Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.mft
File:                     43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.mft (raw, json)
Hash identifier:          8ec783FIImqzgXHnhaDaZ2KuIuJA3FpsM3siliMyWGc=
Subject key identifier:   A4:7E:D2:24:26:AA:11:94:D2:4F:AA:0D:E0:D3:75:BA:41:1E:B6:60
Authority key identifier: 43:C9:80:39:3B:B3:D0:2D:AB:AB:20:B5:8D:E3:6C:C2:CB:4D:7D:B7
Certificate issuer:       /CN=43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7
Certificate serial:       3D8E08C5E8D6DB916F6759FBD4CCAAB8B50817FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.mft
Manifest number:          03D7
Signing time:             Mon 15 Apr 2024 02:23:15 +0000
Manifest this update:     Mon 15 Apr 2024 02:18:15 +0000
Manifest next update:     Tue 16 Apr 2024 04:23:15 +0000
Files and hashes:         1: 34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (hash: rVVjnxuQJbcsq3yzOtjf1md770kkjSu6krmx+TOUoDo=)
                          2: 323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (hash: 8tDqTf019LGC1c1Z1YdOqkt9SveHOdTxaMKrZ7IHsI8=)
                          3: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (hash: Jruxkc0382yeGMsHbd8aquS1CnuFmWrePGEvE29OlCg=)
                          4: 43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.crl (hash: vSbQG7TCfX1J6XMTC9U8GC3qMrbsh+1J45TaWEZSloA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8e:08:c5:e8:d6:db:91:6f:67:59:fb:d4:cc:aa:b8:b5:08:17:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7
        Validity
            Not Before: Apr 15 02:18:15 2024 GMT
            Not After : Apr 16 04:23:15 2024 GMT
        Subject: CN=A47ED22426AA1194D24FAA0DE0D375BA411EB660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:4f:ea:3b:0d:d5:2d:a5:df:b0:16:5f:fd:
                    4e:f7:32:71:b9:b7:a5:30:72:62:a2:54:d4:6f:78:
                    ba:04:5e:c4:81:be:2c:77:43:f5:60:26:4f:6a:3d:
                    11:0c:d7:34:be:af:24:d7:75:ff:33:7f:a2:61:9c:
                    16:fa:ee:7d:8f:ec:bf:e8:e3:85:67:e6:f7:64:ed:
                    1a:23:08:f3:80:ed:60:a7:6a:e0:fa:e8:3e:e1:61:
                    9a:24:9c:33:8b:ab:d2:07:86:20:05:9f:c6:0e:2e:
                    24:4b:fe:f6:97:bc:09:80:6e:97:c1:37:ec:6e:a3:
                    63:29:6b:c3:50:ff:1b:71:2e:07:83:72:aa:dc:c2:
                    74:12:f4:c1:e0:15:e8:f2:77:3f:2e:ce:28:9b:b0:
                    3b:b2:ad:d5:59:f1:0c:2f:6c:e3:9f:cb:02:53:c2:
                    0a:fb:c2:7b:be:95:82:b2:34:5b:d9:6d:fd:99:f2:
                    22:3c:b7:ef:68:6c:53:9d:2d:b8:ca:b4:24:08:d0:
                    8d:93:4a:10:2f:be:6d:bb:e8:aa:26:c7:31:e5:1a:
                    4a:80:9e:6c:5d:ef:dc:b3:c2:4f:cc:e0:ae:e4:95:
                    87:38:70:cf:0d:8c:43:59:01:13:2b:cb:c7:e6:93:
                    a7:bc:e3:64:16:8b:45:66:9d:43:64:9b:e6:cc:a6:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7E:D2:24:26:AA:11:94:D2:4F:AA:0D:E0:D3:75:BA:41:1E:B6:60
            X509v3 Authority Key Identifier:
                keyid:43:C9:80:39:3B:B3:D0:2D:AB:AB:20:B5:8D:E3:6C:C2:CB:4D:7D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:c9:7f:ab:64:b0:2b:0a:59:ce:f8:be:19:4e:30:42:4b:
         10:02:87:5a:af:31:fe:0c:e0:c0:1b:fe:15:39:a6:14:1f:4c:
         68:7f:e1:56:4a:de:46:74:28:37:dd:7d:c4:ed:6d:cb:9b:de:
         5c:70:b4:7e:0d:6f:10:c8:a1:60:a3:3e:cc:b5:e4:a4:50:75:
         2a:83:18:88:8f:9b:79:49:17:08:f4:f6:c1:bf:c4:00:b0:1b:
         82:8b:ab:86:fa:b2:29:af:46:76:b8:ab:65:05:02:35:4f:b6:
         c9:a3:37:20:df:57:40:0e:fb:ed:d0:0e:94:37:80:ba:85:21:
         59:c7:3d:e2:13:49:7e:c7:3c:d4:ae:d5:e7:2d:5f:c8:b5:a2:
         8b:8b:fb:c6:75:14:37:95:0a:71:34:c3:33:ac:bd:ec:51:ae:
         91:62:f7:38:ac:82:32:81:2e:a1:72:3b:4a:8f:9c:39:eb:a5:
         b4:26:d6:ed:af:ac:0a:c9:2f:87:ba:6b:4d:d0:76:0f:cd:01:
         a1:99:2f:64:92:d6:3e:a8:cb:e6:a4:e7:fc:4b:21:7d:8c:ca:
         f1:2a:9f:5e:46:1d:49:9c:a7:dc:c7:6b:7b:5e:14:da:c5:b4:
         ed:2b:77:08:b8:0e:3d:29:b5:5f:99:c0:bf:70:5d:3f:07:7d:
         44:5d:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----