Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/0/59AB6F516C2BC405DEB458029EA40FA2327607EE.mft
File:                     59AB6F516C2BC405DEB458029EA40FA2327607EE.mft (raw, json)
Hash identifier:          nLwBreDcLgvwZhqsDWE5kZvt9TExNhvlol62Z/Iztk4=
Subject key identifier:   B1:E6:FC:55:DD:03:B6:20:29:52:8A:08:52:3A:70:27:FB:55:69:5E
Authority key identifier: 59:AB:6F:51:6C:2B:C4:05:DE:B4:58:02:9E:A4:0F:A2:32:76:07:EE
Certificate issuer:       /CN=59AB6F516C2BC405DEB458029EA40FA2327607EE
Certificate serial:       359C656E63774CFA55321324BC5B4F10735CB774
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59AB6F516C2BC405DEB458029EA40FA2327607EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/0/59AB6F516C2BC405DEB458029EA40FA2327607EE.mft
Manifest number:          027A
Signing time:             Mon 15 Apr 2024 04:36:29 +0000
Manifest this update:     Mon 15 Apr 2024 04:31:29 +0000
Manifest next update:     Tue 16 Apr 2024 06:49:29 +0000
Files and hashes:         1: 323830343a356436343a3a2f33322d3332203d3e20323638393639.roa (hash: HGZBzZYe8feHgyFN5yN8kdZa+ZsTphi1xYpTu6dS7IQ=)
                          2: 34352e3137362e35362e302f32322d3232203d3e20323638393639.roa (hash: VD2nNWtSwcbfesqIhcbxsTsr3PcFQ9wsqo9sTEieejk=)
                          3: 59AB6F516C2BC405DEB458029EA40FA2327607EE.crl (hash: Qn8a1b4sL3wAk8zA1Awun9lPBCvPA9MtE+1n/qDl6Gk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9c:65:6e:63:77:4c:fa:55:32:13:24:bc:5b:4f:10:73:5c:b7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59AB6F516C2BC405DEB458029EA40FA2327607EE
        Validity
            Not Before: Apr 15 04:31:29 2024 GMT
            Not After : Apr 16 06:49:29 2024 GMT
        Subject: CN=B1E6FC55DD03B62029528A08523A7027FB55695E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:df:b7:91:a6:cc:0c:d0:a5:84:b4:fe:31:
                    a9:c9:0f:46:2d:f5:2f:94:08:4a:7a:69:cb:0c:c4:
                    79:57:44:24:7b:8e:39:db:f1:6b:c2:a4:5e:6d:35:
                    82:40:c1:9f:1b:60:bc:07:a5:36:02:b8:10:1a:98:
                    84:d4:8e:9a:22:69:c1:8c:ae:58:2f:12:12:2f:20:
                    1e:3b:4c:53:d5:de:56:68:67:80:04:55:96:7e:b6:
                    c7:9c:df:a7:5a:95:3e:2c:66:09:b6:7a:76:06:05:
                    00:6f:bd:ee:60:b9:a9:e7:ac:f1:95:ca:f1:e2:04:
                    e6:c1:bc:2b:96:b6:05:18:94:b5:d5:8d:df:0b:c2:
                    72:4e:7a:ce:f5:0c:ee:b5:9c:e0:23:93:96:d0:83:
                    72:b7:3b:36:b5:b4:6a:63:56:54:7c:96:1b:31:63:
                    fe:17:ba:a6:87:cc:1f:45:b6:52:b4:3a:b4:dc:eb:
                    eb:bc:e8:95:1f:16:3e:6e:8a:a3:f9:33:4b:69:83:
                    a0:24:03:f1:96:6e:a3:3c:1d:3c:e7:97:2e:f2:6b:
                    da:0e:0d:4c:bd:14:e3:e1:ae:44:cd:c2:7d:bf:d1:
                    ef:de:27:f8:ea:17:93:c7:aa:f4:ee:23:a2:08:c3:
                    d0:8f:9b:77:ba:27:e0:b5:3b:77:b4:9d:29:96:9c:
                    7c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E6:FC:55:DD:03:B6:20:29:52:8A:08:52:3A:70:27:FB:55:69:5E
            X509v3 Authority Key Identifier:
                keyid:59:AB:6F:51:6C:2B:C4:05:DE:B4:58:02:9E:A4:0F:A2:32:76:07:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/0/59AB6F516C2BC405DEB458029EA40FA2327607EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59AB6F516C2BC405DEB458029EA40FA2327607EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/0/59AB6F516C2BC405DEB458029EA40FA2327607EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c1:53:19:25:ac:ee:a4:70:30:d1:e2:09:38:cf:19:5d:af:
         5c:07:1c:4d:d0:9f:55:fb:e1:1a:c6:c3:ad:ad:bc:ed:74:31:
         78:ac:d1:8d:6d:c1:72:9f:20:b9:9b:6f:37:a2:d1:d8:e4:2b:
         e1:81:83:00:28:5b:66:95:49:3b:ed:d5:68:c2:8c:ef:8c:3b:
         a4:b9:29:51:54:2e:a6:72:6b:af:5d:eb:a8:b4:f3:b6:eb:86:
         3f:3c:38:b5:82:5e:4d:67:b5:ce:1f:f4:4d:82:d9:e9:39:cf:
         e8:10:d6:f1:08:c8:0b:c5:b7:5f:62:d7:4f:2a:01:7d:43:3c:
         a5:05:2b:84:ad:6b:a7:31:8c:fe:08:1b:c1:85:fe:2b:a0:be:
         5f:b7:e8:35:f7:68:b8:46:cf:88:16:f7:68:96:26:32:a1:d9:
         3b:17:13:0c:fe:f0:97:be:79:d7:25:5b:01:12:a4:43:6a:0b:
         52:ed:4d:b5:0d:0f:c1:b8:0b:55:7d:0b:2a:3b:57:77:dd:54:
         76:15:17:8e:08:63:06:41:fb:44:47:3e:91:26:15:7f:28:1f:
         8c:1c:af:11:23:e9:30:19:d0:93:73:a4:aa:53:78:05:00:33:
         3f:d4:b7:ac:18:5a:e5:ab:42:32:73:b4:63:1f:53:b0:78:64:
         97:1c:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----