Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/43776BCC03A02AECDEDDF74F3558BD76D054B5EF.mft
File:                     43776BCC03A02AECDEDDF74F3558BD76D054B5EF.mft (raw, json)
Hash identifier:          z3OU9ZpzJm588XhdOk/sSnuPtRA5KSX1xO1ht+wfMOU=
Subject key identifier:   3D:50:5D:49:2F:82:57:84:D9:6B:FD:1B:E1:4E:74:29:7E:95:8E:90
Authority key identifier: 43:77:6B:CC:03:A0:2A:EC:DE:DD:F7:4F:35:58:BD:76:D0:54:B5:EF
Certificate issuer:       /CN=43776BCC03A02AECDEDDF74F3558BD76D054B5EF
Certificate serial:       3A0EAE4BDEB098F6902417AE1219C5C04A2DE16D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43776BCC03A02AECDEDDF74F3558BD76D054B5EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/43776BCC03A02AECDEDDF74F3558BD76D054B5EF.mft
Manifest number:          FF
Signing time:             Sun 14 Apr 2024 21:18:11 +0000
Manifest this update:     Sun 14 Apr 2024 21:13:11 +0000
Manifest next update:     Mon 15 Apr 2024 22:54:11 +0000
Files and hashes:         1: 3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa (hash: LEmiGIyJeJkOjRguivtjXx+G6XY00OW84sXmRTEdIQ0=)
                          2: 323830343a343261383a3a2f33322d313238203d3e20323637353137.roa (hash: wP7CgpO+gvZz4AbYl7DR5ddNU17Z/wigWXkM+LlDl+g=)
                          3: 43776BCC03A02AECDEDDF74F3558BD76D054B5EF.crl (hash: NqafQzVHVxYw7l6hY4xPSXNoR4cNADnXd50olPUqK3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0e:ae:4b:de:b0:98:f6:90:24:17:ae:12:19:c5:c0:4a:2d:e1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43776BCC03A02AECDEDDF74F3558BD76D054B5EF
        Validity
            Not Before: Apr 14 21:13:11 2024 GMT
            Not After : Apr 15 22:54:11 2024 GMT
        Subject: CN=3D505D492F825784D96BFD1BE14E74297E958E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:60:eb:1b:76:03:d3:f1:ac:6c:4e:17:86:
                    12:21:22:3c:df:6c:a7:63:e7:bd:91:61:2f:35:a9:
                    c8:16:d2:c5:ca:6b:17:6b:67:d6:c4:19:cc:f9:b9:
                    74:16:41:8b:a7:5c:0c:ec:73:6b:9b:52:6d:d0:ab:
                    82:8e:31:97:97:c0:a7:22:eb:54:73:41:3c:95:66:
                    cc:53:73:f0:de:14:b2:b8:06:04:fe:9c:32:de:cb:
                    96:e8:39:b9:2d:14:e0:36:b4:81:d8:59:22:f8:df:
                    72:33:95:dc:97:f6:7b:82:01:62:e6:29:a1:99:ae:
                    d1:5f:2b:54:b5:e5:3f:17:9e:20:87:84:b7:1d:99:
                    c8:d1:16:85:53:54:fa:22:15:d6:be:f1:d0:d4:51:
                    d6:00:75:55:ec:89:f3:92:25:fd:25:5d:91:33:48:
                    4f:8d:5b:20:3e:83:97:7e:a0:1f:e2:3e:59:90:84:
                    c2:3a:dd:ea:01:59:db:ef:8d:cf:f1:a4:ce:60:51:
                    e2:03:7a:40:8a:ad:98:34:92:81:bc:7d:bc:5b:35:
                    96:bb:51:ca:e0:41:f9:17:a3:09:5f:64:b1:f7:48:
                    61:ff:10:68:cd:68:59:a1:fd:1a:42:7c:e3:e6:b1:
                    4c:63:3c:52:b4:0a:9f:f1:60:30:66:9f:ef:2c:c3:
                    f2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:50:5D:49:2F:82:57:84:D9:6B:FD:1B:E1:4E:74:29:7E:95:8E:90
            X509v3 Authority Key Identifier:
                keyid:43:77:6B:CC:03:A0:2A:EC:DE:DD:F7:4F:35:58:BD:76:D0:54:B5:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/43776BCC03A02AECDEDDF74F3558BD76D054B5EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43776BCC03A02AECDEDDF74F3558BD76D054B5EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/43776BCC03A02AECDEDDF74F3558BD76D054B5EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:a2:a3:73:89:6c:3a:62:61:5f:96:29:eb:53:a5:33:07:
         8b:d1:92:d1:7f:62:6b:6a:83:91:5e:d2:92:36:23:ff:2a:ad:
         8e:8b:fd:cc:c3:db:48:7d:62:15:9f:32:2a:59:b1:96:2e:fe:
         53:07:e1:e8:c8:6c:1f:a6:b1:f6:81:3d:b6:61:5d:0e:a1:58:
         b3:70:5f:e2:73:e0:df:44:b5:38:f8:4d:6c:9f:cb:e1:95:11:
         82:cf:79:15:d4:62:dc:8a:be:34:11:3b:5e:41:ca:ce:c5:1d:
         02:96:c8:df:af:24:ce:bc:34:07:fc:b8:37:20:aa:35:f0:87:
         87:57:a0:1f:97:5c:56:4f:93:fb:9a:04:3c:94:c6:0b:82:d6:
         3e:91:96:c5:ef:5b:3c:30:d9:b9:e1:e7:b8:8b:e3:9b:8c:bf:
         f4:17:31:3f:3f:51:56:a6:15:31:9d:7a:00:58:1b:fe:f3:39:
         93:53:fb:70:04:53:08:c5:16:01:52:52:cb:8f:24:fc:6b:dc:
         19:0a:33:e9:64:e0:a3:b4:9d:61:60:f5:6f:c5:93:0f:8f:5d:
         53:73:cc:0f:fb:98:78:a9:9a:ad:5a:4e:a1:00:15:3c:9c:be:
         4b:92:5b:87:a4:7e:7b:51:16:6f:50:1b:65:5e:b1:9d:ab:56:
         51:aa:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----