Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.mft
File:                     059DC642C88BAB8691AB9D3A8185BFF204907ABF.mft (raw, json)
Hash identifier:          ydjzmf8yy6Zi9MA7s4V8trp+7kxZz08KSv3DMxbTbFM=
Subject key identifier:   CD:D7:98:E3:CC:5F:17:DE:EB:15:52:05:D3:5E:8E:8B:DC:EA:55:82
Authority key identifier: 05:9D:C6:42:C8:8B:AB:86:91:AB:9D:3A:81:85:BF:F2:04:90:7A:BF
Certificate issuer:       /CN=059DC642C88BAB8691AB9D3A8185BFF204907ABF
Certificate serial:       4B6C9E104025C95CCA2D6BB9734CDB4E60433BA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.mft
Manifest number:          73
Signing time:             Mon 15 Jan 2024 08:14:41 +0000
Manifest this update:     Mon 15 Jan 2024 08:09:41 +0000
Manifest next update:     Tue 16 Jan 2024 10:53:41 +0000
Files and hashes:         1: 3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (hash: /zY6/33QIXZUjWSWyGNGR1Tt7MyB38oqUDIqShOwu5c=)
                          2: 059DC642C88BAB8691AB9D3A8185BFF204907ABF.crl (hash: 3sOaVxCk+rd0QAUjSns4PMypp4jHenvTAH2hvW/+GX4=)
                          3: 323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (hash: zm0G4TVPrO0ZTgSjtKFBVGwrvi3uT4QyP/YgHiTLuSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6c:9e:10:40:25:c9:5c:ca:2d:6b:b9:73:4c:db:4e:60:43:3b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059DC642C88BAB8691AB9D3A8185BFF204907ABF
        Validity
            Not Before: Jan 15 08:09:41 2024 GMT
            Not After : Jan 16 10:53:41 2024 GMT
        Subject: CN=CDD798E3CC5F17DEEB155205D35E8E8BDCEA5582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:a4:8a:28:00:7d:64:d4:15:de:69:43:2f:
                    c6:1c:2e:5a:1a:ef:7e:f9:f6:77:ec:84:60:18:67:
                    27:d0:71:63:5d:29:1e:a7:72:7c:08:fe:cd:97:d9:
                    ae:5c:ed:d4:32:83:de:f2:82:e2:59:ec:d0:01:83:
                    83:ba:e5:98:cd:8e:d0:e5:f5:f0:16:e4:ce:19:a1:
                    76:be:8a:f6:66:e1:61:e7:55:80:04:c8:94:40:23:
                    4e:80:0f:3f:62:f5:4a:f1:06:2a:d6:80:df:54:aa:
                    b3:c4:28:20:63:87:a9:10:62:7d:9c:22:4b:ce:c1:
                    e3:dd:81:45:fd:ef:35:ed:1a:f8:3b:7f:ce:c4:85:
                    23:e8:5d:38:2c:10:98:11:85:e6:79:6d:b2:e4:e0:
                    51:0d:e1:7b:98:45:d2:4e:8c:87:cb:97:bc:eb:0d:
                    a6:99:0e:c0:e3:12:97:f6:52:bd:2c:0c:f0:81:ec:
                    d4:fa:e2:8b:45:9a:8e:cb:ee:a9:45:4d:2f:09:bc:
                    40:d9:a0:05:bc:b4:3f:bd:bb:fe:a5:2c:86:2c:0f:
                    cf:44:9d:21:c0:a4:85:e4:6d:7a:57:29:25:7e:b5:
                    1b:8e:41:e1:ae:01:c1:70:3b:65:62:fc:87:e0:b8:
                    14:70:3e:5d:5f:54:96:7d:a9:33:06:b6:e9:27:07:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D7:98:E3:CC:5F:17:DE:EB:15:52:05:D3:5E:8E:8B:DC:EA:55:82
