Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.mft
File:                     959F004623105A3C7B4F85C41B8104B26D38122E.mft (raw, json)
Hash identifier:          8N3J2xRrbGsbRKoF7AS/Msfpua5WGN01FypLcQmeAx8=
Subject key identifier:   33:96:B3:6F:15:8F:9F:D4:36:7B:E3:90:ED:C6:41:19:4E:31:E8:86
Authority key identifier: 95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E
Certificate issuer:       /CN=959F004623105A3C7B4F85C41B8104B26D38122E
Certificate serial:       777D65E94DDFDD422EB12D79C04CE0E5DCCCB231
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.mft
Manifest number:          0283
Signing time:             Mon 15 Apr 2024 06:01:30 +0000
Manifest this update:     Mon 15 Apr 2024 05:56:30 +0000
Manifest next update:     Tue 16 Apr 2024 07:39:30 +0000
Files and hashes:         1: 959F004623105A3C7B4F85C41B8104B26D38122E.crl (hash: IKVpZicUyfS/yOiAmglCfuFU/itmYWMIXez9mDDSepA=)
                          2: 3138312e3139312e3136302e302f32332d3233203d3e20323637343236.roa (hash: uI1SzvjtNyk5vgYqini2vuuAAViRQJuclYUCbvtSl3E=)
                          3: 3138312e3139312e3136312e302f32342d3234203d3e20323637343236.roa (hash: oAYZsVaatC5MobvaFQ8CDxicslIq3I6ykGFsyWptQLA=)
                          4: 3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa (hash: ePbbdAUrF3f6zyfUuPXgBwgBxfFGIQcncAAKo1sZmoY=)
                          5: 323830343a343135303a3a2f33322d3332203d3e20323637343236.roa (hash: Ii/AQpFkiZqu71xyQl4vTF8VGH8Vk3DmtJQRodt5KLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7d:65:e9:4d:df:dd:42:2e:b1:2d:79:c0:4c:e0:e5:dc:cc:b2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959F004623105A3C7B4F85C41B8104B26D38122E
        Validity
            Not Before: Apr 15 05:56:30 2024 GMT
            Not After : Apr 16 07:39:30 2024 GMT
        Subject: CN=3396B36F158F9FD4367BE390EDC641194E31E886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:5b:50:d0:eb:8a:77:77:f2:3a:d4:39:9d:
                    73:0e:09:52:de:96:f3:57:f8:d5:57:d6:ed:83:70:
                    88:46:d8:89:17:eb:e2:76:30:a6:00:61:c6:26:24:
                    fc:00:25:44:e6:f9:41:0d:76:67:b5:b7:6d:95:30:
                    d9:4c:1f:0a:c8:5c:23:69:59:d5:8b:01:d4:b4:7b:
                    09:c5:6a:cd:20:39:eb:75:3b:6e:58:7a:27:e3:fd:
                    9f:39:c6:04:8e:55:7d:0f:95:5b:37:c6:f1:62:93:
                    90:11:0f:fe:a1:56:74:df:7a:63:69:aa:99:63:ca:
                    1a:66:7e:3d:c2:97:4c:6b:8f:de:4c:7f:0c:46:67:
                    9d:cd:19:fe:6b:20:d1:ad:d1:01:9a:59:96:12:aa:
                    84:ab:3e:dc:da:21:b7:2d:a5:05:15:d7:9c:c6:3b:
                    29:f3:7d:87:d1:5c:93:b6:b5:0d:ed:75:5d:f4:4e:
                    ab:2b:6f:49:d7:5c:ca:2f:43:19:b9:1b:0d:03:a6:
                    49:a0:82:22:5a:ed:ea:09:31:fa:d3:1f:cc:a7:65:
                    f8:f2:ea:1d:7d:13:e2:16:14:3c:39:fd:2d:93:5f:
                    ac:0e:4f:2e:91:50:26:d5:f6:22:10:3e:71:f5:f7:
                    e7:5f:c5:79:a9:57:25:63:04:9b:fd:7c:25:56:05:
                    ae:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:B3:6F:15:8F:9F:D4:36:7B:E3:90:ED:C6:41:19:4E:31:E8:86
            X509v3 Authority Key Identifier:
                keyid:95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a9:9d:30:04:78:f4:49:4e:89:50:ac:cc:af:5f:0e:00:2f:
         00:ab:14:56:98:af:f7:b4:7c:60:bd:19:6b:f9:2a:f4:00:8d:
         87:35:af:55:f8:71:3a:2e:1e:27:f9:ab:cd:27:50:64:9b:7e:
         2c:7e:77:5a:0b:52:af:4a:6c:19:40:f4:99:3f:fc:98:18:8c:
         5c:f4:f2:14:84:5d:37:27:27:b9:8b:68:34:c0:42:fb:59:9d:
         9d:c1:cb:fa:d8:ba:ed:30:33:fa:53:f7:a3:44:cb:4c:58:08:
         7d:e8:d6:63:4e:d0:9c:f3:90:3e:ed:4e:87:c9:16:2d:7f:d7:
         a0:f5:df:6e:f7:58:1c:5e:3b:46:cd:b9:a1:30:5a:66:d8:e6:
         97:13:8a:7e:84:83:31:8b:61:4e:62:10:eb:1d:f0:de:0c:53:
         a5:8c:61:19:ab:45:54:8a:b2:de:ae:49:0f:69:bc:bc:58:6d:
         f2:a7:52:cd:7e:bf:4b:0e:98:56:94:22:e2:cf:88:d8:c5:86:
         02:df:95:8f:d4:90:6b:0f:fe:b7:eb:ea:7d:a3:4d:ab:0d:34:
         4c:96:1a:05:86:15:e5:19:bf:af:c2:0c:40:ae:66:11:91:e3:
         8b:f7:06:98:be:44:6f:7c:8d:20:f9:4c:39:74:aa:45:76:62:
         fa:89:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----