Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/59CC8F0C68CB634537DB6EDA4400DDA648E25E81.mft
File:                     59CC8F0C68CB634537DB6EDA4400DDA648E25E81.mft (raw, json)
Hash identifier:          3viAPPc6QmHAHDHitSn231yeAPIF9e2SbB1T5bWmEoI=
Subject key identifier:   49:44:C4:D7:A6:BE:7E:E5:C6:1B:50:3A:3B:F8:79:99:67:0C:8B:E2
Authority key identifier: 59:CC:8F:0C:68:CB:63:45:37:DB:6E:DA:44:00:DD:A6:48:E2:5E:81
Certificate issuer:       /CN=59CC8F0C68CB634537DB6EDA4400DDA648E25E81
Certificate serial:       0C013066450DD27C934C4348DC8676E4A86AF24F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59CC8F0C68CB634537DB6EDA4400DDA648E25E81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/59CC8F0C68CB634537DB6EDA4400DDA648E25E81.mft
Manifest number:          C4
Signing time:             Thu 15 Dec 2022 21:31:15 +0000
Manifest this update:     Thu 15 Dec 2022 21:26:13 +0000
Manifest next update:     Sat 17 Dec 2022 01:02:13 +0000
Files and hashes:         1: 34352e342e3231322e302f32322d3234203d3e20323636303631.roa (hash: tSw1MtWGU/XTOpXbHeG1jIWntLhFM2xW1cWxttEdGyA=)
                          2: 59CC8F0C68CB634537DB6EDA4400DDA648E25E81.crl (hash: AV6T3C+RFAYI0j51dXK/G6IoefMXklUrry/k3oa5Fo0=)
                          3: 323830343a333966343a3a2f33322d3438203d3e20323636303631.roa (hash: ZIy9F9XedbJxlhfvUMqcxc3DRwgspsYFvvUgrBjoA4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:01:30:66:45:0d:d2:7c:93:4c:43:48:dc:86:76:e4:a8:6a:f2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59CC8F0C68CB634537DB6EDA4400DDA648E25E81
        Validity
            Not Before: Dec 15 21:26:13 2022 GMT
            Not After : Dec 17 01:02:13 2022 GMT
        Subject: CN=4944C4D7A6BE7EE5C61B503A3BF87999670C8BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:f2:78:dc:6b:5d:a4:7e:6a:4e:a9:68:da:
                    fc:fc:4a:38:fe:19:ce:91:30:b1:c9:d4:e7:e2:73:
                    f0:ec:eb:be:e1:58:f6:3b:69:f8:ce:f1:3c:8a:30:
                    b8:62:54:57:ee:16:2e:b6:c7:05:88:db:b2:da:55:
                    dd:9a:64:11:41:58:39:56:2a:03:e0:8b:48:85:8a:
                    60:07:c4:53:a2:33:c9:e4:47:80:0a:fb:12:2a:1e:
                    06:d4:44:81:69:34:b6:91:2a:01:04:e8:39:75:fd:
                    52:93:dd:2e:47:ae:d1:05:e5:9b:fc:fc:c7:76:25:
                    21:cc:d8:50:8f:b2:22:d7:ff:d3:33:14:f2:34:ec:
                    36:c7:58:5c:70:2d:4b:17:cc:15:4d:c0:36:b9:7c:
                    97:ba:6c:ca:26:0b:ef:c1:c0:86:a6:42:a2:d1:11:
                    38:b0:9e:99:7d:f1:b9:4e:0d:c1:49:a7:b8:6c:45:
                    a5:8b:f4:e6:cd:01:f3:84:7a:a3:1b:06:f1:86:d8:
                    ea:5a:44:57:1a:94:8c:ae:f1:03:a7:53:7f:9c:62:
                    70:27:85:78:60:70:13:be:d2:3c:fe:fe:e9:54:bd:
                    12:47:46:82:7a:e6:6c:ea:88:39:d6:2a:3f:13:00:
                    77:d4:90:9d:9f:c1:d2:fd:94:7a:8d:1d:7c:0e:4d:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:44:C4:D7:A6:BE:7E:E5:C6:1B:50:3A:3B:F8:79:99:67:0C:8B:E2
            X509v3 Authority Key Identifier:
