Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/597A2FB571B2B44FC81FD6B95A0F34FFECA1D841.mft
File:                     597A2FB571B2B44FC81FD6B95A0F34FFECA1D841.mft (raw, json)
Hash identifier:          LslltDYFyP1H3W0/dUtbPCcraPeSfUKdHhww+AM/tu8=
Subject key identifier:   5B:BD:3A:4A:49:2D:D2:CB:F9:5E:F5:BD:15:A2:42:E6:42:EA:B4:94
Authority key identifier: 59:7A:2F:B5:71:B2:B4:4F:C8:1F:D6:B9:5A:0F:34:FF:EC:A1:D8:41
Certificate issuer:       /CN=597A2FB571B2B44FC81FD6B95A0F34FFECA1D841
Certificate serial:       3B86ECA8E95F67BE75FB82E1A654165B57211EA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/597A2FB571B2B44FC81FD6B95A0F34FFECA1D841.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/597A2FB571B2B44FC81FD6B95A0F34FFECA1D841.mft
Manifest number:          1A
Signing time:             Thu 15 Feb 2024 17:53:30 +0000
Manifest this update:     Thu 15 Feb 2024 17:48:30 +0000
Manifest next update:     Fri 16 Feb 2024 19:59:30 +0000
Files and hashes:         1: 323830343a356365633a3a2f33322d3438203d3e20323638393339.roa (hash: +tGzKKVx/HDj/nL6P2Lwj5Zg32duIE7B38etCKnAow4=)
                          2: 597A2FB571B2B44FC81FD6B95A0F34FFECA1D841.crl (hash: RkIS/LkuhiAVsvZkLupfxAXHwxzYag54mEUwP8RZSjg=)
                          3: 34352e3137362e32342e302f32322d3234203d3e20323638393339.roa (hash: eOIi8JRIwRnsTyUbPHosGrsJEMlQySDxAYyCjUHA4CY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:86:ec:a8:e9:5f:67:be:75:fb:82:e1:a6:54:16:5b:57:21:1e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597A2FB571B2B44FC81FD6B95A0F34FFECA1D841
        Validity
            Not Before: Feb 15 17:48:30 2024 GMT
            Not After : Feb 16 19:59:30 2024 GMT
        Subject: CN=5BBD3A4A492DD2CBF95EF5BD15A242E642EAB494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:34:14:0f:03:b3:10:4d:45:03:df:33:d4:
                    06:24:06:8a:76:10:13:3c:3e:25:8f:a7:82:e8:63:
                    9a:7c:bd:bf:2b:ff:ae:67:6b:9d:0f:65:94:dd:7a:
                    d1:45:f6:f2:b1:12:dc:5c:12:69:f1:b0:e4:9a:72:
                    70:17:a9:90:c5:8b:bd:7c:a3:a6:1e:3d:c6:38:f4:
                    74:fb:97:4f:25:59:67:10:36:83:d8:27:ba:d8:76:
                    9f:54:0d:32:d5:84:b9:4d:f7:fa:c6:a8:7e:c8:59:
                    09:63:ba:05:31:df:28:e7:f7:97:72:f1:49:ff:93:
                    d1:0d:c9:42:ac:02:07:80:a1:8d:67:8a:99:0f:cf:
                    fa:69:f0:97:f2:87:18:77:44:67:6e:c8:6b:16:e5:
                    17:1c:29:59:95:8c:63:dc:78:97:3f:ab:21:35:02:
                    c2:9f:3b:56:3d:52:c6:eb:9a:b3:8a:c8:06:d0:91:
                    12:e0:07:df:ec:6d:8c:0f:e4:77:94:f7:cb:48:f0:
                    73:76:27:e2:38:0f:69:ee:43:29:b4:59:d9:b5:95:
                    1e:34:d0:b5:18:18:67:fb:2a:07:74:4e:33:ab:ba:
                    85:23:4f:32:92:41:fe:8a:cb:14:39:8b:a9:5a:6a:
                    1a:b3:47:54:c6:2e:af:01:0f:ad:20:83:7f:37:74:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BD:3A:4A:49:2D:D2:CB:F9:5E:F5:BD:15:A2:42:E6:42:EA:B4:94
            X509v3 Authority Key Identifier:
                keyid:59:7A:2F:B5:71:B2:B4:4F:C8:1F:D6:B9:5A:0F:34:FF:EC:A1:D8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/597A2FB571B2B44FC81FD6B95A0F34FFECA1D841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/597A2FB571B2B44FC81FD6B95A0F34FFECA1D841.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/597A2FB571B2B44FC81FD6B95A0F34FFECA1D841.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:53:68:07:c9:ee:f6:2c:14:28:61:c6:e7:af:6a:fc:6d:0b:
         1c:12:20:11:98:59:e1:ff:f3:95:63:16:13:c6:5e:70:a7:a8:
         fa:21:0e:c9:9d:83:95:a9:46:94:0d:8e:c0:0e:0a:fb:d3:13:
         ff:6e:15:a8:6c:cb:39:4f:41:eb:c8:63:26:b3:01:66:c2:0d:
         cd:5a:31:50:77:8f:61:d6:a4:a0:46:7d:d0:46:46:05:4a:02:
         2c:c5:53:2d:1e:75:1f:c0:8a:0e:0c:09:a8:56:2a:2d:53:70:
         80:2a:e8:53:01:4d:a2:ab:dd:18:88:ee:4b:0d:1c:0d:c8:a4:
         c1:7d:71:70:28:47:ea:f3:82:c4:16:f3:17:54:ee:0b:7e:4d:
         96:3d:1d:1b:c9:8b:e9:a9:25:53:f5:3b:98:1f:d6:27:26:06:
         73:47:d9:c9:ab:d4:4d:dd:78:78:a1:47:c4:76:80:cc:02:9b:
         5c:ae:52:a5:fb:5f:f1:37:0e:e8:86:c3:5b:a7:28:6d:07:7b:
         fb:45:14:4a:5e:29:45:22:6a:b9:16:31:ea:ee:96:50:00:77:
         1b:e0:4b:cb:e7:a0:62:7f:05:b4:ca:88:1b:c9:f4:49:0a:5e:
         d4:bf:8c:ae:ef:75:e2:aa:bf:a9:8a:2c:26:5b:f5:6f:1c:10:
         fa:44:11:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----