Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/959989DAB46A5ED6ACBD127CD9E4DC559D45F057.mft
File:                     959989DAB46A5ED6ACBD127CD9E4DC559D45F057.mft (raw, json)
Hash identifier:          AWgIRvOdTZFHRsmaH0CrXEeoP1lVKD+MmMcBfZq9tv0=
Subject key identifier:   BD:30:83:F2:D4:AA:34:1B:10:9A:E3:BF:27:2F:FC:8A:38:27:24:68
Authority key identifier: 95:99:89:DA:B4:6A:5E:D6:AC:BD:12:7C:D9:E4:DC:55:9D:45:F0:57
Certificate issuer:       /CN=959989DAB46A5ED6ACBD127CD9E4DC559D45F057
Certificate serial:       2633A3BCE7AEBBE0884F7353FD3BD4AB4E83DEB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959989DAB46A5ED6ACBD127CD9E4DC559D45F057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/959989DAB46A5ED6ACBD127CD9E4DC559D45F057.mft
Manifest number:          0173
Signing time:             Sun 14 Apr 2024 22:50:57 +0000
Manifest this update:     Sun 14 Apr 2024 22:45:57 +0000
Manifest next update:     Tue 16 Apr 2024 00:11:57 +0000
Files and hashes:         1: 959989DAB46A5ED6ACBD127CD9E4DC559D45F057.crl (hash: 86Z+yO8tF3wGmNthos4ygwuiWLUmB8nCsUtolJzhEcU=)
                          2: 3138372e36332e3134342e302f32322d3234203d3e20323731343137.roa (hash: 5nmjgMkAibgSrAFjmmI3c2VPfEGp2W/QebBGnmTQUfw=)
                          3: 323830343a376233343a3a2f33322d3431203d3e20323731343137.roa (hash: jpTV+Lk2c7UjxLLNA5YiybWnEhPm1l9zxNe6wERTcWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:33:a3:bc:e7:ae:bb:e0:88:4f:73:53:fd:3b:d4:ab:4e:83:de:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959989DAB46A5ED6ACBD127CD9E4DC559D45F057
        Validity
            Not Before: Apr 14 22:45:57 2024 GMT
            Not After : Apr 16 00:11:57 2024 GMT
        Subject: CN=BD3083F2D4AA341B109AE3BF272FFC8A38272468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:50:32:1c:3c:48:2b:1a:bb:2e:5e:40:0f:
                    6a:73:32:b7:3e:df:41:40:82:0b:b8:21:0c:3f:51:
                    bb:4b:4a:d0:4e:ff:87:ff:11:39:73:44:a2:92:65:
                    a0:76:73:eb:02:37:ff:e8:ad:15:06:db:77:d3:92:
                    73:c0:cf:0b:01:1e:01:b3:13:0c:17:18:f5:9b:c7:
                    f2:96:f8:17:3a:f4:0e:71:a0:dc:9d:80:62:fb:45:
                    32:fb:c9:85:86:ad:72:be:2f:10:9d:ba:3a:39:f8:
                    06:86:58:ca:47:04:40:41:85:8e:84:4d:b7:4a:9f:
                    ea:59:bf:24:cc:91:ec:6c:98:75:0d:05:b3:7a:78:
                    07:68:88:a4:71:14:3e:3e:9d:7a:b4:64:31:54:8e:
                    89:40:b3:de:f8:ed:02:38:5d:c5:3c:9a:90:fa:0e:
                    57:8e:11:fd:50:ec:88:43:b0:d9:ed:23:27:48:02:
                    c0:64:eb:bb:a5:27:20:fd:94:36:7e:e3:d8:3c:4f:
                    fa:69:43:3f:f2:b5:b5:60:b2:39:57:01:1e:0b:8e:
                    4b:c4:47:e5:ee:56:f6:5f:be:a3:a7:df:3b:71:06:
                    f7:2b:5e:c9:57:69:9f:d2:ac:e9:a2:a2:84:fe:75:
                    32:5c:b9:7f:ae:fd:1f:6e:89:a4:a4:a5:52:4d:e9:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:30:83:F2:D4:AA:34:1B:10:9A:E3:BF:27:2F:FC:8A:38:27:24:68
            X509v3 Authority Key Identifier:
                keyid:95:99:89:DA:B4:6A:5E:D6:AC:BD:12:7C:D9:E4:DC:55:9D:45:F0:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/959989DAB46A5ED6ACBD127CD9E4DC559D45F057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959989DAB46A5ED6ACBD127CD9E4DC559D45F057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/959989DAB46A5ED6ACBD127CD9E4DC559D45F057.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:16:0e:22:30:3e:75:90:cd:68:9c:80:7a:26:bc:83:07:
         58:ee:aa:a6:87:3e:2f:db:6d:fe:76:e7:ee:79:c6:f6:40:c1:
         23:36:17:cf:9d:24:f5:7b:63:7d:71:13:62:6e:60:38:95:cc:
         ee:69:9a:e8:4b:b6:b4:c5:ad:07:ad:f8:8e:a7:4d:8f:82:42:
         dd:85:06:30:23:12:4f:2a:f4:3b:0e:58:d6:5a:73:87:95:77:
         8d:43:56:71:70:18:b9:2b:77:36:73:45:0f:4f:b9:f5:07:e9:
         5b:ad:92:de:10:be:92:93:d7:f6:bf:46:a7:e4:b6:7d:c4:a1:
         3c:38:b6:66:bb:94:bb:70:fd:56:3b:07:ca:42:c5:f4:02:4c:
         e5:d7:9f:f1:47:75:ca:b6:be:05:37:16:ea:4b:fa:5d:12:8c:
         39:40:f7:0e:21:c7:43:c8:d3:37:99:1b:9a:55:b1:e0:05:0c:
         14:bc:d0:cf:d3:06:c5:6e:9b:de:74:78:35:c6:74:0f:b3:b3:
         60:1f:39:0a:5d:0d:e0:e3:13:e1:7b:c5:70:97:0c:73:37:6c:
         2d:fb:cd:08:7f:d1:da:77:cf:1a:76:07:b2:d4:27:d1:1a:24:
         e5:02:db:12:0f:01:39:97:d0:3b:9d:a6:d5:0d:89:14:b6:cd:
         d6:b4:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----