Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.mft
File:                     588EE00910FA303185B2D60E297C4C76D993A8E1.mft (raw, json)
Hash identifier:          WsfZx/HnxTs0Xc2LgiItbSmYPzjJ06czcFVP0CTzfvA=
Subject key identifier:   B1:CE:13:00:97:B9:5F:31:B1:E3:18:B5:62:58:8F:F6:3A:1D:C1:8F
Authority key identifier: 58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1
Certificate issuer:       /CN=588EE00910FA303185B2D60E297C4C76D993A8E1
Certificate serial:       5DC009B7C84253AA0057D2AF06FEB69D2E84570C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.mft
Manifest number:          0584
Signing time:             Mon 15 Apr 2024 02:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 02:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 02:10:00 +0000
Files and hashes:         1: 3137372e39322e3139322e302f32312d3234203d3e20323632373239.roa (hash: ibP6e7bKuL6pRLT+7AJmpxv8quL4G/EEn6Jv00EHMqI=)
                          2: 3134332e3230382e3139322e302f32322d3234203d3e20323632373239.roa (hash: //5l7aTeg6QOiL9IIi1l7fjLnNIX6tNm2KkNdHpzClw=)
                          3: 3136382e3139372e3232342e302f32322d3234203d3e20323632373239.roa (hash: taEc2YO8h/Ny5G5ufeI0nCDyPL5zsV90TA9gZJTqOI0=)
                          4: 3138362e3139332e3134342e302f32302d3234203d3e20323632373239.roa (hash: zXzcXT5w99tOqHnumGyRssuKw7dMrO+mlq9OgI5vzXE=)
                          5: 34352e372e3135362e302f32322d3234203d3e20323632373239.roa (hash: MOOahd1l8UtbSrBIFhBjfs2NFtjvr6HCWym+pXd+DBs=)
                          6: 3138362e3139332e3132382e302f32302d3234203d3e20323632373239.roa (hash: ZSj2NKQ4GedBm37gb0eAxMSrQVw/VS7OYNJs70fwQnU=)
                          7: 323830343a313664383a3a2f33322d3438203d3e20323632373239.roa (hash: P22ETbb57CFpWK+wmk9qjDLfXTJrph+JmtcAP6b33Zw=)
                          8: 588EE00910FA303185B2D60E297C4C76D993A8E1.crl (hash: p9Q8EZezCJkXJ70YdyIQy3f2CuTm04xbYpUxz7E+uZE=)
                          9: 3137372e39322e3230302e302f32312d3234203d3e20323632373239.roa (hash: WwIE6YciGEP5lfj65/fajKmwP91rIPO2ACwteIkwTdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c0:09:b7:c8:42:53:aa:00:57:d2:af:06:fe:b6:9d:2e:84:57:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588EE00910FA303185B2D60E297C4C76D993A8E1
        Validity
            Not Before: Apr 15 02:05:00 2024 GMT
            Not After : Apr 22 02:10:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:b6:d2:c1:8d:33:b4:59:12:9d:47:b5:7c:
                    93:d5:05:0a:e0:e0:ab:14:fe:9a:e8:5a:8f:4a:1f:
                    c9:e9:86:fe:43:7d:ae:4b:d0:84:31:2e:ea:d5:26:
                    6e:02:6f:ec:30:91:b1:93:1f:c6:e4:94:87:3e:b5:
                    55:92:8f:23:3d:22:61:d0:3a:fe:b0:3d:ec:a4:83:
                    25:fe:0f:97:09:57:07:96:46:8a:e9:90:b3:04:58:
                    bb:08:cc:8e:55:49:84:ec:81:93:1a:5d:66:c3:12:
                    1e:31:f6:65:53:97:99:ee:1f:ce:b7:5b:dd:5a:46:
                    da:9b:2c:db:7a:e1:60:5b:43:20:d5:32:dd:29:92:
                    1a:9e:11:34:d9:22:e1:ce:f4:17:0a:80:6e:08:fc:
                    c3:95:ba:f2:c1:e2:6e:eb:55:84:e7:69:9f:9d:f6:
                    b8:0a:7d:eb:10:e2:9a:4f:44:9e:b8:25:fc:49:b5:
                    ac:e7:6f:f3:c4:91:e4:5f:71:5b:29:36:f3:86:2a:
                    ea:a9:34:0e:d2:3c:ad:14:d2:b1:13:e5:e1:15:40:
                    9f:a8:a1:c8:ea:21:4d:c7:e0:04:2f:ee:f8:2b:eb:
                    2d:bb:f6:8a:cb:2e:59:8a:d7:97:19:7c:f3:45:12:
                    2b:9b:77:08:99:b2:74:32:d4:0b:4e:e1:24:06:61:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CE:13:00:97:B9:5F:31:B1:E3:18:B5:62:58:8F:F6:3A:1D:C1:8F
            X509v3 Authority Key Identifier:
                keyid:58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b9:95:a7:7e:52:4a:27:65:90:64:c0:11:58:f4:fc:a0:7d:
         85:c0:c5:0b:df:46:22:6d:e0:be:c4:46:93:d7:1b:84:5c:a4:
         f1:00:50:27:45:01:7a:87:02:38:4e:b5:f3:ef:24:ee:52:da:
         22:85:e5:35:60:0e:05:8a:fd:25:fd:eb:21:b6:70:c2:6f:b8:
         c9:64:81:88:5e:a0:73:9f:5c:4a:10:bf:e3:b3:11:f2:17:51:
         35:e3:c6:7a:dc:23:a9:1e:a3:f5:a2:81:f0:35:2f:58:b2:92:
         f6:59:07:9a:ee:14:a0:11:83:bc:c9:e5:07:40:ac:48:88:79:
         a9:08:47:8a:76:b1:85:8c:df:97:6f:bc:c2:09:df:71:fa:5c:
         50:84:c7:22:3c:19:32:ec:2f:60:c8:50:00:5f:71:8c:94:8f:
         8a:42:0b:c3:a7:e8:1c:53:69:0f:40:24:5c:99:6a:6d:61:d1:
         5b:d0:d0:45:39:f6:de:66:43:51:80:b4:6c:c3:a2:a7:c2:77:
         dc:29:1f:ac:2c:07:19:68:55:32:e0:fc:21:fd:35:ee:16:3d:
         a6:81:0f:3e:91:f4:b3:5b:43:13:7c:33:a7:c0:65:8d:2a:1d:
         ba:d9:5a:4f:b5:1c:47:27:8b:dc:f8:b9:c3:87:0f:c1:ac:93:
         32:ec:81:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----