Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/0/59A5495B65ACE881D3EE118313D2BA4822F2F3E4.mft
File:                     59A5495B65ACE881D3EE118313D2BA4822F2F3E4.mft (raw, json)
Hash identifier:          YoNh5FJwVVush94DvcWMByqUck1zq0ED1T2H/v4Ue3c=
Subject key identifier:   34:ED:69:8D:86:DB:40:54:EC:EF:45:21:8D:27:F0:6D:EB:10:83:C6
Authority key identifier: 59:A5:49:5B:65:AC:E8:81:D3:EE:11:83:13:D2:BA:48:22:F2:F3:E4
Certificate issuer:       /CN=59A5495B65ACE881D3EE118313D2BA4822F2F3E4
Certificate serial:       0B365B8CFBB7367C52B515498DCDB3B274A43E04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59A5495B65ACE881D3EE118313D2BA4822F2F3E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/0/59A5495B65ACE881D3EE118313D2BA4822F2F3E4.mft
Manifest number:          0536
Signing time:             Mon 15 Apr 2024 04:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 03:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 04:00:00 +0000
Files and hashes:         1: 323830343a323962633a3a2f33322d3334203d3e20323634303331.roa (hash: gjs+d3CnMFfTnC6b8MVSez0eV3ppUcKY/soJACltrxQ=)
                          2: 3134332e3133372e35322e302f32322d3234203d3e20323634303331.roa (hash: 5uj/VPLZKqL4FRttit0FVIf+uJ3UdEYF3Q0Giw47Thw=)
                          3: 59A5495B65ACE881D3EE118313D2BA4822F2F3E4.crl (hash: qq2qUE0s3gQlkSORrG+OO/DNde2bnU+YVYHUA7oOclc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:36:5b:8c:fb:b7:36:7c:52:b5:15:49:8d:cd:b3:b2:74:a4:3e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59A5495B65ACE881D3EE118313D2BA4822F2F3E4
        Validity
            Not Before: Apr 15 03:55:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:d6:e2:1a:cf:c3:40:d6:08:de:4b:cf:2e:
                    18:9f:6a:53:eb:86:42:f6:67:8f:40:de:8e:cd:c8:
                    8e:8e:f3:8f:20:54:a0:cc:ba:45:4f:a6:3d:93:ea:
                    e9:81:5d:3d:98:d9:4c:35:1f:39:26:12:ac:d1:3b:
                    b0:48:b5:a0:5f:bc:2f:8a:44:38:c5:d8:e8:3b:b7:
                    9d:f6:d7:53:0c:f9:97:e5:6d:46:fa:6b:75:52:95:
                    ed:ae:7f:9b:e1:42:76:a7:12:af:89:03:58:22:fd:
                    3a:02:92:0d:91:9b:00:b0:88:24:26:fd:0d:86:66:
                    8f:02:ea:b3:96:9f:80:7e:e7:ba:78:fd:13:c1:a8:
                    a5:ff:a6:31:8a:a4:34:31:a9:09:bb:23:17:8e:8e:
                    b7:80:b9:11:bc:13:04:6c:97:05:bd:e9:51:fb:07:
                    54:05:2c:62:a1:57:a9:32:1d:ba:a0:82:8f:88:cd:
                    4e:d6:5b:a7:1b:0d:2f:46:43:9a:7b:22:20:7c:e1:
                    a2:49:1e:1c:76:a0:70:dd:1d:af:87:9b:98:d5:dd:
                    1c:b1:64:f0:b6:b4:fe:22:89:a4:85:0b:58:2e:38:
                    e4:56:18:7c:46:62:c4:e8:12:d9:00:be:d3:a6:e1:
                    ca:74:51:44:79:4a:cd:f5:bd:f2:a9:67:14:91:f4:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:ED:69:8D:86:DB:40:54:EC:EF:45:21:8D:27:F0:6D:EB:10:83:C6
            X509v3 Authority Key Identifier:
                keyid:59:A5:49:5B:65:AC:E8:81:D3:EE:11:83:13:D2:BA:48:22:F2:F3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/0/59A5495B65ACE881D3EE118313D2BA4822F2F3E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59A5495B65ACE881D3EE118313D2BA4822F2F3E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/0/59A5495B65ACE881D3EE118313D2BA4822F2F3E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:fa:9d:7c:7d:f2:29:f3:a6:02:df:ec:10:a7:16:3e:f6:fc:
