Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/51C2EC2E8985040FA85C26651E67991D969C7E20.mft
File:                     51C2EC2E8985040FA85C26651E67991D969C7E20.mft (raw, json)
Hash identifier:          HAmOJIzjVEjT1EmrAGvnn9NfYspFi+VXERQ+0IkbNVE=
Subject key identifier:   CC:AD:F5:1D:85:8F:F9:A9:44:B8:A0:7F:EA:07:5B:22:10:1C:F9:92
Authority key identifier: 51:C2:EC:2E:89:85:04:0F:A8:5C:26:65:1E:67:99:1D:96:9C:7E:20
Certificate issuer:       /CN=51C2EC2E8985040FA85C26651E67991D969C7E20
Certificate serial:       14B058901B08FF8D76E7B8E57196450E1A8C1100
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C2EC2E8985040FA85C26651E67991D969C7E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/51C2EC2E8985040FA85C26651E67991D969C7E20.mft
Manifest number:          D0
Signing time:             Thu 05 Sep 2024 08:10:00 +0000
Manifest this update:     Thu 05 Sep 2024 08:05:00 +0000
Manifest next update:     Fri 06 Sep 2024 08:59:00 +0000
Files and hashes:         1: 3230302e3130382e3136382e302f32322d3234203d3e20323730323535.roa (hash: T5yDyAZMHmKjL3CrabAyd5A28DcPA+mlSQyqj7JNVhA=)
                          2: 34352e3138342e38382e302f32322d3234203d3e20323730323535.roa (hash: FSgORGPIJQF8N2ZNL4716gMDI3WDON8Lb4EadfBVHuE=)
                          3: 51C2EC2E8985040FA85C26651E67991D969C7E20.crl (hash: QUDuIyl2SkkSX/4ODwq6uQ8pKHONqN0zGJ41hAlcRPo=)
                          4: 323830343a363933343a3a2f33322d3438203d3e20323730323535.roa (hash: Qlu8mU0aSvT/u/5VUNoAcIuqrGHXw9uRMa1EBQQEyac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b0:58:90:1b:08:ff:8d:76:e7:b8:e5:71:96:45:0e:1a:8c:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C2EC2E8985040FA85C26651E67991D969C7E20
        Validity
            Not Before: Sep  5 08:05:00 2024 GMT
            Not After : Sep  6 08:59:00 2024 GMT
        Subject: CN=CCADF51D858FF9A944B8A07FEA075B22101CF992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:f5:09:3c:58:30:1f:17:e3:31:d6:91:f0:
                    ce:7d:42:b2:03:c2:91:b3:7d:df:ea:37:a0:a6:c8:
                    ab:6f:02:95:f2:c1:a4:92:8e:14:d9:8a:28:f5:90:
                    ff:8a:9b:36:e6:aa:b2:41:26:bd:34:6a:b3:fc:23:
                    7c:99:e2:d4:70:96:cb:cb:c4:71:ce:94:e7:2d:0d:
                    ba:9c:90:9e:06:51:b2:f9:af:0d:d6:6b:84:18:0c:
                    99:5f:0d:59:79:8d:94:12:d0:c7:df:af:d8:3a:78:
                    94:4c:7c:a3:49:1f:f8:57:b6:a2:c2:f1:ed:d3:53:
                    1b:c1:cf:38:c6:25:b7:43:a1:45:6e:e1:0e:37:cb:
                    a2:7e:ea:c5:49:c3:8a:f9:9b:46:13:cd:b0:82:10:
                    a7:11:80:38:2c:39:77:4c:7f:5c:74:e7:b0:0b:36:
                    be:0d:9f:ef:2e:08:aa:9c:8e:d3:bd:35:9c:0b:08:
                    3b:8c:56:97:7c:0e:a3:12:3a:a6:75:74:88:01:c9:
                    3d:54:df:f9:bd:37:36:b1:bc:a2:6a:6f:7d:f3:c4:
                    8f:c3:82:5c:a4:aa:b8:a4:68:ad:3f:c1:e1:b1:53:
                    7a:04:85:22:e2:71:f5:88:e0:18:4b:fb:7b:df:c8:
                    cf:4e:ad:8b:9a:bf:57:8f:c5:0f:0d:17:15:53:38:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AD:F5:1D:85:8F:F9:A9:44:B8:A0:7F:EA:07:5B:22:10:1C:F9:92
            X509v3 Authority Key Identifier:
                keyid:51:C2:EC:2E:89:85:04:0F:A8:5C:26:65:1E:67:99:1D:96:9C:7E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/51C2EC2E8985040FA85C26651E67991D969C7E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C2EC2E8985040FA85C26651E67991D969C7E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/51C2EC2E8985040FA85C26651E67991D969C7E20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:94:1b:ba:3d:65:f1:81:64:12:8d:86:03:26:6e:4c:01:
         54:7b:fb:d4:91:31:9d:6d:9c:30:70:4c:eb:f0:a4:89:e5:9e:
         a5:12:7b:7a:c0:b8:12:8b:3e:de:78:23:45:9b:5a:ad:26:d6:
         b6:8c:dd:04:8c:62:99:2f:91:af:7b:4c:a3:57:35:47:a5:4f:
         81:c6:50:36:c6:97:47:a0:e6:21:71:29:bd:2a:99:0b:91:ec:
         75:d9:73:56:f7:41:ff:1e:1b:f6:fd:24:1d:a2:70:e3:f5:ea:
         72:dc:91:65:8f:08:5c:4d:80:2a:8d:d0:2b:4d:07:01:45:ab:
         1e:ad:fb:be:2c:88:54:b3:40:25:97:56:15:6f:11:2c:df:3e:
         2d:ea:aa:da:44:93:f2:c2:46:ae:36:9e:3c:13:96:32:2c:41:
         f9:6f:8b:34:44:e3:2e:bc:e0:d1:33:11:f6:0f:77:0e:e7:6b:
         c8:31:ac:c9:a6:a6:6d:80:49:9a:84:47:ef:b9:9f:60:e9:2f:
         bf:d2:f4:f9:b1:1f:36:fa:13:9e:d1:8c:92:ac:26:16:f3:0f:
         c9:72:0d:4f:f5:9c:f0:bc:ec:3d:1b:8e:5b:79:d7:36:13:c6:
         5b:e5:39:e5:90:e4:56:b4:10:64:96:d8:12:10:09:0d:24:45:
         d8:3e:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----