Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.mft
File:                     2CD9B2A2B015061457F1A9598631FA6CA2004705.mft (raw, json)
Hash identifier:          uzPEN5zJLYi9G1HhdGv59fA8ixJ3tx5eP3oJfVn0GVE=
Subject key identifier:   50:E4:66:15:80:54:A3:38:3F:44:E1:BB:52:2B:BA:96:4A:F8:BC:5F
Authority key identifier: 2C:D9:B2:A2:B0:15:06:14:57:F1:A9:59:86:31:FA:6C:A2:00:47:05
Certificate issuer:       /CN=2CD9B2A2B015061457F1A9598631FA6CA2004705
Certificate serial:       067F2CD020F150D105927CAF7010AC29C584E6C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.mft
Manifest number:          0101
Signing time:             Sat 12 Oct 2024 21:13:35 +0000
Manifest this update:     Sat 12 Oct 2024 21:08:35 +0000
Manifest next update:     Sun 13 Oct 2024 23:04:35 +0000
Files and hashes:         1: 323830343a363131633a3a2f33322d313238203d3e20323639323133.roa (hash: nxPITwHZcEZz9brigdlaLw3xwumCt2nFqn5kLghK0Q4=)
                          2: 34352e3138322e32342e302f32322d3332203d3e20323639323133.roa (hash: mUl9Ms/1J7tEbUX8UOQeAkE2Ds6uDhFF93P15XbPuTw=)
                          3: 2CD9B2A2B015061457F1A9598631FA6CA2004705.crl (hash: LSPEnsPeGd2N88BYBuP71wsBce/RHX2+CDtLzYiLEEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7f:2c:d0:20:f1:50:d1:05:92:7c:af:70:10:ac:29:c5:84:e6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD9B2A2B015061457F1A9598631FA6CA2004705
        Validity
            Not Before: Oct 12 21:08:35 2024 GMT
            Not After : Oct 13 23:04:35 2024 GMT
        Subject: CN=50E466158054A3383F44E1BB522BBA964AF8BC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:32:6c:7e:83:16:b8:14:3f:08:18:3c:66:
                    cd:67:3b:7d:3e:3e:14:43:14:9b:ab:a7:30:ca:9a:
                    98:96:ed:dc:30:ff:2c:43:4e:d1:5a:f0:c3:1a:9c:
                    ee:ea:82:92:1e:e8:f4:fd:34:fc:e8:98:0e:ed:6b:
                    ed:25:8f:ca:06:66:a3:b2:86:2f:21:02:59:22:5a:
                    a0:50:1f:7d:b1:3d:e6:00:33:b0:1b:0b:94:f0:e2:
                    5e:21:48:a5:8c:25:88:fc:53:4a:22:6d:93:91:5f:
                    80:c7:44:d1:bb:61:13:56:a9:02:2c:58:4f:02:b7:
                    d4:db:f8:b8:fd:5e:46:d7:9c:73:0e:da:ea:96:9e:
                    0d:fc:b0:3a:d1:44:f8:e7:07:7d:6c:ea:58:85:7b:
                    04:e7:61:2f:82:0c:bb:13:23:ae:c1:cd:c6:2e:10:
                    14:bf:4f:2f:61:64:2e:a1:0a:67:ba:39:75:de:d7:
                    ad:df:3f:09:79:57:1f:e2:f5:d4:a4:1d:28:c2:ce:
                    8d:ce:37:2e:50:5c:05:fb:0b:30:fc:72:b3:36:40:
                    e3:a3:9d:93:dc:7c:2d:1d:3f:fe:05:f9:1b:0f:59:
                    20:17:68:91:b3:05:90:70:15:73:07:6f:7f:98:cc:
                    0c:ed:fb:ab:d3:2a:c6:98:fc:2e:fd:f2:c9:e7:13:
                    e0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:66:15:80:54:A3:38:3F:44:E1:BB:52:2B:BA:96:4A:F8:BC:5F
            X509v3 Authority Key Identifier:
                keyid:2C:D9:B2:A2:B0:15:06:14:57:F1:A9:59:86:31:FA:6C:A2:00:47:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:23:6a:7c:14:67:e4:b2:1b:59:90:85:c1:cc:91:ef:03:36:
         84:34:df:90:85:24:58:65:f9:5a:c7:3b:ab:48:84:04:11:b9:
         d4:76:5f:8c:e7:54:dd:15:72:38:6c:9a:98:d1:e5:42:29:b5:
         15:20:76:dd:ce:c3:e9:90:db:3c:84:f0:0b:a9:f5:3f:92:fa:
         eb:37:f6:b0:67:cd:5e:e0:52:7f:fb:0c:92:b8:7b:56:3c:ea:
         9d:12:9e:7e:37:f2:95:23:cc:69:97:e4:36:0d:24:89:17:1d:
         9e:ab:b7:e7:84:6f:03:b0:77:12:7a:8b:f0:9c:c9:54:e2:6a:
         4e:20:8f:a2:8f:1f:ab:d6:f0:99:74:db:20:18:6d:3f:40:53:
         3c:f5:12:fb:ce:30:a0:2e:b0:93:e2:cc:5a:62:4a:b8:9a:a7:
         3c:d0:c8:59:55:a5:71:aa:85:ce:32:b3:53:88:b6:2a:39:bd:
         2e:21:22:46:f2:6d:7c:ca:e0:01:39:2a:ef:a0:5a:2c:5e:b9:
         5b:48:33:88:9d:45:b9:cd:61:5a:05:12:12:1f:22:6f:0a:1f:
         d6:bb:24:46:2c:6d:cc:09:6c:cc:1c:ac:ce:84:f3:b8:68:68:
         a6:10:e5:99:7a:9e:e6:1b:13:5e:48:d7:27:84:ee:e5:d8:7e:
         b5:ff:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----