Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D959D60550D2B090C6370A3D59F3C84D80500A88.mft
File:                     D959D60550D2B090C6370A3D59F3C84D80500A88.mft (raw, json)
Hash identifier:          spL5YjSZw1PMIzJzV9ZOcYkRxQCHn4Qn/K1mJ7tzJlQ=
Subject key identifier:   14:0F:9C:94:55:E1:9E:80:20:2F:79:00:C5:FA:EE:46:51:0A:08:F2
Authority key identifier: D9:59:D6:05:50:D2:B0:90:C6:37:0A:3D:59:F3:C8:4D:80:50:0A:88
Certificate issuer:       /CN=D959D60550D2B090C6370A3D59F3C84D80500A88
Certificate serial:       5EA2D5F93033A3EBAD58DE7FC33E648A6D842114
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D959D60550D2B090C6370A3D59F3C84D80500A88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D959D60550D2B090C6370A3D59F3C84D80500A88.mft
Manifest number:          60
Signing time:             Thu 22 Jun 2023 04:44:32 +0000
Manifest this update:     Thu 22 Jun 2023 04:39:32 +0000
Manifest next update:     Fri 23 Jun 2023 06:40:32 +0000
Files and hashes:         1: 34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa (hash: 3VSCzs2LJkW0L3aEd/mcgV5d8/pov7STQWNg7/EiwsY=)
                          2: 323830343a346264383a3a2f33322d313238203d3e20323637333332.roa (hash: NOIEymuvz4LUWZv6FcmbvTqtpNS/M7Lei+eWg+qveK4=)
                          3: D959D60550D2B090C6370A3D59F3C84D80500A88.crl (hash: caU9ePc7y4toRwQZNwkGPFQXoUvODF5y2vijgS/n1u8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a2:d5:f9:30:33:a3:eb:ad:58:de:7f:c3:3e:64:8a:6d:84:21:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D959D60550D2B090C6370A3D59F3C84D80500A88
        Validity
            Not Before: Jun 22 04:39:32 2023 GMT
            Not After : Jun 23 06:40:32 2023 GMT
        Subject: CN=140F9C9455E19E80202F7900C5FAEE46510A08F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f8:0d:1c:4a:1a:85:c5:6b:91:c1:35:fb:2b:
                    b9:32:15:2d:78:19:ec:55:f6:0f:6e:c8:d8:97:f6:
                    0e:1b:14:0e:bc:72:ff:9d:9f:aa:86:c1:90:d5:6c:
                    c2:fe:d2:69:e4:e2:7a:d9:b4:7e:fa:d9:9d:44:06:
                    b9:21:04:c3:2a:8a:43:cc:62:68:1d:f1:f7:33:e2:
                    a4:c6:ac:96:b9:2c:f6:00:b6:ff:e2:f2:2c:40:84:
                    a2:48:c6:89:22:74:58:a0:df:fe:10:e8:1b:77:2f:
                    30:75:70:aa:04:19:5c:78:12:be:7c:8a:82:a1:fe:
                    dd:12:63:71:96:50:66:4e:a8:a3:1f:ab:ca:39:94:
                    04:f0:e6:f5:55:86:e3:e3:c0:fc:09:d7:ea:0d:de:
                    c1:ad:c2:07:f0:c9:7e:2e:1f:19:1e:71:18:85:ef:
                    4f:29:f7:dc:65:98:54:87:1d:a3:b1:0a:54:aa:ea:
                    8b:4a:80:6d:65:9b:5b:75:da:4a:a4:a5:20:21:1a:
                    76:c5:7c:9a:cd:4d:e2:01:46:78:00:66:50:6b:27:
                    9e:93:78:f5:82:b6:11:37:ff:39:26:ff:c2:c7:ae:
                    ef:5c:88:44:d2:22:d0:2e:3f:b3:1d:3c:3d:03:5b:
                    7e:ce:b6:df:b5:1c:93:5f:40:19:ee:8f:d9:ec:78:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0F:9C:94:55:E1:9E:80:20:2F:79:00:C5:FA:EE:46:51:0A:08:F2
            X509v3 Authority Key Identifier:
                keyid:D9:59:D6:05:50:D2:B0:90:C6:37:0A:3D:59:F3:C8:4D:80:50:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D959D60550D2B090C6370A3D59F3C84D80500A88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D959D60550D2B090C6370A3D59F3C84D80500A88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D959D60550D2B090C6370A3D59F3C84D80500A88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:e0:b8:30:4f:b1:a8:67:98:8b:69:be:23:9f:14:9a:7c:
         35:48:1b:0e:83:d5:f8:79:d0:d2:90:e0:f5:b8:76:49:2b:ed:
         cb:ce:cd:b5:5f:d7:bb:94:42:1a:41:dd:dd:e0:2f:24:8c:43:
         0f:66:28:4b:ea:e3:cb:a4:e4:98:d6:46:ad:98:53:2e:d7:fe:
         dd:c3:59:91:a4:53:63:28:48:89:87:a2:f0:d2:05:8a:c2:db:
         18:60:10:a1:46:b6:b5:d6:34:c7:18:a1:d5:d0:cb:87:33:d7:
         62:17:a7:df:e2:5d:d6:25:5f:24:9b:90:5b:ce:18:d5:a1:21:
         e4:1e:84:d5:d6:5b:a3:8f:35:63:a4:64:c4:ed:c4:e7:da:22:
         e2:66:38:77:0a:1b:0b:bf:3b:15:ca:8f:f6:5a:bd:a9:f4:7a:
         ed:6f:a9:fa:58:70:6f:e1:a0:41:90:df:a8:4f:85:5d:b1:bb:
         1c:9d:99:2d:d2:c6:28:81:1c:b4:6c:d6:5a:78:5d:dd:6e:f0:
         49:ce:ae:fb:bb:22:52:8c:49:ca:55:14:88:e6:7b:f3:47:cc:
         6f:8b:da:9e:cb:bd:e7:20:44:e0:46:56:83:52:4e:3f:c7:da:
         5d:d6:b8:ab:58:6a:b8:f1:70:97:18:90:88:3f:95:70:39:fc:
         a3:54:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----