Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft
File:                     B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft (raw, json)
Hash identifier:          jDYCaMz0e4vBJTQYIJqDED0iXwnKO2C1UMJop9BH4GE=
Subject key identifier:   16:D4:2B:D5:72:98:10:ED:30:25:6F:31:EA:87:04:BB:A1:9D:99:67
Authority key identifier: B5:9D:C3:0C:A9:79:60:CC:89:71:DA:40:E4:0E:AB:97:1B:C5:4F:BA
Certificate issuer:       /CN=B59DC30CA97960CC8971DA40E40EAB971BC54FBA
Certificate serial:       6439991697D4348973EF5A6DB1D1CAA081327507
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft
Manifest number:          07
Signing time:             Thu 14 Dec 2023 21:57:37 +0000
Manifest this update:     Thu 14 Dec 2023 21:52:37 +0000
Manifest next update:     Fri 15 Dec 2023 22:00:37 +0000
Files and hashes:         1: 3133382e3131372e3231362e302f32342d3332203d3e20323634323534.roa (hash: JiGtF+tHYbkugUFGPzh9uk4kIUt22Jz3jVA4EPm+s5Q=)
                          2: B59DC30CA97960CC8971DA40E40EAB971BC54FBA.crl (hash: Ck72ZsHprPWyD2aCXr7ngQUe5Z/vKDTIcJ0XswV60go=)
                          3: 323830343a323530383a3a2f33322d313238203d3e20323634323534.roa (hash: WPKt1BE87bkBBovLqoV6l17gU3nc7+thaqTE3ionE7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:39:99:16:97:d4:34:89:73:ef:5a:6d:b1:d1:ca:a0:81:32:75:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59DC30CA97960CC8971DA40E40EAB971BC54FBA
        Validity
            Not Before: Dec 14 21:52:37 2023 GMT
            Not After : Dec 15 22:00:37 2023 GMT
        Subject: CN=16D42BD5729810ED30256F31EA8704BBA19D9967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:1d:1d:7c:6a:2a:5e:38:35:f4:3d:8d:55:
                    a3:8d:80:dc:93:68:2b:3b:c2:0b:62:cc:de:8c:1e:
                    ad:34:e9:9a:ef:c7:19:ff:fb:d7:36:fe:62:1d:3c:
                    1a:67:10:a7:ae:02:35:af:c1:ba:04:ae:a9:36:8a:
                    99:a0:73:75:a6:f8:49:17:99:50:bd:d4:e4:1c:7f:
                    61:bd:9d:f7:ad:0c:16:7e:49:b5:9c:22:da:09:de:
                    d0:4d:72:82:e0:fa:3f:26:04:e2:52:4f:49:fa:68:
                    fc:0b:73:40:f4:03:2d:95:a8:48:1f:b1:8f:4f:97:
                    6a:88:1f:64:32:d4:8b:31:db:dc:3f:d0:72:47:6d:
                    a1:3e:01:77:29:1f:f4:98:7d:f3:ae:5e:01:41:78:
                    37:20:62:39:2f:8f:58:24:37:48:55:18:66:07:69:
                    ac:61:dd:09:33:0a:3c:d1:e2:32:70:1e:cb:9d:06:
                    db:9e:d5:9a:f8:71:3c:e9:44:ea:e2:59:4f:48:1e:
                    ad:fb:05:0d:9a:97:88:31:99:4e:f9:9a:6e:0d:11:
                    e9:61:23:d9:a6:81:80:61:6b:86:be:c0:42:e3:a8:
                    76:4f:83:6d:1e:53:b9:24:19:40:31:e9:56:ac:25:
                    ab:5f:14:f6:25:be:c9:00:90:ee:20:8a:56:07:0b:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D4:2B:D5:72:98:10:ED:30:25:6F:31:EA:87:04:BB:A1:9D:99:67
            X509v3 Authority Key Identifier:
                keyid:B5:9D:C3:0C:A9:79:60:CC:89:71:DA:40:E4:0E:AB:97:1B:C5:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c5:39:65:d7:ed:cf:5a:da:61:34:76:08:c2:aa:86:67:05:
         7f:09:86:78:e4:af:fe:71:c2:99:3a:52:19:fe:2f:42:09:cb:
         63:f7:62:43:82:23:a4:41:32:7f:2a:45:12:7b:4d:f9:a6:a3:
         45:d8:f1:c8:e3:61:5a:16:fa:be:85:53:7a:a0:b1:97:84:1e:
         82:c6:07:16:55:85:29:3a:68:95:73:3f:db:8d:07:89:33:02:
         20:a0:d3:f7:54:08:62:88:0f:eb:f6:0b:58:00:fd:f8:80:02:
         cb:9f:4c:76:27:8c:4f:cd:40:30:35:c1:81:30:7b:ba:26:25:
         61:bc:b0:a1:8b:95:bc:95:8e:bf:21:50:20:70:89:a2:12:5f:
         18:19:a0:e7:54:78:5e:22:d9:1f:09:af:d8:c6:42:b5:a6:1b:
         ba:2c:cc:f6:cf:50:ff:6f:94:c3:f4:84:14:4a:ea:ac:a3:0d:
         78:cf:d0:73:aa:da:95:4c:f1:28:25:4d:96:fc:2a:fe:5b:96:
         79:b9:94:bc:0d:8d:96:2a:c5:b7:9f:e1:0a:1d:cc:9c:11:59:
         20:64:30:57:f6:8f:b7:b7:e2:95:c7:c4:20:33:a1:56:ce:21:
         0b:3f:a8:50:60:5f:c9:10:86:2e:f0:9d:96:bd:ca:01:ba:af:
         c1:9b:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----