Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.mft
File:                     A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.mft (raw, json)
Hash identifier:          P2Knbhfnq/lvBiiHQ2ELdpjoxoU9FRK2CUZnUymcLgw=
Subject key identifier:   8B:C3:4E:AD:90:A2:2D:C9:4C:BA:4A:19:84:93:5A:97:4B:0C:0C:71
Authority key identifier: A5:9A:BE:7B:06:BA:78:CB:C1:B5:62:CF:C8:A8:90:C3:9B:BA:C8:77
Certificate issuer:       /CN=A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877
Certificate serial:       12D0DBE50A66777A0BEC00F68CEE160F3712FC03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.mft
Manifest number:          0377
Signing time:             Sun 14 Apr 2024 22:47:07 +0000
Manifest this update:     Sun 14 Apr 2024 22:42:07 +0000
Manifest next update:     Tue 16 Apr 2024 02:14:07 +0000
Files and hashes:         1: A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.crl (hash: Bp/GDq9+QPcH+cnoNI35shu3Wz8uu65lpYrwvhMLe2I=)
                          2: 3137372e38372e3130392e302f32342d3234203d3e203532353934.roa (hash: Pi1Hj70xfayHO/THpyYWweQLR6PXFRit/h5/NdH58aY=)
                          3: 3137372e38372e3131302e302f32342d3234203d3e203532353934.roa (hash: r4Yp3E8aRgsEyua2roxCcUImb2aPFwT1vXvwpWUzBg4=)
                          4: 3137372e38372e3131312e302f32342d3234203d3e203532353934.roa (hash: EMWAJEhd7OQTPc2nVcw2pxdZhAGMoNTBG8fg3wvWuJc=)
                          5: 3137372e38372e3130382e302f32342d3234203d3e203532353934.roa (hash: sB3RvtllayikSyxeCr3nfmG0CYp3XDJ8gv8+m2o9pA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d0:db:e5:0a:66:77:7a:0b:ec:00:f6:8c:ee:16:0f:37:12:fc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877
        Validity
            Not Before: Apr 14 22:42:07 2024 GMT
            Not After : Apr 16 02:14:07 2024 GMT
        Subject: CN=8BC34EAD90A22DC94CBA4A1984935A974B0C0C71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:ff:dd:bc:c3:49:32:4f:f3:1d:f7:f4:65:
                    44:2e:00:33:80:82:54:30:a5:f1:d9:60:2e:d2:af:
                    88:8a:31:4a:39:a3:fe:ca:f7:cc:99:fb:da:fe:42:
                    b7:b1:63:1f:03:bf:e4:0c:28:12:b0:42:06:d4:3e:
                    a5:1a:b4:13:df:ce:0f:df:e7:a8:db:ad:0b:32:5f:
                    21:52:52:e2:93:d8:ce:d7:19:37:55:de:ce:92:af:
                    ce:2b:bd:76:d7:67:cd:4c:4d:c9:57:33:99:29:e1:
                    41:dd:18:5d:15:bd:74:6f:ce:86:dd:61:97:9a:e9:
                    d0:d8:1d:95:82:57:99:2b:d7:b9:99:d7:70:b0:82:
                    72:10:62:2f:5b:41:d8:49:80:ed:09:ab:2c:b0:0d:
                    2a:c6:0b:55:6a:1b:ec:31:ee:dc:b5:5e:9c:84:d9:
                    bf:f4:89:6c:f2:0c:a2:32:fe:4f:d0:91:3f:de:b4:
                    92:e0:e8:33:70:90:11:4d:19:12:33:c2:5f:94:2f:
                    1a:4c:4d:91:78:e1:2e:55:04:6b:0b:e2:57:b0:44:
                    36:ec:ed:14:71:75:11:86:b3:2b:a1:cf:c1:f8:9e:
                    ee:d0:2f:ec:5a:00:9d:f1:ba:56:32:fc:81:6d:04:
                    70:bb:6d:e0:d5:b1:58:ef:c8:06:04:4a:0f:75:e3:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C3:4E:AD:90:A2:2D:C9:4C:BA:4A:19:84:93:5A:97:4B:0C:0C:71
            X509v3 Authority Key Identifier:
                keyid:A5:9A:BE:7B:06:BA:78:CB:C1:B5:62:CF:C8:A8:90:C3:9B:BA:C8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:66:84:65:99:ad:ce:97:54:86:e6:42:4e:d0:84:08:74:00:
         5a:bb:92:ac:8b:83:67:00:14:20:32:ad:d3:12:23:5a:74:4f:
         63:3a:4f:5d:c5:94:8d:b9:ac:fb:bc:93:64:d1:89:67:00:40:
         3c:0b:e9:67:0c:08:a1:bc:17:ef:9e:07:81:40:ed:83:ec:ef:
         27:94:da:dd:2a:82:f8:c4:0b:b0:6b:6f:54:10:2c:d9:b6:26:
         90:75:5f:34:3d:55:d4:99:56:4b:e8:c5:15:0d:0b:8f:bc:17:
         b9:88:e0:ed:ae:17:53:58:d2:ce:91:bf:02:79:cf:80:17:e1:
         40:3b:56:dd:a1:66:b8:7f:93:d1:ed:cd:26:5a:9e:60:43:ad:
         9a:18:8c:2a:21:60:99:81:34:2f:29:34:fe:d0:90:6c:a3:fd:
         cd:42:86:40:b0:cc:46:1d:fa:ca:de:35:9c:11:b8:bc:5c:95:
         3f:98:50:fd:e1:b1:80:e2:ab:40:e5:c0:b9:65:ef:32:4e:29:
         2c:38:76:ad:12:29:49:f6:37:aa:9b:80:48:4a:d7:4c:d8:a0:
         e8:fd:13:1b:44:82:af:66:2d:f6:5d:8b:33:4d:3e:bc:ec:ac:
         79:4b:84:85:77:7f:bf:74:d0:0b:27:bb:90:f1:32:e5:0d:e4:
         6f:37:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----