Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/59923B54A80229C08AD09D97904A2C012ACADAED.mft
File:                     59923B54A80229C08AD09D97904A2C012ACADAED.mft (raw, json)
Hash identifier:          5yYYUM057rPf5/jhzNvSTzx2xzU9JDxpw0F/n7sFoBA=
Subject key identifier:   87:2C:A5:5C:D8:79:7B:8E:EA:E6:FB:13:BA:4F:64:17:F1:FF:65:BA
Authority key identifier: 59:92:3B:54:A8:02:29:C0:8A:D0:9D:97:90:4A:2C:01:2A:CA:DA:ED
Certificate issuer:       /CN=59923B54A80229C08AD09D97904A2C012ACADAED
Certificate serial:       4CEAF22DB3BF58C82979439CEEA953F87E7636ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59923B54A80229C08AD09D97904A2C012ACADAED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/59923B54A80229C08AD09D97904A2C012ACADAED.mft
Manifest number:          039A
Signing time:             Wed 07 Feb 2024 19:30:32 +0000
Manifest this update:     Wed 07 Feb 2024 19:25:32 +0000
Manifest next update:     Thu 08 Feb 2024 21:45:32 +0000
Files and hashes:         1: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: zZ8BkgtnVvz+fYMh0qdAJ/iqPAfnOypOClXuHO7NrC8=)
                          2: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: EVMvppmeo2SuLrY70cSY0sgOxcPeD8PF28Omrh+1VMg=)
                          3: 59923B54A80229C08AD09D97904A2C012ACADAED.crl (hash: Zp35yMLdnXMtIYzul8j1rpTOVw0Lvubcb3yZRAOps4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ea:f2:2d:b3:bf:58:c8:29:79:43:9c:ee:a9:53:f8:7e:76:36:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59923B54A80229C08AD09D97904A2C012ACADAED
        Validity
            Not Before: Feb  7 19:25:32 2024 GMT
            Not After : Feb  8 21:45:32 2024 GMT
        Subject: CN=872CA55CD8797B8EEAE6FB13BA4F6417F1FF65BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:79:41:8e:11:52:49:9a:74:2f:77:62:0c:
                    d1:bc:36:8a:9a:82:a0:f5:be:6b:53:7f:7e:5e:10:
                    0c:e1:23:07:30:af:12:4e:45:18:92:f1:f3:90:13:
                    73:d4:1f:3b:e6:5c:3f:7a:18:52:e9:7d:cb:d7:61:
                    c2:39:2f:fc:68:1f:68:8e:eb:15:1e:3e:fb:59:55:
                    b5:3c:d6:c7:f7:fe:2a:19:fc:3d:e7:d2:0f:5f:86:
                    d6:92:1c:66:61:75:2b:68:c0:53:64:67:6a:b6:6c:
                    44:58:d1:7c:30:ba:fa:2c:75:d6:3f:3f:95:d4:8d:
                    c9:a7:99:4c:cf:79:21:40:c7:43:bb:25:c4:96:94:
                    5c:f3:ad:42:fa:35:bd:e6:95:c7:7b:3d:e3:f5:81:
                    a8:1a:bc:58:63:a7:86:f3:12:04:96:74:59:63:89:
                    c5:ce:e0:2d:6c:b3:53:8c:ce:64:76:b0:09:6b:35:
                    b7:e6:71:0a:e8:29:4f:f8:9c:64:23:f7:20:80:95:
                    7c:40:6f:a8:3c:d7:71:b6:0e:42:93:ac:d6:b4:0f:
                    8e:63:be:fe:cc:a6:46:c9:cb:8b:ec:60:3a:8d:a0:
                    ef:74:e2:4d:c0:38:ef:ba:56:58:00:97:7f:0d:49:
                    69:35:91:24:eb:ec:37:86:7f:9b:1a:27:f6:96:2c:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2C:A5:5C:D8:79:7B:8E:EA:E6:FB:13:BA:4F:64:17:F1:FF:65:BA
            X509v3 Authority Key Identifier:
                keyid:59:92:3B:54:A8:02:29:C0:8A:D0:9D:97:90:4A:2C:01:2A:CA:DA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/59923B54A80229C08AD09D97904A2C012ACADAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59923B54A80229C08AD09D97904A2C012ACADAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/59923B54A80229C08AD09D97904A2C012ACADAED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5d:02:a3:ec:05:60:6c:03:f4:cc:ab:a4:63:12:5c:b7:33:
         f8:56:8f:c6:39:a6:6a:1d:75:21:03:1a:10:55:aa:a6:bc:1d:
         74:d4:3d:1a:9f:13:79:41:69:8e:17:8f:00:7b:1f:d3:60:bf:
         17:e5:98:bd:25:2e:c0:0b:fd:fb:0b:99:1f:3f:a7:ad:d9:9d:
         2f:68:c0:90:dd:2f:7a:44:a4:47:6e:34:65:b4:4a:1c:fc:f9:
         4b:3d:7f:86:fd:46:02:be:81:5a:b9:a9:57:73:4d:d8:51:31:
         fd:89:58:a5:02:46:1f:61:6d:53:f8:e9:a1:89:4d:1f:20:26:
         65:59:a7:a9:c7:86:b3:66:2b:7e:0b:1a:1f:3d:56:46:aa:6f:
         d7:52:9f:6d:06:eb:25:40:65:d2:90:6d:8f:89:df:e1:2d:99:
         da:7c:a4:7a:b5:f3:ed:bf:bd:28:7e:76:9b:7b:8f:73:e1:a7:
         d5:fb:97:0a:db:ad:12:84:fd:96:8a:b5:f0:53:26:15:e6:5f:
         fb:b2:38:80:61:88:8e:7c:42:e2:d3:d6:b0:94:f8:d0:f1:48:
         6b:1b:3b:6b:70:2a:97:af:27:b3:34:99:e0:6b:80:42:3f:f5:
         ea:93:ad:19:fb:71:1c:cd:34:6b:d0:9b:3a:53:dc:81:e0:85:
         7d:9a:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----