                keyid:59:CC:8F:0C:68:CB:63:45:37:DB:6E:DA:44:00:DD:A6:48:E2:5E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/59CC8F0C68CB634537DB6EDA4400DDA648E25E81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59CC8F0C68CB634537DB6EDA4400DDA648E25E81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/59CC8F0C68CB634537DB6EDA4400DDA648E25E81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:b0:f1:96:20:79:27:07:29:c4:6f:fa:bf:5a:a7:39:6f:
         dd:ff:89:c1:0c:8a:63:0e:cb:df:6d:1e:50:36:4c:60:cf:e3:
         aa:09:85:b7:80:81:a7:92:02:80:14:6b:64:17:94:f7:4a:0f:
         94:94:90:48:50:0b:b0:af:fd:c9:15:cf:c3:6e:47:bf:f6:53:
         1f:b2:be:41:4a:51:4a:e0:04:2c:a2:5e:11:8e:4b:97:5f:2d:
         11:16:8a:e5:8d:8c:b0:c5:80:e1:a6:cf:d9:26:cb:b7:51:f1:
         c1:64:c5:96:7d:cb:51:76:8a:23:41:f4:3b:f0:fa:9e:9c:e2:
         14:e0:c2:3f:ba:99:6e:ca:3f:f8:ba:7e:6f:b1:6f:91:49:18:
         32:30:3c:e0:14:f2:0f:73:0c:f7:41:a0:11:d2:bc:03:b3:d1:
         a9:c8:33:82:56:5c:b0:e4:6b:e7:e5:d8:c8:b3:95:ae:b0:f0:
         56:1e:e6:ce:5a:21:98:e4:56:f4:cd:3c:37:07:7c:20:ed:51:
         9e:c6:aa:e2:27:dc:aa:94:1e:b7:91:21:b1:83:0a:96:68:39:
         df:4f:f0:c8:9a:b7:27:68:3e:9d:8c:a4:2a:a4:1a:b0:32:5d:
         6e:42:88:49:25:ad:ad:d1:34:7d:4c:a4:40:c5:81:16:85:4b:
         78:77:35:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDAEwZkUN0nyTTENI3IZ25Khq8k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlDQzhGMEM2OENCNjM0NTM3REI2RURBNDQwMEREQTY0
OEUyNUU4MTAeFw0yMjEyMTUyMTI2MTNaFw0yMjEyMTcwMTAyMTNaMDMxMTAvBgNV
BAMTKDQ5NDRDNEQ3QTZCRTdFRTVDNjFCNTAzQTNCRjg3OTk5NjcwQzhCRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWofJ43GtdpH5qTqlo2vz8Sjj+
Gc6RMLHJ1Ofic/Ds677hWPY7afjO8TyKMLhiVFfuFi62xwWI27LaVd2aZBFBWDlW
KgPgi0iFimAHxFOiM8nkR4AK+xIqHgbURIFpNLaRKgEE6Dl1/VKT3S5HrtEF5Zv8
/Md2JSHM2FCPsiLX/9MzFPI07DbHWFxwLUsXzBVNwDa5fJe6bMomC+/BwIamQqLR
ETiwnpl98blODcFJp7hsRaWL9ObNAfOEeqMbBvGG2OpaRFcalIyu8QOnU3+cYnAn
hXhgcBO+0jz+/ulUvRJHRoJ65mzqiDnWKj8TAHfUkJ2fwdL9lHqNHXwOTSBdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSUTE16a+fuXGG1A6O/h5mWcMi+IwHwYDVR0j
BBgwFoAUWcyPDGjLY0U3227aRADdpkjiXoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzk1dVNOZDhCa0hreVNuckFUSkZKUFJla25Ic1dMbUppRjlOZTZSTFRl
NFUvMC81OUNDOEYwQzY4Q0I2MzQ1MzdEQjZFREE0NDAwRERBNjQ4RTI1RTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5Q0M4RjBDNjhDQjYzNDUz
N0RCNkVEQTQ0MDBEREE2NDhFMjVFODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rzk1dVNOZDhCa0hreVNuckFUSkZKUFJla25Ic1dMbUppRjlOZTZSTFRlNFUvMC81
OUNDOEYwQzY4Q0I2MzQ1MzdEQjZFREE0NDAwRERBNjQ4RTI1RTgxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWzGw8ZYgeScHKcRv+r9apzlv3f+JwQyKYw7L320eUDZMYM/jqgmFt4CBp5IC
gBRrZBeU90oPlJSQSFALsK/9yRXPw25Hv/ZTH7K+QUpRSuAELKJeEY5Ll18tERaK
5Y2MsMWA4abP2SbLt1HxwWTFln3LUXaKI0H0O/D6npziFODCP7qZbso/+Lp+b7Fv
kUkYMjA84BTyD3MM90GgEdK8A7PRqcgzglZcsORr5+XYyLOVrrDwVh7mzlohmORW
9M08Nwd8IO1Rnsaq4ifcqpQet5EhsYMKlmg530/wyJq3J2g+nYykKqQasDJdbkKI
SSWtrdE0fUykQMWBFoVLeHc1uQ==
-----END CERTIFICATE-----