Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.mft
File:                     D53176AB725D41F3BF221A9749BC59C1DC62F981.mft (raw, json)
Hash identifier:          XP6EjidwU2HU32sUY9+Q+mvHRxv3kXxapqyL8msZn70=
Subject key identifier:   36:92:86:7A:D3:7A:B9:65:99:5F:E6:34:03:1C:27:C2:EA:9E:5E:6B
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       59C3656534CC587D04C37AE76ADCAF47F70E3172
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.mft
Manifest number:          0176
Signing time:             Mon 15 Apr 2024 11:46:15 +0000
Manifest this update:     Mon 15 Apr 2024 11:41:15 +0000
Manifest next update:     Tue 16 Apr 2024 13:30:15 +0000
Files and hashes:         1: D53176AB725D41F3BF221A9749BC59C1DC62F981.crl (hash: jTGuqgcAKMnukHmjL9zq2uqTAWD9LLnYKP3mEcsDzeU=)
                          2: 3136382e39302e32342e302f32322d3233203d3e20323633333231.roa (hash: QxxNqtfLw/jya5RWWpgi+018WaZ0u0+pdovV8Y2+jw4=)
                          3: 3133382e3131372e32342e302f32322d3233203d3e20323633333231.roa (hash: eImA1c/eD84WNKSn/M3yxgoDeKhPI856ZuIR8Clqgfo=)
                          4: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (hash: YxW33lW8ebcHyuj8KamtO/HSZK/MyK0QGmuoWnQZxqo=)
                          5: 3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa (hash: 4SN+fNPiz0YAYOrBSImWD4aO4walUJ7FF9f6hr8gObw=)
                          6: 3133382e3131372e32342e302f32322d3234203d3e20323633363231.roa (hash: /1IT1NMJwZ0dJFZ8JC+K+8pJafRdOQFeUCeTFKDAmLg=)
                          7: 323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (hash: lxzulD/cJ0vj7TBlEAHTX0/av5qI3Pw+xNRcFRdaFaE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c3:65:65:34:cc:58:7d:04:c3:7a:e7:6a:dc:af:47:f7:0e:31:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Apr 15 11:41:15 2024 GMT
            Not After : Apr 16 13:30:15 2024 GMT
        Subject: CN=3692867AD37AB965995FE634031C27C2EA9E5E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:12:30:66:dc:56:49:86:bb:06:fc:4e:7c:
                    68:92:51:fc:f5:1c:65:49:47:5b:a6:c5:37:bb:c2:
                    8a:a8:17:74:78:a4:d0:52:3f:44:75:d5:13:93:f4:
                    05:9b:3e:94:1f:bb:d6:12:11:f1:61:5c:16:cf:53:
                    a0:6b:1c:e3:ac:53:9f:13:97:9c:0c:f6:32:a3:79:
                    3d:b0:8b:84:49:c4:9d:79:05:ea:ab:8e:d2:a7:b8:
                    f0:a3:2d:74:96:03:0c:18:22:18:6c:73:58:73:9a:
                    c8:fd:76:df:6e:1f:e5:4c:68:9a:01:64:36:6e:96:
                    e9:44:ae:0d:7a:28:2a:4b:d8:bf:1a:b9:e9:8f:3d:
                    f9:e5:40:63:88:67:9d:a1:16:33:51:9e:0f:8e:7f:
                    3c:ae:a1:21:b7:36:8c:d8:fb:49:92:e8:29:de:4f:
                    bd:19:58:0a:78:cb:22:bf:d8:fe:e3:20:94:d0:81:
                    3d:9b:de:2d:0d:99:d2:10:39:7d:14:89:0e:dc:45:
                    ed:5a:bd:5d:e7:5a:65:fe:4e:1a:e9:08:7f:ca:8a:
                    b2:43:dc:c0:9b:77:4b:84:5a:b9:42:43:0f:9a:b7:
                    06:fc:2c:43:a1:4a:95:cb:aa:83:cb:b6:cb:62:59:
                    e9:f0:79:d8:9b:47:94:6a:92:1b:ac:7e:3a:94:d3:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:92:86:7A:D3:7A:B9:65:99:5F:E6:34:03:1C:27:C2:EA:9E:5E:6B
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:53:aa:02:e4:3c:17:5e:ed:85:77:2c:ea:38:c0:04:b6:
         23:d1:2d:0c:5a:b2:d4:80:60:c8:5f:c9:28:6b:55:84:50:d2:
         07:be:de:12:3b:f2:5a:34:4c:e1:14:c7:80:6a:2c:85:f0:9d:
         5f:ae:df:81:66:7b:6c:38:10:b3:af:8d:63:51:f2:93:d9:59:
         1f:c1:81:1e:4f:22:84:90:4b:91:db:af:1c:28:78:2e:c5:42:
         b4:1e:f5:13:0b:5b:45:54:47:af:0f:15:07:09:7e:e1:2c:35:
         40:69:36:b0:7e:59:31:fd:8d:fd:fd:e0:9c:25:5c:5f:77:a8:
         94:29:d0:ff:69:60:af:60:fb:fe:06:7e:b0:f9:54:4d:e4:b9:
         5b:41:c3:9b:cf:ac:40:63:35:e5:da:75:05:47:ba:1a:86:59:
         04:9e:a3:78:d9:bf:b0:19:1a:44:9f:80:64:f2:3b:1b:61:1a:
         e4:c6:47:3b:85:6f:34:16:f3:b4:82:29:1a:d1:70:bd:44:03:
         26:22:e3:5f:63:5e:cd:e8:f1:8a:59:06:a2:b9:8b:7e:09:c9:
         63:4b:3a:05:2d:b7:d8:77:1a:c6:d5:ab:3e:e4:95:7b:d4:a6:
         30:5f:02:5d:09:35:19:c6:97:d9:5c:a8:a8:3a:74:44:c6:64:
         84:1d:26:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----