            X509v3 Authority Key Identifier:
                keyid:05:9D:C6:42:C8:8B:AB:86:91:AB:9D:3A:81:85:BF:F2:04:90:7A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/059DC642C88BAB8691AB9D3A8185BFF204907ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0b:63:cd:18:cb:be:23:db:2d:cc:6b:30:31:b9:71:b0:ef:
         26:2e:12:d3:b1:a0:bb:fe:e3:7b:88:bd:75:67:1f:d1:11:10:
         e0:e7:e0:0e:fb:cd:fa:cb:a7:08:0a:c9:a6:e7:58:90:0c:52:
         f6:96:b4:f1:1f:52:bf:3f:4b:74:58:af:19:17:c8:50:f7:03:
         18:c3:58:5e:a5:09:e5:11:6b:32:14:1f:42:e5:9d:f7:7e:7d:
         4b:52:0e:ed:8c:58:20:0f:d6:98:fe:c9:90:5e:e6:f6:f2:15:
         51:ec:46:96:98:da:1b:a7:8e:24:60:54:c6:5f:2a:a4:4f:1d:
         d4:1c:29:70:10:52:7e:a2:4a:0a:76:ab:d6:d8:0a:10:31:7e:
         60:c0:18:7c:5d:32:ef:41:8d:90:81:85:c4:c7:86:f6:17:07:
         b1:e0:ae:b1:2b:fa:12:45:bd:74:ea:df:cd:94:17:8c:2b:0c:
         e4:56:90:f1:29:e7:c4:b8:a0:5e:85:4d:07:58:de:23:61:58:
         5c:c8:9f:57:f4:e1:28:a2:b6:d2:74:6f:d8:9f:04:7c:e1:a7:
         3e:12:06:35:8f:ef:51:9a:65:24:8f:c3:5c:cf:41:f7:75:31:
         65:b0:bd:29:2c:f2:bb:db:0e:5d:50:b0:eb:78:ef:ec:60:e7:
         67:ed:0f:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS2yeEEAlyVzKLWu5c0zbTmBDO6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU5REM2NDJDODhCQUI4NjkxQUI5RDNBODE4NUJGRjIw
NDkwN0FCRjAeFw0yNDAxMTUwODA5NDFaFw0yNDAxMTYxMDUzNDFaMDMxMTAvBgNV
BAMTKENERDc5OEUzQ0M1RjE3REVFQjE1NTIwNUQzNUU4RThCRENFQTU1ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHqSKKAB9ZNQV3mlDL8YcLloa
73759nfshGAYZyfQcWNdKR6ncnwI/s2X2a5c7dQyg97yguJZ7NABg4O65ZjNjtDl
9fAW5M4ZoXa+ivZm4WHnVYAEyJRAI06ADz9i9UrxBirWgN9UqrPEKCBjh6kQYn2c
IkvOwePdgUX97zXtGvg7f87EhSPoXTgsEJgRheZ5bbLk4FEN4XuYRdJOjIfLl7zr
DaaZDsDjEpf2Ur0sDPCB7NT64otFmo7L7qlFTS8JvEDZoAW8tD+9u/6lLIYsD89E
nSHApIXkbXpXKSV+tRuOQeGuAcFwO2Vi/IfguBRwPl1fVJZ9qTMGtuknBxULAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzdeY48xfF97rFVIF016Oi9zqVYIwHwYDVR0j
BBgwFoAUBZ3GQsiLq4aRq506gYW/8gSQer8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003
ZW0vMC8wNTlEQzY0MkM4OEJBQjg2OTFBQjlEM0E4MTg1QkZGMjA0OTA3QUJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA1OURDNjQyQzg4QkFCODY5
MUFCOUQzQTgxODVCRkYyMDQ5MDdBQkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003ZW0vMC8w
NTlEQzY0MkM4OEJBQjg2OTFBQjlEM0E4MTg1QkZGMjA0OTA3QUJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWgtjzRjLviPbLcxrMDG5cbDvJi4S07Ggu/7je4i9dWcf0REQ4OfgDvvN+sun
CArJpudYkAxS9pa08R9Svz9LdFivGRfIUPcDGMNYXqUJ5RFrMhQfQuWd9359S1IO
7YxYIA/WmP7JkF7m9vIVUexGlpjaG6eOJGBUxl8qpE8d1BwpcBBSfqJKCnar1tgK
EDF+YMAYfF0y70GNkIGFxMeG9hcHseCusSv6EkW9dOrfzZQXjCsM5FaQ8SnnxLig
XoVNB1jeI2FYXMifV/ThKKK20nRv2J8EfOGnPhIGNY/vUZplJI/DXM9B93UxZbC9
KSzyu9sOXVCw63jv7GDnZ+0P7Q==
-----END CERTIFICATE-----