAyRkY0MzRGMzNDMjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExQUNDRTk2OTQwREUwRTI2
Q0M3OUNDOURFMDJGRjQzNEYzM0MyNjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmZWZGZzcWJ0QzdtSGtKRVl4M0hFbmo3NjNpZTFFMVdLdHB0Z01GdXBVSmkvMC8x
MUFDQ0U5Njk0MERFMEUyNkNDNzlDQzlERTAyRkY0MzRGMzNDMjY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeYHKBhLt14QiCOWxVYtw1WGM4SStnWWN3f4tqaDR26A6zGMJEtLIUSmUd0ey
DaqQHuJ4NXd6qmQA/2HuUc2ZCIn8iWRiWXDUwFA2KKv97bYuCzTz+HIcAb01zl6d
cUNITvHUbvJELxUQ0ulGCLDaM+49uBy10QNWM33Mw/39ryTEw/F179gCQygRSkfn
yJx9qBlVRuyqYhA6ZkKShsc45NKStUMlEQj3KEkmeiWw5ErrYOwC4Ghb6yKxvmU4
iHm4eHqMvaSYngtdDtvEHcCps0Jc83nLNWbS1RjyFIeEZPpaYgW5IOIvQzcyDut5
6hQXxW80T7Vp6jP3Mi91xwR8oQ==
-----END CERTIFICATE-----