         f0:79:a4:61:60:8e:fd:89:ac:4e:74:15:e1:61:34:72:3b:38:
         57:79:70:06:ba:2c:f9:f8:ed:1d:d7:28:70:19:e7:6c:c9:1e:
         40:11:af:a7:3e:50:7d:10:f5:40:92:3b:4c:87:a8:5c:4d:19:
         cc:30:7b:fc:4d:01:4b:18:df:93:20:ff:1a:61:cb:78:b4:d3:
         0d:54:47:3c:a8:66:8a:5f:e6:ce:32:d3:ef:28:9b:15:7a:16:
         ac:ef:0b:1c:4d:59:16:31:f2:26:00:26:c2:f3:3a:9b:c1:cf:
         8c:6e:71:32:3a:3c:d7:32:9b:43:bc:73:a1:ef:18:41:54:18:
         35:25:a4:0a:b3:18:6c:6f:80:2f:d8:d8:69:e4:71:97:50:38:
         79:4b:67:6f:30:b5:77:3d:30:65:4c:ef:fd:03:50:76:ed:e4:
         79:e7:a2:b3:6d:35:ee:bd:68:ee:6c:18:9d:41:c2:33:d3:dd:
         88:2f:1b:56:73:2c:25:55:68:c2:89:b6:27:3a:a3:9b:0c:75:
         56:54:a5:ed:d8:05:a3:dc:5c:13:ad:74:b7:51:06:17:00:7f:
         08:8f:f7:e9:e6:56:38:4f:6d:28:de:68:0c:15:c1:3b:e3:31:
         96:d5:9a:f4
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUCzZbjPu3NnxStRVJjc2zsnSkPgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlBNTQ5NUI2NUFDRTg4MUQzRUUxMTgzMTNEMkJBNDgy
MkYyRjNFNDAeFw0yNDA0MTUwMzU1MDBaFw0yNDA0MTYwNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzBCMUQ2RTIxQUNGQzM0MEQ2
MDhERTRCQ0YyRTE4OUY2QTUzRUI4NjQyRjY2NzhGNDBERThFQ0RDODhFOEVGMzhG
MjA1NEEwQ0NCQTQ1NEZBNjNEOTNFQUU5ODE1RDNEOThEOTRDMzUxRjM5MjYxMkFD
RDEzQkIwNDhCNUEwNUZCQzJGOEE0NDM4QzVEOEU4M0JCNzlERjZENzUzMENGOTk3
RTU2RDQ2RkE2Qjc1NTI5NUVEQUU3RjlCRTE0Mjc2QTcxMkFGODkwMzU4MjJGRDNB
MDI5MjBEOTE5QjAwQjA4ODI0MjZGRDBEODY2NjhGMDJFQUIzOTY5RjgwN0VFN0JB
NzhGRDEzQzFBOEE1RkZBNjMxOEFBNDM0MzFBOTA5QkIyMzE3OEU4RUI3ODBCOTEx
QkMxMzA0NkM5NzA1QkRFOTUxRkIwNzU0MDUyQzYyQTE1N0E5MzIxREJBQTA4MjhG
ODhDRDRFRDY1QkE3MUIwRDJGNDY0MzlBN0IyMjIwN0NFMUEyNDkxRTFDNzZBMDcw
REQxREFGODc5Qjk4RDVERDFDQjE2NEYwQjZCNEZFMjI4OUE0ODUwQjU4MkUzOEU0
NTYxODdDNDY2MkM0RTgxMkQ5MDBCRUQzQTZFMUNBNzQ1MTQ0Nzk0QUNERjVCREYy
QTk2NzE0OTFGNEZCNTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwLHW4hrPw0DWCN5Lzy4Yn2pT64ZC9mePQN6OzciOjvOPIFSgzLpF
T6Y9k+rpgV09mNlMNR85JhKs0TuwSLWgX7wvikQ4xdjoO7ed9tdTDPmX5W1G+mt1
UpXtrn+b4UJ2pxKviQNYIv06ApINkZsAsIgkJv0NhmaPAuqzlp+Afue6eP0Twail
/6YxiqQ0MakJuyMXjo63gLkRvBMEbJcFvelR+wdUBSxioVepMh26oIKPiM1O1lun
Gw0vRkOaeyIgfOGiSR4cdqBw3R2vh5uY1d0csWTwtrT+IomkhQtYLjjkVhh8RmLE
6BLZAL7TpuHKdFFEeUrN9b3yqWcUkfT7VwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FDTtaY2G20BU7O9FIY0n8G3rEIPGMB8GA1UdIwQYMBaAFFmlSVtlrOiB0+4RgxPS
ukgi8vPkMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ4cFZZazRZcG5xakJq
bkFOTnliZHRGQnZFazVMZlhxS1RTUkR1Tlg2NHA3LzAvNTlBNTQ5NUI2NUFDRTg4
MUQzRUUxMTgzMTNEMkJBNDgyMkYyRjNFNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81OUE1NDk1QjY1QUNFODgxRDNFRTExODMxM0QyQkE0ODIyRjJG
M0U0LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ4cFZZazRZcG5xakJqbkFOTnli
ZHRGQnZFazVMZlhxS1RTUkR1Tlg2NHA3LzAvNTlBNTQ5NUI2NUFDRTg4MUQzRUUx
MTgzMTNEMkJBNDgyMkYyRjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALT6nXx98inzpgLf7BCnFj72
/PB5pGFgjv2JrE50FeFhNHI7OFd5cAa6LPn47R3XKHAZ52zJHkARr6c+UH0Q9UCS
O0yHqFxNGcwwe/xNAUsY35Mg/xphy3i00w1URzyoZopf5s4y0+8omxV6FqzvCxxN
WRYx8iYAJsLzOpvBz4xucTI6PNcym0O8c6HvGEFUGDUlpAqzGGxvgC/Y2GnkcZdQ
OHlLZ28wtXc9MGVM7/0DUHbt5HnnorNtNe69aO5sGJ1BwjPT3YgvG1ZzLCVVaMKJ
tic6o5sMdVZUpe3YBaPcXBOtdLdRBhcAfwiP9+nmVjhPbSjeaAwVwTvjMZbVmvQ=
-----END CERTIFICATE-----