Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/58EB51309446697469911D6A209F194B8F572048.mft
File:                     58EB51309446697469911D6A209F194B8F572048.mft (raw, json)
Hash identifier:          jEqluQj+gRNIoyiheR6Fr+W26vZir/70/b4H9vBv6ao=
Subject key identifier:   BE:42:C3:22:A5:FE:A2:FA:19:9B:7B:97:50:B6:5B:B2:DA:13:80:6C
Authority key identifier: 58:EB:51:30:94:46:69:74:69:91:1D:6A:20:9F:19:4B:8F:57:20:48
Certificate issuer:       /CN=58EB51309446697469911D6A209F194B8F572048
Certificate serial:       3C1887892DF3E5C59815902C81212FBDADAB983D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58EB51309446697469911D6A209F194B8F572048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/58EB51309446697469911D6A209F194B8F572048.mft
Manifest number:          021D
Signing time:             Wed 17 Jan 2024 22:00:37 +0000
Manifest this update:     Wed 17 Jan 2024 21:55:37 +0000
Manifest next update:     Fri 19 Jan 2024 00:53:37 +0000
Files and hashes:         1: 58EB51309446697469911D6A209F194B8F572048.crl (hash: KJFqzlmMBJg9xYbsXiKrfgp70WrcRCDvITkFFvJzVDU=)
                          2: 323830343a343239383a3430303a3a2f33382d3338203d3e20323637353131.roa (hash: +lmP+m8iygk4jS4tpF2mbJRBJZfvq6RUu/ZortsGExU=)
                          3: 3230312e3138322e3130302e302f32322d3234203d3e20323637353131.roa (hash: 7DJN76qGxnJ9W52N4/4P1XezsuZ4397Pa2/xor9/g5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:18:87:89:2d:f3:e5:c5:98:15:90:2c:81:21:2f:bd:ad:ab:98:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58EB51309446697469911D6A209F194B8F572048
        Validity
            Not Before: Jan 17 21:55:37 2024 GMT
            Not After : Jan 19 00:53:37 2024 GMT
        Subject: CN=BE42C322A5FEA2FA199B7B9750B65BB2DA13806C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:f1:7c:e2:ad:4d:fb:61:c6:3d:eb:c1:3e:
                    ab:b9:b5:53:64:5b:ad:9d:da:bd:9c:c0:2d:ce:67:
                    b9:4e:8a:92:8d:8d:38:aa:86:36:e2:7d:71:ff:ef:
                    ac:ac:ab:ba:5e:c9:70:c7:9c:25:d8:ff:c3:30:1e:
                    0f:7e:b9:ba:09:96:bb:4d:a8:0f:5f:3d:e9:5a:91:
                    b6:16:12:7d:47:43:ae:35:38:cd:b3:e5:c6:99:fd:
                    ec:29:a5:e1:be:0d:9b:20:8c:fd:52:74:6e:1b:61:
                    7c:a6:2c:d2:29:7a:76:7b:ab:89:49:c0:0a:d9:7d:
                    00:47:37:ca:b8:fb:29:6c:a3:2b:d8:c6:e6:b8:18:
                    1b:6c:b8:8f:0c:30:93:02:2e:8d:bf:0f:4e:ce:5e:
                    62:14:04:d1:6e:75:ce:b5:66:20:83:15:74:a9:89:
                    f0:b8:7b:74:f9:c6:52:09:9c:6c:0b:52:b2:50:84:
                    4d:3a:08:ab:d1:29:94:9a:16:01:6e:04:c8:2b:af:
                    d3:da:6a:10:c5:4c:c2:3d:54:71:77:91:6e:37:4b:
                    e4:20:09:ba:38:c5:f0:f2:c1:3e:92:99:0a:75:76:
                    8e:73:48:ea:d5:05:da:58:20:8f:03:48:30:e7:0a:
                    d7:5e:93:e8:83:74:b6:68:17:6a:0d:1b:1f:e3:98:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:C3:22:A5:FE:A2:FA:19:9B:7B:97:50:B6:5B:B2:DA:13:80:6C
            X509v3 Authority Key Identifier:
                keyid:58:EB:51:30:94:46:69:74:69:91:1D:6A:20:9F:19:4B:8F:57:20:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/58EB51309446697469911D6A209F194B8F572048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58EB51309446697469911D6A209F194B8F572048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/58EB51309446697469911D6A209F194B8F572048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:54:de:d5:7b:f0:43:ef:a6:cc:6d:01:ca:71:da:11:7f:d0:
         75:0c:d9:f6:8d:a2:b2:9d:68:d1:8e:2c:11:cb:43:42:ed:cb:
         83:75:40:30:8f:98:9d:e9:34:a2:fc:8d:fa:7a:28:1e:19:db:
         34:d8:f1:81:7e:21:cb:eb:11:65:ea:d1:46:98:7e:c0:14:94:
         48:86:f2:23:c6:f0:47:3e:da:61:18:43:c9:91:87:20:a6:ac:
         9d:79:f4:b5:55:f3:a4:1b:c3:09:f5:35:85:8d:d0:a9:7d:c3:
         a8:5f:e0:de:5c:8f:5d:c3:2e:a1:92:5f:a6:82:a3:00:0f:2b:
         31:f3:89:23:50:c5:de:c1:87:69:66:f9:12:47:58:01:de:86:
         57:a0:97:a6:c3:df:be:25:aa:84:a0:8c:e9:e7:8f:fa:42:f1:
         8f:f7:73:e1:fc:61:fb:a2:e5:8e:74:ca:32:07:e6:88:55:40:
         1e:47:20:59:0d:e7:86:76:4e:f6:ba:95:07:af:bb:25:0d:da:
         54:f7:3b:b7:2d:d3:ad:53:04:29:dc:6b:b7:fc:0b:76:76:30:
         64:7f:01:1a:e2:a9:ae:80:03:97:b9:bb:26:b9:c6:2d:f6:60:
         5a:8f:fe:75:b4:f8:02:57:78:ab:14:e8:e1:47:ea:f2:52:64:
         98:14:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----