Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.mft
File:                     CA298D59E7C66D747401ACF553288EF82DA95796.mft (raw, json)
Hash identifier:          lWD+EYVWuebIGyf6kL7KVz++FwmR7Kb4Hg4PsQYI4bM=
Subject key identifier:   5D:BB:70:BE:1F:B1:70:73:8A:77:2B:9D:4E:C4:6A:90:63:0F:10:8B
Authority key identifier: CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96
Certificate issuer:       /CN=CA298D59E7C66D747401ACF553288EF82DA95796
Certificate serial:       5F1971E771CBCAF6719A4A25B22CFF559EE3FEF4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.mft
Manifest number:          3B
Signing time:             Sun 14 Apr 2024 20:04:57 +0000
Manifest this update:     Sun 14 Apr 2024 19:59:57 +0000
Manifest next update:     Mon 15 Apr 2024 21:34:57 +0000
Files and hashes:         1: 3138372e3130392e3131342e302f32332d3234203d3e20323732373533.roa (hash: hTvJlts23dblIh2lqyRh2/iwV6NCWFDD9MtSznwFXsY=)
                          2: 3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa (hash: /50NOG2XGIwWNXG8X+fFwAydF6tivn0b8LBY+EtMKyo=)
                          3: 323830343a383832343a3a2f33322d3438203d3e20323732373533.roa (hash: jpzDnTOYV8C8W8LuFxlCM2xsH8AIAq4Jo5C7UeU4bX8=)
                          4: 323830343a383832343a3130303a3a2f34302d3432203d3e20323732373533.roa (hash: UgQ31JHRt7QKLd3aOubwFQOTFstKFA+8QRQoq6x4hRE=)
                          5: CA298D59E7C66D747401ACF553288EF82DA95796.crl (hash: qt4/QiGJN89TqkWOPrY1zTNeUffByvKU3DkrmvhWC/E=)
                          6: 3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa (hash: ItxAVY5zFdhw6hlyTVFSJp68TR4TaECfMrlykuSHIAk=)
                          7: 323830343a383832343a3230303a3a2f34302d3432203d3e20323732373533.roa (hash: RoxoSA8J3q8o3Q1Qdi8dOX/0JdEIFCoR2JLRpf4RSq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:19:71:e7:71:cb:ca:f6:71:9a:4a:25:b2:2c:ff:55:9e:e3:fe:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA298D59E7C66D747401ACF553288EF82DA95796
        Validity
            Not Before: Apr 14 19:59:57 2024 GMT
            Not After : Apr 15 21:34:57 2024 GMT
        Subject: CN=5DBB70BE1FB170738A772B9D4EC46A90630F108B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:19:3d:eb:f8:33:bc:24:dd:70:be:ca:a5:
                    9b:01:de:7d:1c:db:b6:7d:b9:96:88:dc:7c:dd:fb:
                    96:f1:55:86:4a:7c:8c:1c:4e:db:05:3b:4c:0f:ec:
                    bc:6b:bb:d4:87:31:17:9b:47:7f:ca:05:a0:d8:69:
                    e1:cb:26:57:85:5f:f4:f6:06:53:23:14:53:39:da:
                    a2:b7:17:81:4a:c2:63:57:2e:5c:ed:15:ba:98:c8:
                    72:fe:0e:24:c8:96:e9:e8:1c:68:50:f9:8c:ce:7c:
                    68:c8:2f:87:4b:68:76:92:10:4d:c2:1c:48:d4:21:
                    e1:9c:32:81:68:3a:d6:06:ed:64:c4:1b:9f:bc:51:
                    97:39:1c:5a:d3:4d:19:3c:53:3a:14:f2:be:cf:9c:
                    1e:d9:42:e6:69:13:22:0a:18:8d:4d:57:f3:a5:d0:
                    d8:fb:a7:03:12:29:30:7b:e3:54:3a:da:1c:1e:34:
                    55:ff:dc:ab:73:34:e1:e0:39:c5:5b:17:d6:c6:c6:
                    0c:f4:af:2d:59:17:dd:a2:cd:60:cd:f5:43:8c:c4:
                    04:2b:5c:89:ed:0c:92:96:8c:d9:c2:0e:df:7e:56:
                    0d:3e:4f:70:a6:9d:59:0b:18:49:5c:02:b6:1c:f6:
                    c4:5a:77:9e:c1:c5:fc:5b:94:74:67:c6:17:e3:f9:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BB:70:BE:1F:B1:70:73:8A:77:2B:9D:4E:C4:6A:90:63:0F:10:8B
            X509v3 Authority Key Identifier:
                keyid:CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c1:33:e3:3d:54:32:ec:b5:40:de:90:2e:d0:2c:91:6b:92:
         52:26:21:de:1c:a9:22:73:71:61:b3:7f:7f:7f:31:c9:fe:1f:
         59:cf:f8:7a:78:11:04:8a:94:60:81:77:01:71:01:9e:c4:12:
         03:01:54:bf:6b:16:bc:d3:f3:d3:5a:86:22:e1:fe:91:a4:15:
         62:14:5e:fb:2f:2d:39:09:a7:fe:2f:e9:0b:c4:59:b1:e3:f9:
         3d:2b:82:1a:a0:c8:8e:70:b8:89:2b:91:8e:03:ac:74:87:f6:
         dd:21:8b:e2:98:f7:23:24:54:9b:7b:38:56:f0:ce:1d:ef:6f:
         eb:89:e9:4f:c7:27:be:55:4e:7b:ed:9a:0c:fd:db:85:69:da:
         4c:43:ca:37:58:9b:bc:dc:2d:04:08:dc:c7:4d:80:a2:4d:55:
         85:25:5c:a0:ea:97:c8:fd:aa:fb:c4:7a:7b:54:d6:aa:de:77:
         ea:42:d1:b7:2c:49:f3:3b:4b:e1:fd:ab:f7:57:0a:99:91:8a:
         a8:31:f6:8a:82:39:1a:28:35:4c:70:46:14:be:dd:b0:1a:92:
         de:98:c4:f6:07:d9:56:33:61:ae:f0:ba:6d:8c:4b:38:9b:54:
         5a:1d:fc:5a:6d:37:1a:d7:e4:1b:25:5f:54:96:a3:e2:7a:f0:
         ee:62:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----