Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.mft
File:                     58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.mft (raw, json)
Hash identifier:          Iv8RSy3+OHCMfbBGAVM2u709NB2ZscJqxWM/2LlQlWk=
Subject key identifier:   86:59:6A:2E:E1:ED:EF:B4:73:40:87:9B:FC:04:B9:5F:12:45:6A:ED
Authority key identifier: 58:A8:18:05:DF:D8:71:28:E5:A7:C3:CB:4F:D0:5D:5F:5D:00:06:DC
Certificate issuer:       /CN=58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC
Certificate serial:       14A9832BAD0A876DA6CE4A41CE846AA4C15D6192
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.mft
Manifest number:          17
Signing time:             Thu 22 Feb 2024 00:26:28 +0000
Manifest this update:     Thu 22 Feb 2024 00:21:28 +0000
Manifest next update:     Fri 23 Feb 2024 02:31:28 +0000
Files and hashes:         1: 3134332e3133372e3135322e302f32322d3234203d3e20323634303432.roa (hash: +TOa6bkjFRjWN85gh1tfa3cI+9soFWERcQZNCpSmxFc=)
                          2: 323830343a323965343a3a2f33322d3438203d3e20323634303432.roa (hash: laoeE0z4kucVD7pc7PfaVoeaXQzG3fewpl2DRupNsrs=)
                          3: 58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.crl (hash: TKRK6PRUsZarbCjqthDW3/lne6eX7LZJYpviA/+VjiA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a9:83:2b:ad:0a:87:6d:a6:ce:4a:41:ce:84:6a:a4:c1:5d:61:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC
        Validity
            Not Before: Feb 22 00:21:28 2024 GMT
            Not After : Feb 23 02:31:28 2024 GMT
        Subject: CN=86596A2EE1EDEFB47340879BFC04B95F12456AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:32:a5:8c:ed:a5:d8:8c:66:37:79:8c:e6:
                    91:79:78:09:1d:15:ef:b2:57:f8:50:0b:d7:ac:59:
                    14:86:ba:e6:e9:8a:ce:51:5d:10:7c:09:61:09:c5:
                    50:1b:65:49:de:4f:2f:f1:f2:70:bc:dd:46:41:0c:
                    f5:ab:fc:e9:29:d5:35:20:22:fb:90:77:a2:9b:35:
                    dc:c6:64:9c:0b:db:5b:0a:5a:35:f9:8c:f7:bf:a9:
                    92:54:5e:46:69:6a:19:ae:11:f9:06:fc:aa:56:a4:
                    b1:43:30:5a:2b:59:c7:50:32:93:a3:5c:37:58:7f:
                    19:66:a6:db:b3:22:45:f4:7b:59:8e:48:3d:b9:81:
                    fa:d6:e4:6d:eb:9b:1a:e0:76:cd:f6:cb:26:9e:8c:
                    99:d2:8a:99:35:ad:29:3b:12:06:fa:52:fa:48:32:
                    b5:24:ed:f9:5d:a2:d3:c6:f2:d8:cf:10:76:68:e4:
                    ca:7c:c8:82:45:26:17:4f:40:f4:fc:f7:c8:77:4c:
                    c2:0c:26:fd:00:58:86:46:51:75:66:08:7d:bb:67:
                    70:6e:f4:92:f9:80:78:bd:4e:6b:6f:59:85:0d:75:
                    61:d9:ef:f7:18:37:e5:8f:dd:21:35:33:47:23:6a:
                    03:c5:14:86:a3:4b:37:c0:32:98:c1:07:cb:92:15:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:6A:2E:E1:ED:EF:B4:73:40:87:9B:FC:04:B9:5F:12:45:6A:ED
            X509v3 Authority Key Identifier:
                keyid:58:A8:18:05:DF:D8:71:28:E5:A7:C3:CB:4F:D0:5D:5F:5D:00:06:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cb:18:bb:91:d4:70:8c:c3:a3:3b:3b:8d:34:4e:f6:93:31:
         46:01:8b:f2:11:7c:dd:81:e1:e6:4a:83:33:74:3c:c9:84:ec:
         25:8b:2a:59:29:35:c4:60:27:b3:dd:0c:c4:99:db:c4:f9:7a:
         67:c5:c6:f1:40:64:23:40:da:8a:3e:38:05:99:98:1d:b3:2d:
         7f:ea:d8:a7:5e:9e:75:ae:83:c9:d8:30:eb:7c:7e:63:e4:5f:
         50:86:e0:da:1e:23:6e:b8:34:4d:8f:42:7c:32:71:60:5a:69:
         33:56:6b:2a:12:da:b2:93:7e:62:2c:59:78:de:93:88:c0:7f:
         5b:4f:93:c0:7f:c1:7b:4f:d2:bc:0a:e1:67:81:4a:54:21:97:
         19:34:c1:8b:45:42:a9:a6:5f:a5:40:5b:f8:ca:96:4c:b5:85:
         03:02:05:cd:9a:85:6c:25:b4:59:c7:cc:35:13:94:b0:08:0e:
         64:47:c5:c2:da:48:75:d4:bc:e2:fb:ff:7c:cd:b4:10:07:d5:
         3f:7c:e5:a2:f1:74:3b:05:db:f5:cd:9c:e6:5e:de:b0:7b:04:
         15:30:7b:c7:e7:65:7c:a5:40:6b:04:2a:9f:24:f6:f8:93:5d:
         69:b5:50:ed:6c:76:4a:71:24:6c:b9:10:e0:ec:15:1c:75:f3:
         b1:e2:59:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----