Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.mft
File:                     259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.mft (raw, json)
Hash identifier:          JcmCLWkZ2GF7Rmpmx2A0R5sIAT2VEw6y3TgOe8KF1rU=
Subject key identifier:   64:F1:39:AB:59:D1:48:DE:AC:D2:CA:9E:C2:D8:CB:4A:3A:AB:21:69
Authority key identifier: 25:9B:E2:B8:79:64:0D:2A:44:C3:C8:F6:28:6B:05:A9:5C:DD:9E:B3
Certificate issuer:       /CN=259BE2B879640D2A44C3C8F6286B05A95CDD9EB3
Certificate serial:       6C2E6B457426A2497CC59BBC6A29ABC8938ADF57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.mft
Manifest number:          11
Signing time:             Mon 15 Apr 2024 07:40:50 +0000
Manifest this update:     Mon 15 Apr 2024 07:35:50 +0000
Manifest next update:     Tue 16 Apr 2024 10:24:50 +0000
Files and hashes:         1: 323830343a356362633a3a2f33322d3438203d3e20323638393237.roa (hash: Kc/FWbP1SH1Ojqkl7EZQNmv5H4QvD9Uknc/1HAz6lAg=)
                          2: 259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.crl (hash: PonR9G7YyXbgWbWhGGcfqLxoflzYWSjBOvGvnr5ryiM=)
                          3: 34352e3137362e32382e302f32322d3234203d3e20323638393237.roa (hash: zqCMU64lXXVAxZMuLH4tHCSimPVO9qa5lOdKoCLz4II=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2e:6b:45:74:26:a2:49:7c:c5:9b:bc:6a:29:ab:c8:93:8a:df:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259BE2B879640D2A44C3C8F6286B05A95CDD9EB3
        Validity
            Not Before: Apr 15 07:35:50 2024 GMT
            Not After : Apr 16 10:24:50 2024 GMT
        Subject: CN=64F139AB59D148DEACD2CA9EC2D8CB4A3AAB2169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:89:43:03:c5:f2:7f:d2:06:96:e9:94:6e:
                    76:7d:a4:9a:a1:4f:19:bd:c1:9a:d2:93:22:5d:8f:
                    90:b9:1a:e2:dc:bf:db:ed:7a:8e:c0:d3:4d:f8:ec:
                    c9:60:06:86:f9:cd:fa:16:7f:83:5c:73:13:d0:9d:
                    2f:93:f3:5e:5a:3f:83:f6:7b:60:c2:c4:86:6e:60:
                    dc:25:23:6f:f3:68:1f:ac:9a:60:97:92:d3:1b:ad:
                    3b:ac:58:5e:b6:ed:6d:46:d1:70:42:00:e6:5c:ae:
                    14:bb:4c:47:a6:58:28:d7:16:56:5a:b5:d8:6b:f4:
                    83:f0:9f:ad:78:6f:7e:6c:56:3c:21:92:ff:5e:2f:
                    e0:0a:20:66:b3:61:f8:36:b7:c3:17:68:a9:2d:f7:
                    d1:93:36:dc:ea:d8:1b:f8:24:79:83:ac:fc:51:8f:
                    b9:f7:4a:24:de:25:9b:e6:76:9b:9a:86:22:70:18:
                    91:a9:f3:79:59:3f:9a:48:81:87:36:f8:62:6d:23:
                    5f:9b:9e:75:6e:13:1a:e7:47:22:e2:44:d0:0f:89:
                    a1:64:6a:a9:f6:1a:c2:91:e5:eb:75:b9:58:bf:c1:
                    66:37:c5:7a:1c:ac:51:4c:f0:75:a8:5a:ef:b8:f7:
                    4e:b5:93:41:e3:3e:bf:ef:72:ba:4b:10:44:0d:f4:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F1:39:AB:59:D1:48:DE:AC:D2:CA:9E:C2:D8:CB:4A:3A:AB:21:69
            X509v3 Authority Key Identifier:
                keyid:25:9B:E2:B8:79:64:0D:2A:44:C3:C8:F6:28:6B:05:A9:5C:DD:9E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/1/259BE2B879640D2A44C3C8F6286B05A95CDD9EB3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:06:99:5b:9a:79:a1:fd:89:cd:aa:9e:d1:ff:41:a9:fd:5c:
         d0:4b:81:71:9e:68:3a:bd:76:af:b2:53:fb:e5:da:f3:c9:08:
         4c:03:64:a2:6d:9b:7f:9c:59:25:b0:44:91:70:04:73:37:97:
         6a:49:5e:e4:5e:12:3f:21:b0:45:44:b3:db:d4:40:c2:f7:b7:
         b3:5d:93:a0:ba:81:bd:61:b3:c3:0e:44:01:72:89:8c:85:09:
         82:7f:be:3b:2b:90:03:ce:12:d5:48:1e:f8:a2:fe:ad:97:7b:
         9d:51:e1:45:39:12:9b:62:50:0a:23:56:1e:99:15:f0:49:98:
         27:78:e7:db:0d:98:23:f3:1c:ef:cb:55:67:be:14:08:f6:a3:
         81:62:63:02:f0:d0:88:e4:91:7d:85:01:41:34:0f:76:58:82:
         6b:6b:ac:24:25:46:a1:a5:5d:f1:92:a6:5c:02:4e:03:6c:07:
         0a:24:7e:57:0d:52:3a:ac:41:7c:83:4b:c9:56:4d:9b:73:06:
         d2:ef:33:0b:5f:46:8c:c1:f7:cc:1d:14:c8:04:ca:f3:58:39:
         45:d4:52:7c:8a:28:1d:fc:b8:7d:74:70:94:a8:7a:37:03:99:
         0f:d6:a0:a5:82:85:0e:0a:b4:19:53:0f:0f:d5:3f:ba:e9:f8:
         74:30:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----