Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.mft
File:                     594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.mft (raw, json)
Hash identifier:          diUi3o/U904lYDdvopD+WyFmHMEaBMX+P+6DXcl62Mc=
Subject key identifier:   E0:26:01:EC:58:C3:75:15:7B:71:95:DD:C1:38:EC:EA:16:8F:A0:A9
Authority key identifier: 59:4E:9B:5A:9B:C5:E8:A7:D4:4A:AF:0E:74:95:6A:3B:81:FC:F9:6D
Certificate issuer:       /CN=594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D
Certificate serial:       6C9308FBE0330BF030752A1CCD3E506A2A88F8E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.mft
Manifest number:          35
Signing time:             Sun 14 Apr 2024 20:25:14 +0000
Manifest this update:     Sun 14 Apr 2024 20:20:14 +0000
Manifest next update:     Mon 15 Apr 2024 22:38:14 +0000
Files and hashes:         1: 594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.crl (hash: hv3+1LiKnN05Jqsfe/ntllAugHF+IOAq14SpnHBpwWQ=)
                          2: 323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (hash: OH54GhmqzNJTtFPCGKMCsycHaO8bZOqLM+M8pem2K40=)
                          3: 3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (hash: B5lK4LEribUV/Gw1D+f4o4akcJbNl55eaOF/eIIf7Zc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:93:08:fb:e0:33:0b:f0:30:75:2a:1c:cd:3e:50:6a:2a:88:f8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D
        Validity
            Not Before: Apr 14 20:20:14 2024 GMT
            Not After : Apr 15 22:38:14 2024 GMT
        Subject: CN=E02601EC58C375157B7195DDC138ECEA168FA0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f9:9c:0f:9b:cc:53:ff:e1:c6:e2:e6:68:2f:
                    84:25:13:bb:f9:c2:b6:73:3d:fa:7e:bd:ad:5e:e3:
                    c9:d4:df:42:9c:7a:c4:74:1f:a0:6e:d8:a1:07:d5:
                    7b:73:52:a6:79:67:3d:c7:43:3d:1e:b1:7b:4d:44:
                    c8:ee:cd:ea:b0:25:e7:85:e5:f8:b7:7f:f9:fc:51:
                    e5:c6:75:7e:f8:7f:4c:f9:ed:d8:56:ec:55:79:23:
                    a2:ff:f5:d3:fe:33:73:39:45:c3:d8:da:71:6f:74:
                    20:e0:42:e9:33:08:3f:ee:51:31:6c:da:38:b4:eb:
                    41:6c:06:e4:5b:27:5e:0a:48:f9:02:85:80:3b:bd:
                    43:65:d3:3f:fd:90:82:e4:b6:26:32:82:e6:fa:90:
                    7f:d1:e8:a8:52:70:25:65:ae:fe:94:c9:99:ab:b2:
                    b7:6c:9d:52:aa:25:9b:c9:9f:7d:d8:18:6d:0b:44:
                    bc:73:c9:3e:35:14:85:37:20:f7:77:61:5b:dc:1d:
                    2b:9e:fc:05:d8:e1:43:d2:0c:b0:f4:26:6c:ce:53:
                    37:8d:e0:54:b7:ba:c1:d0:02:97:6c:0a:32:18:b5:
                    dd:c5:0d:68:4e:e9:ae:9f:f8:d6:2f:dc:c2:6a:cb:
                    da:28:a2:92:2b:16:80:ba:06:1e:b6:7b:23:c3:75:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:26:01:EC:58:C3:75:15:7B:71:95:DD:C1:38:EC:EA:16:8F:A0:A9
            X509v3 Authority Key Identifier:
                keyid:59:4E:9B:5A:9B:C5:E8:A7:D4:4A:AF:0E:74:95:6A:3B:81:FC:F9:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/594E9B5A9BC5E8A7D44AAF0E74956A3B81FCF96D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:0d:83:2e:c0:13:ab:e7:70:ba:07:92:57:83:64:9c:b6:
         f1:32:7a:e4:b7:92:32:66:e0:2a:10:50:29:6a:b2:61:d6:c5:
         29:a8:e4:15:0c:47:72:eb:41:cf:74:f0:83:53:25:23:7d:cc:
         c3:c4:21:a8:7a:dd:91:0a:93:33:72:7a:cc:86:ca:29:fb:25:
         e4:6f:d1:da:06:d7:3e:c7:d9:25:33:2b:56:4f:2c:34:f5:48:
         c5:0b:11:06:34:28:4b:ee:ec:71:51:be:4c:0d:23:69:3d:a4:
         71:ab:ee:90:48:78:4a:1c:87:66:fe:89:0a:92:07:f8:69:15:
         c7:58:75:45:05:84:2f:34:84:94:ea:f1:0e:24:31:17:48:8e:
         6f:50:e1:82:7f:8b:d8:0b:5f:70:77:bf:9e:01:ad:47:2d:cf:
         32:86:83:1a:27:7a:63:05:75:7c:2a:48:fa:7b:a3:5e:d7:89:
         2b:9b:20:bd:f2:73:de:df:de:dc:75:d1:71:91:27:3f:d9:6b:
         fb:00:9e:1c:d8:2a:33:aa:05:f4:ad:a8:a8:a9:5f:7c:11:20:
         fe:0b:6b:46:44:b2:00:72:0e:e9:c1:22:53:d4:51:ec:a7:2d:
         2c:68:e4:29:dc:16:4c:b5:29:12:28:1b:a7:c6:89:9e:b1:cc:
         88:d3:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----