Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.mft
File:                     59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.mft (raw, json)
Hash identifier:          USAYXN4mBQWluHZtMJ9qOE/OpRjLFQyBwRe310bOLfg=
Subject key identifier:   67:5C:8B:4D:4A:B2:8E:39:BA:47:4E:0B:C9:B3:23:24:C0:28:F7:3A
Authority key identifier: 59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB
Certificate issuer:       /CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
Certificate serial:       58836300428266AD3793FB1B0589A2C78D1CDC6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.mft
Manifest number:          041F
Signing time:             Tue 07 Jun 2022 11:50:23 +0000
Manifest this update:     Tue 07 Jun 2022 11:45:23 +0000
Manifest next update:     Wed 08 Jun 2022 12:19:23 +0000
Files and hashes:         1: 3137302e37382e33302e302f32332d3233203d3e20323635323431.roa (hash: uJZUa9ANfWKx98yDh8AS8eqpogODKlirjpt1CmSgnw4=)
                          2: 323830343a326363303a3a2f33332d3333203d3e20323635323431.roa (hash: vYPJVZ2AVKmYdnHutG+mGfJ+QKQd5iq+iickV0qVyI8=)
                          3: 59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.crl (hash: e9g6xq1YiDf6k9OD6kH8BKcyX3oVxdzToYoy4wEcr8o=)
                          4: 323830343a326363303a3a2f33322d3332203d3e20323635323431.roa (hash: e11e/olMCUg8Q2yCDd/GqS59qKpK6ED8/MTkTckaLxQ=)
                          5: 323830343a326363303a383030303a3a2f33332d3333203d3e20323635323431.roa (hash: IPpXzh7hD6EY7oClznM/pD7G8Owa2WGMa7UK9z+XWTc=)
                          6: 3137302e37382e32382e302f32332d3233203d3e20323635323431.roa (hash: dslEmO0veCDZd+u6aXgvNkEyVzYGlTUbfgE0KBHWkcU=)
                          7: 3137302e37382e32382e302f32322d3232203d3e20323635323431.roa (hash: io/jjuELYDjaEAs+rPlsIPDSRTC+jsRvdCGQNbvsoi0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:83:63:00:42:82:66:ad:37:93:fb:1b:05:89:a2:c7:8d:1c:dc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
        Validity
            Not Before: Jun  7 11:45:23 2022 GMT
            Not After : Jun  8 12:19:23 2022 GMT
        Subject: CN=675C8B4D4AB28E39BA474E0BC9B32324C028F73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:31:50:0e:ca:d7:83:e8:4f:cb:3e:35:44:
                    97:21:93:6b:05:e3:5c:3b:66:24:ac:65:16:38:9f:
                    45:9e:43:9b:df:47:03:3e:a7:cf:ba:91:c3:c9:b4:
                    60:51:50:e8:99:b6:d5:35:a7:78:8a:e4:d6:a0:eb:
                    da:a8:13:8a:ee:da:59:a0:86:2c:1e:a3:dd:27:82:
                    cf:ca:ef:1e:2c:eb:87:a2:69:50:0d:e4:c5:e4:f6:
                    7b:72:83:7e:d3:7a:87:29:52:01:99:34:df:bb:8c:
                    43:6a:e6:c4:70:04:ea:81:c2:87:7c:eb:fa:08:5b:
                    7a:b8:05:01:03:c7:02:21:8e:6d:d4:de:eb:ac:9a:
                    4d:82:e6:61:5d:e9:73:66:8c:2a:c3:08:c9:70:20:
                    a1:24:0a:20:52:57:9a:3f:1a:e8:e1:02:b2:62:99:
                    16:5a:75:85:41:c4:46:24:1b:85:56:79:15:bb:e2:
                    e7:dc:37:18:51:0b:02:e7:a4:3e:be:46:9a:90:c7:
                    5d:f6:1c:78:f3:3c:40:47:76:3d:10:5f:2c:31:21:
                    78:0a:25:51:a6:7d:02:78:5c:a2:3e:e3:4d:7b:3b:
                    ba:68:05:98:ed:f3:0f:fb:66:59:b8:74:26:b7:b1:
                    4a:e3:0d:86:53:35:b6:21:4b:02:ab:4e:fb:52:d9:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5C:8B:4D:4A:B2:8E:39:BA:47:4E:0B:C9:B3:23:24:C0:28:F7:3A
            X509v3 Authority Key Identifier:
                keyid:59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9d:98:8d:8d:aa:13:25:f4:1e:f0:bf:9e:27:78:b7:cd:38:
         02:33:a8:e1:0f:2e:dc:67:43:d3:43:39:de:cf:df:b9:2f:52:
         4d:15:6a:ba:e6:6a:70:e4:ca:63:e2:78:34:18:f4:b9:5c:aa:
         d8:49:a7:25:ed:ff:1e:60:2a:79:c5:e9:5c:5f:75:d5:eb:d6:
         89:db:6f:c9:08:22:fc:f8:9b:d1:8c:b3:bf:1d:23:9e:4a:b6:
         20:9f:c0:23:59:72:08:1a:7d:c1:79:cb:7a:82:ce:45:84:58:
         aa:29:4c:fa:74:db:60:67:30:56:d5:47:a3:a3:81:51:dc:b7:
         c2:79:95:55:08:60:35:21:7b:d7:36:d8:9d:75:8e:0d:f5:25:
         09:06:c4:e7:41:6b:b2:6f:5d:2a:58:0b:51:c3:8b:d6:32:36:
         2c:b9:2d:ea:26:0f:c4:5c:09:86:01:6f:55:b0:e8:84:c3:0a:
         ad:15:28:44:ee:d1:c5:ba:80:fd:3e:54:03:da:3e:10:63:fd:
         d1:09:b1:bf:0d:ef:20:c3:ff:97:57:5c:13:ed:93:ef:6c:1c:
         f1:69:8f:0b:b1:90:3a:b1:96:8f:5e:5f:e1:cc:b1:35:9f:22:
         64:5c:95:0e:03:07:98:ee:68:d9:cf:2a:26:ee:3e:3e:08:17:
         e4:f8:ec:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:58 2025 by rpki-client