Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/0/B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61.mft
File:                     B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61.mft (raw, json)
Hash identifier:          7ktkikTKwAOH5tDDY+OFlz7F3KtLadsyyr9xMoIY3nU=
Subject key identifier:   96:BE:91:C1:80:BC:6F:BC:78:D9:A5:D2:5B:E4:08:6D:60:9B:64:55
Authority key identifier: B5:9A:86:FF:CB:94:5B:F4:B8:F9:A7:C1:B0:42:14:40:EB:B4:FF:61
Certificate issuer:       /CN=B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61
Certificate serial:       151CA527E1ECD97CBF61F47AB1026EC38762AA92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/0/B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61.mft
Manifest number:          36
Signing time:             Mon 15 Apr 2024 02:38:25 +0000
Manifest this update:     Mon 15 Apr 2024 02:33:25 +0000
Manifest next update:     Tue 16 Apr 2024 03:41:25 +0000
Files and hashes:         1: B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61.crl (hash: x31JolpjgZHjdrbLpaMwRKMUakldI7H3vBdZvx8UojI=)
                          2: 3134332e302e3232342e302f32322d3233203d3e20323634303335.roa (hash: wy2ZN4y3b4Ba0cZJSWHEPNaWNJFGzC3FzLkE9Ocsa34=)
                          3: 323830343a323963633a3a2f33322d3332203d3e20323634303335.roa (hash: Kbl5miWTCP1/m7ApoCM9DuIYPYbUoXSn8cUt56+K2VI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1c:a5:27:e1:ec:d9:7c:bf:61:f4:7a:b1:02:6e:c3:87:62:aa:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61
        Validity
            Not Before: Apr 15 02:33:25 2024 GMT
            Not After : Apr 16 03:41:25 2024 GMT
        Subject: CN=96BE91C180BC6FBC78D9A5D25BE4086D609B6455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:7f:ee:4c:81:1c:d2:20:d8:7d:b6:f6:0d:
                    d7:69:dc:3b:31:e3:9b:d3:b0:ae:50:b2:b4:58:9c:
                    c9:9e:8d:0e:f0:aa:b6:07:fb:ea:20:32:81:86:83:
                    ba:65:89:5d:7a:6b:28:09:9e:37:5c:c2:15:11:62:
                    77:29:d2:14:22:98:93:af:22:64:d4:1e:4f:68:14:
                    d1:da:7e:5d:20:aa:eb:98:81:f9:9f:e6:da:c8:f7:
                    ca:9c:ce:e4:2c:58:93:30:87:2e:f1:c0:91:62:96:
                    26:0a:2e:bd:f7:91:3a:40:1e:44:c9:94:77:c2:bc:
                    76:72:6a:38:fe:82:b1:f5:a0:24:0a:8d:33:cc:74:
                    ee:d6:69:96:e0:63:93:7a:f3:f9:99:8c:cd:db:f6:
                    e0:87:c6:90:04:ca:66:38:a6:00:e6:57:34:d6:cd:
                    e7:65:45:13:ce:2d:99:f2:64:5b:fe:34:e9:7d:03:
                    a7:19:ce:62:b0:c6:19:9e:1f:64:d0:d3:5a:65:af:
                    e8:e5:52:5c:e9:e5:9d:69:d1:30:2a:9b:09:4a:de:
                    a2:8b:86:b1:15:69:82:bf:c3:36:36:be:db:03:61:
                    c2:a5:a5:24:6f:52:0b:83:af:e6:fb:25:45:a5:84:
                    8a:1a:63:21:bc:25:d6:26:e1:fc:7d:a3:96:82:b4:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BE:91:C1:80:BC:6F:BC:78:D9:A5:D2:5B:E4:08:6D:60:9B:64:55
            X509v3 Authority Key Identifier:
                keyid:B5:9A:86:FF:CB:94:5B:F4:B8:F9:A7:C1:B0:42:14:40:EB:B4:FF:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/0/B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/0/B59A86FFCB945BF4B8F9A7C1B0421440EBB4FF61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:cc:f8:40:8e:cf:f6:68:f5:68:f1:06:91:bf:4d:e1:57:3b:
         ff:bd:d0:b0:74:6c:64:87:5e:db:90:76:89:2b:08:3d:ff:34:
         04:30:5d:e0:a0:2d:92:f3:52:d6:bd:69:88:9f:02:e8:ad:ba:
         a9:1c:97:13:6a:a2:63:b4:4c:4a:d8:46:e9:8a:a1:be:24:f4:
         d1:b0:30:55:0f:f2:00:3a:f5:d6:11:f5:bb:65:14:10:17:57:
         38:86:a6:b5:06:e5:0c:2b:46:e2:e0:57:ac:55:18:ec:6c:4c:
         39:09:24:b4:d0:df:1d:1c:4a:cd:49:c1:5a:c2:d2:4f:bc:99:
         37:c9:15:b7:ae:49:75:9c:23:28:fd:fc:2e:3b:c2:a9:d6:36:
         70:dd:f4:dc:58:d3:ef:64:e8:ce:9b:c0:6f:84:4d:e6:35:f5:
         be:65:94:6a:16:ad:c0:ff:eb:4f:89:dd:a4:0c:89:90:95:9f:
         78:02:92:42:b8:ae:4a:80:53:4d:0e:e0:d5:45:c5:cc:0d:6c:
         16:34:f5:af:42:14:4a:7c:ff:84:7e:ae:1c:ee:cd:b4:89:51:
         22:ee:22:07:9b:30:a7:86:b9:13:8b:92:ec:56:68:2b:66:43:
         55:85:65:dd:9d:1e:6f:d8:14:e3:94:be:f7:1e:f1:48:56:b9:
         6b:e8:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----