Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.mft
File:                     F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.mft (raw, json)
Hash identifier:          Sgj5V+kbJFkJzUr4ngrmSubhm4VyuFJmVcCHKPUIvNQ=
Subject key identifier:   81:36:E4:44:EA:3C:F8:8B:C8:92:F4:65:63:A0:83:16:03:30:76:ED
Authority key identifier: F5:9D:BF:BA:13:85:F6:63:D3:E9:DD:D0:95:7D:E8:E7:6B:CD:71:F4
Certificate issuer:       /CN=F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4
Certificate serial:       72A92F930BAF0BFDF37799AA32BE2D30A9B02FA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.mft
Manifest number:          67
Signing time:             Wed 19 Jun 2024 09:24:32 +0000
Manifest this update:     Wed 19 Jun 2024 09:19:32 +0000
Manifest next update:     Thu 20 Jun 2024 11:58:32 +0000
Files and hashes:         1: 3133382e302e32342e302f32322d3233203d3e20323634353339.roa (hash: iBaiFRepIX3ZBIkGWsu5zvgM3wPGDSCHtQVCKiHaN3Q=)
                          2: F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.crl (hash: MtAuNQWp0CurFKIUptLxh2iHisU9OXb/0rtcya8oDwU=)
                          3: 323830343a323132383a3a2f33322d3332203d3e20323634353339.roa (hash: hIAo5aMMX+iw5N90vq/uILr/tCr29p5EzPKmNdzl9dk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a9:2f:93:0b:af:0b:fd:f3:77:99:aa:32:be:2d:30:a9:b0:2f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4
        Validity
            Not Before: Jun 19 09:19:32 2024 GMT
            Not After : Jun 20 11:58:32 2024 GMT
        Subject: CN=8136E444EA3CF88BC892F46563A08316033076ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:17:c4:f4:73:32:39:32:d6:6e:e3:0e:44:
                    1f:5d:a0:50:2b:02:cd:b1:8c:60:21:e1:07:35:c7:
                    ff:c4:d6:a1:a8:9e:9f:b1:8d:06:fa:b9:69:fb:a5:
                    53:ce:c2:e5:a7:02:d3:fe:d2:85:b1:36:d2:fc:b5:
                    72:ed:24:c1:ed:ba:f2:a5:7a:87:df:83:76:94:b8:
                    8a:13:f5:fc:dc:33:02:f2:2e:7e:07:6b:09:56:4c:
                    77:3b:42:9f:6a:da:1b:d7:a8:db:87:e1:d1:8e:4b:
                    12:a9:e5:6c:d5:1e:ef:ee:9c:d8:3a:d5:83:cb:c2:
                    22:94:e9:b0:36:14:9b:9b:9d:67:52:fc:d0:c6:4c:
                    11:43:31:5b:a4:80:ab:af:e5:f6:7a:70:f5:bd:92:
                    23:7e:22:c4:23:df:75:76:25:35:cf:58:ff:b8:9e:
                    e6:dc:ee:aa:cb:71:b5:c1:57:6b:61:de:e0:63:52:
                    bb:39:91:fa:27:f9:6e:4f:72:30:6c:14:9d:4d:8e:
                    f6:27:46:69:9e:fb:fc:08:a1:b1:a7:cd:f0:78:5b:
                    65:89:1e:b4:8f:6f:35:0b:7a:9d:2c:df:0f:d5:e1:
                    72:88:0e:29:90:b7:96:8d:57:a3:94:c6:58:a4:05:
                    1f:c7:d6:73:b3:da:1b:80:24:eb:a1:8f:ed:8a:9f:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:36:E4:44:EA:3C:F8:8B:C8:92:F4:65:63:A0:83:16:03:30:76:ED
            X509v3 Authority Key Identifier:
                keyid:F5:9D:BF:BA:13:85:F6:63:D3:E9:DD:D0:95:7D:E8:E7:6B:CD:71:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:20:3c:4b:6e:8b:f8:63:b8:07:72:4e:d9:23:de:66:87:08:
         d6:57:25:d6:9f:e6:7b:2e:a7:56:1d:00:ec:73:1e:05:87:62:
         3d:6f:02:ca:c9:92:9e:8f:11:5b:f5:e2:3f:5a:ba:0d:eb:14:
         08:7e:4c:d2:96:b1:da:fe:6e:3e:2c:77:58:24:de:33:96:ec:
         ce:7a:b5:04:f4:dc:5f:d1:26:14:0a:34:48:9d:55:53:0c:98:
         fd:47:9c:ed:27:29:26:e9:92:43:08:30:41:46:07:20:4c:80:
         ca:84:33:4a:b8:97:fd:e9:79:32:c9:23:62:99:6d:49:17:0e:
         77:dd:68:93:40:18:21:44:38:a9:b8:31:41:fa:41:ca:3b:fd:
         83:97:94:d4:db:4b:a9:d7:09:24:b9:69:76:55:89:b9:01:a0:
         1f:68:9d:ab:36:ec:77:00:a8:f3:1a:c6:32:ea:63:52:71:e2:
         6d:a2:6f:23:fb:e4:41:09:dc:ee:a2:2a:79:58:a7:69:4c:de:
         4e:aa:96:d8:80:57:f2:3e:a4:02:21:b9:33:24:1b:dc:4a:4c:
         42:c4:73:d9:7e:d7:d4:2b:13:d7:5f:80:2c:ac:7d:d5:3b:ae:
         a5:1e:08:bc:11:8b:c6:b2:b2:5a:e9:21:f9:04:61:2c:a7:77:
         9a:2e:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----