Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.mft
File:                     D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.mft (raw, json)
Hash identifier:          vANjUxnhsfMfxbi1787kJP6Nb2gUkd4UgRG8ILmjRVw=
Subject key identifier:   59:BF:E4:B9:85:A1:0C:03:BF:86:F4:34:A0:1C:28:65:83:9E:48:9D
Authority key identifier: D0:51:E6:FF:BF:AE:DF:E6:42:82:A6:CD:43:D0:F3:D1:50:74:CE:29
Certificate issuer:       /CN=D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29
Certificate serial:       080EF9A87D84B42E7D84E5A09BDD1FFB6C22BCEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.mft
Manifest number:          81
Signing time:             Sun 14 Apr 2024 18:50:01 +0000
Manifest this update:     Sun 14 Apr 2024 18:45:01 +0000
Manifest next update:     Mon 15 Apr 2024 22:46:01 +0000
Files and hashes:         1: 323830343a386465383a3a2f33322d3332203d3e20323733333839.roa (hash: TFNOBFPvougM1DIJlUyRe8JobGwnhTQYmcU9lGsW084=)
                          2: D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.crl (hash: NTf+p/CFZnPgDcv5Rcit20CIkC0swuSPowWLkqgc22E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0e:f9:a8:7d:84:b4:2e:7d:84:e5:a0:9b:dd:1f:fb:6c:22:bc:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29
        Validity
            Not Before: Apr 14 18:45:01 2024 GMT
            Not After : Apr 15 22:46:01 2024 GMT
        Subject: CN=59BFE4B985A10C03BF86F434A01C2865839E489D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:65:d8:e1:84:65:05:24:3a:cf:20:fa:ee:
                    cb:7d:66:cd:09:7c:57:50:96:db:e9:32:70:80:f4:
                    d8:c4:14:80:f3:13:3e:12:52:6c:bf:9c:2c:d0:95:
                    8b:a4:05:9e:62:48:b8:ea:60:75:57:7e:32:01:f4:
                    08:83:6f:39:47:bd:44:af:39:4d:c2:97:81:ce:73:
                    47:b4:e4:2e:cb:a6:e8:2b:14:b3:5d:c8:fc:95:48:
                    e1:d5:55:4c:9d:c3:be:61:c0:f0:f4:87:14:8f:f0:
                    b7:63:21:35:4d:86:59:26:1d:94:5a:4d:1d:ba:c3:
                    c3:3e:c1:0d:1c:5e:5d:16:0c:a7:70:ed:e3:0a:79:
                    a5:d2:30:38:9d:fe:ff:d0:cf:71:92:d7:f0:7c:cc:
                    b5:c8:7e:b7:fb:7b:6b:a1:36:bf:75:c1:98:59:72:
                    58:2e:0e:8e:fa:b0:21:86:aa:14:82:49:78:8f:22:
                    6c:f3:64:ca:7a:ec:a6:9d:a5:fb:5a:0e:bb:cc:62:
                    53:95:6c:54:6f:0d:27:ce:ff:a1:b6:0a:ed:1a:f8:
                    53:57:06:c3:e8:18:b3:35:bc:2d:74:d5:ef:19:81:
                    18:7b:9f:f2:13:73:7c:8d:8b:4e:09:c0:21:db:49:
                    c3:1d:e0:70:7b:0c:f5:35:60:38:1e:bf:0c:d5:a0:
                    40:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BF:E4:B9:85:A1:0C:03:BF:86:F4:34:A0:1C:28:65:83:9E:48:9D
            X509v3 Authority Key Identifier:
                keyid:D0:51:E6:FF:BF:AE:DF:E6:42:82:A6:CD:43:D0:F3:D1:50:74:CE:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cc:e5:3c:bc:0c:44:5b:57:ed:57:2f:15:91:44:bc:21:68:
         05:37:5b:ea:95:30:2b:13:b0:05:37:f8:b6:ee:7e:28:16:ea:
         79:8e:7b:37:f7:72:e1:14:3f:3d:17:da:cb:a0:15:24:a9:1a:
         5a:69:35:71:e6:6a:ab:d1:7f:51:b9:30:0e:2f:89:29:12:a6:
         04:b9:cb:54:e0:85:07:62:0c:86:e1:18:2f:90:10:93:d1:71:
         a9:06:1b:2d:80:d9:35:92:82:f5:46:02:97:be:6d:e6:a7:fc:
         40:f8:1a:c4:e2:3a:18:48:09:17:cf:cb:bd:8b:f2:85:0e:76:
         5f:52:65:03:b6:91:50:47:bf:34:6a:d6:7d:1d:58:30:ac:e6:
         bf:a5:f9:ac:5a:e7:55:45:f0:8e:50:b9:3d:31:89:c1:dc:a6:
         a8:a2:6f:5a:05:2e:3d:2e:54:ab:5e:c8:d1:c2:5a:90:03:e5:
         d2:7c:41:0b:db:a0:f0:d5:60:6b:c3:b7:cf:3c:05:ae:d7:64:
         ec:ed:39:75:5f:ad:90:b4:ef:c8:e3:74:21:8b:ec:06:38:5e:
         58:c9:13:f7:98:39:2b:5a:77:d4:e0:02:9d:7c:60:f7:03:59:
         66:fc:a8:c4:25:31:05:ce:5d:ac:4e:4d:7a:ad:08:10:87:70:
         22:0a:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----