Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/59CE7786D98BBD657E6949FFE8332B5753CFD970.mft
File:                     59CE7786D98BBD657E6949FFE8332B5753CFD970.mft (raw, json)
Hash identifier:          4eTwUmzzy22LlhE9Mandfpt41LoaR6zibxAIUwWt2WI=
Subject key identifier:   67:09:2F:D0:14:FE:66:5E:66:FC:CA:EF:C2:76:C5:B4:D1:EB:BE:70
Authority key identifier: 59:CE:77:86:D9:8B:BD:65:7E:69:49:FF:E8:33:2B:57:53:CF:D9:70
Certificate issuer:       /CN=59CE7786D98BBD657E6949FFE8332B5753CFD970
Certificate serial:       6A152392AF16239D0119420D21896D9CA16DB215
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59CE7786D98BBD657E6949FFE8332B5753CFD970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/59CE7786D98BBD657E6949FFE8332B5753CFD970.mft
Manifest number:          46
Signing time:             Fri 20 Oct 2023 05:21:16 +0000
Manifest this update:     Fri 20 Oct 2023 05:16:16 +0000
Manifest next update:     Sat 21 Oct 2023 07:30:16 +0000
Files and hashes:         1: 3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (hash: NYXqSawHFqlvltQydatHJXSOqvFd7S6q/TlNeuSBSP4=)
                          2: 59CE7786D98BBD657E6949FFE8332B5753CFD970.crl (hash: UxnpA6Bjh8Ant++H8s/EUX47qaKakSXWB/hMTdbPvdA=)
                          3: 323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (hash: VtBH2tQFV4gTwPLvDY5DX7T3tvEDvCPwYE8WJsGLKJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:15:23:92:af:16:23:9d:01:19:42:0d:21:89:6d:9c:a1:6d:b2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59CE7786D98BBD657E6949FFE8332B5753CFD970
        Validity
            Not Before: Oct 20 05:16:16 2023 GMT
            Not After : Oct 21 07:30:16 2023 GMT
        Subject: CN=67092FD014FE665E66FCCAEFC276C5B4D1EBBE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:41:cd:e6:79:b9:59:e0:76:1b:13:0a:aa:
                    04:c7:f9:71:02:68:c7:de:04:e3:25:dc:0f:62:ae:
                    c7:84:6a:ed:8a:8f:c7:24:cb:1c:6f:fc:6d:1c:e0:
                    da:cb:18:ed:17:f6:f2:40:66:9c:73:c8:36:40:bc:
                    72:da:f6:ef:af:12:3a:e8:7f:38:08:93:eb:17:44:
                    5e:a9:32:06:11:c2:d2:1a:5a:bd:dd:40:7d:c5:79:
                    9c:fd:0a:c8:20:44:37:2e:fc:43:cc:25:8f:fb:2f:
                    ce:96:42:ca:20:7f:3a:97:b4:f9:cb:f7:f2:8e:ce:
                    1b:23:87:60:e7:fb:b8:3f:6f:f2:7b:ff:76:5d:7f:
                    7b:fe:85:94:45:a6:b4:a8:47:eb:35:6e:46:ee:f0:
                    80:31:95:cf:e0:17:a5:8c:ea:75:75:7e:db:06:73:
                    23:59:70:5a:67:dd:55:fd:f1:2c:bf:9e:1e:74:74:
                    d9:9c:7b:aa:82:57:3e:e7:10:2c:4a:8f:08:bb:5a:
                    65:51:dd:d7:8f:9d:54:9e:0b:23:81:f8:25:af:6e:
                    85:32:c6:87:8d:27:af:29:d2:28:86:38:07:d4:60:
                    16:8d:7c:21:f9:4a:94:1f:08:15:93:23:23:b2:04:
                    24:fa:8e:f5:e6:4c:cc:07:bc:7e:e8:e7:bf:0f:c6:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:2F:D0:14:FE:66:5E:66:FC:CA:EF:C2:76:C5:B4:D1:EB:BE:70
            X509v3 Authority Key Identifier:
                keyid:59:CE:77:86:D9:8B:BD:65:7E:69:49:FF:E8:33:2B:57:53:CF:D9:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/59CE7786D98BBD657E6949FFE8332B5753CFD970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59CE7786D98BBD657E6949FFE8332B5753CFD970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/59CE7786D98BBD657E6949FFE8332B5753CFD970.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:18:83:79:b4:2b:b7:d5:de:fa:b3:6f:2b:f3:39:8f:cf:a5:
         6f:3d:4a:1b:60:4c:4f:f2:4f:9d:f7:57:f3:0f:ea:83:b6:e8:
         42:d2:29:69:38:72:12:4a:1b:ad:11:8f:f5:84:e2:a7:47:02:
         01:92:7e:b2:f7:2a:ff:f8:73:69:6b:10:29:56:b6:ab:38:cf:
         48:97:4e:67:5e:a3:2d:79:ad:f6:e4:16:56:0c:95:cd:3a:22:
         52:fd:67:09:cf:c7:15:b1:04:c1:f9:f6:67:b5:ca:06:4e:e5:
         29:09:5b:8c:c2:8f:57:7a:33:a9:4e:9b:26:81:f9:ab:ac:11:
         6b:6d:26:92:9a:2a:47:da:95:fc:16:bd:3d:d1:0f:50:3d:22:
         50:fe:df:bd:46:ff:b4:20:bb:58:b3:ec:95:3f:b1:8a:0d:fe:
         6c:bd:87:a3:c3:20:21:81:4f:30:94:9b:1d:06:b3:85:99:eb:
         6e:5c:d2:82:be:21:08:c6:a2:42:ac:c0:24:c2:1f:81:f9:7c:
         b7:2c:5c:4a:3b:21:95:6d:bd:82:fc:08:19:0c:4a:ee:09:48:
         c7:3f:b3:a5:b4:1d:13:80:f4:f1:c9:a5:94:61:d0:59:9a:46:
         2d:82:a7:b9:3f:51:08:63:b6:8c:b2:9a:ee:ff:db:cd:2b:25:
         c3:56:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----