Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/2/43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.mft
File:                     43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.mft (raw, json)
Hash identifier:          P+KOL1MQqEEU6A/btck/qXnweyM6yZ+7NEuhO4XkMks=
Subject key identifier:   02:9E:89:8B:86:22:3A:F5:EE:3A:D4:64:15:D3:37:45:24:1F:5A:0A
Authority key identifier: 43:86:1D:E4:D9:EB:4A:4A:65:C2:BE:7F:D7:F8:8E:0F:CD:C3:CB:77
Certificate issuer:       /CN=43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77
Certificate serial:       7D9EAA39BE554F5F22D5362EE0407144468353A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/2/43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.mft
Manifest number:          012A
Signing time:             Tue 12 Nov 2024 11:26:49 +0000
Manifest this update:     Tue 12 Nov 2024 11:21:49 +0000
Manifest next update:     Wed 13 Nov 2024 12:20:49 +0000
Files and hashes:         1: 43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.crl (hash: HnJtOgKFYgAm2hJLZdm4AvNItrmVHI7Gb0qIN7lYjS4=)
                          2: 3137372e382e36342e302f32322d3332203d3e20323632383333.roa (hash: N3Pe42uYotDeE8w0ucK/3NKdG+8bsV+ZXKedcAgb+DQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9e:aa:39:be:55:4f:5f:22:d5:36:2e:e0:40:71:44:46:83:53:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77
        Validity
            Not Before: Nov 12 11:21:49 2024 GMT
            Not After : Nov 13 12:20:49 2024 GMT
        Subject: CN=029E898B86223AF5EE3AD46415D33745241F5A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:ec:df:af:54:27:21:a1:e0:dc:b0:68:2a:
                    4a:66:a0:fa:56:3d:65:b6:75:d9:04:91:1b:a9:4d:
                    32:0e:cc:df:e1:d5:1b:78:21:ba:4d:4e:65:c2:4f:
                    b7:e0:48:6b:77:b8:f3:6e:9f:85:58:69:7e:89:e8:
                    8b:65:3f:22:d4:71:33:59:3f:22:88:be:94:25:6c:
                    06:e3:4f:26:94:47:c7:18:33:e4:64:2f:99:6e:7f:
                    94:cf:40:dc:b3:3f:56:75:aa:82:cc:d2:dc:da:08:
                    80:f7:6e:6b:41:06:36:e3:5d:04:38:6d:1a:91:a3:
                    bc:e6:f4:90:5f:b8:1c:d6:0c:06:69:c3:86:0b:b3:
                    66:df:da:4f:c9:2d:26:2b:e4:41:62:f0:43:c3:76:
                    7f:fc:f2:ea:d8:10:3a:8c:76:07:72:b4:ce:81:07:
                    08:48:4c:7d:51:62:12:dd:90:8e:85:9a:80:00:6c:
                    35:91:79:4f:1b:80:9b:4f:38:99:a4:8f:a8:5e:18:
                    ae:95:2d:00:c0:3e:f8:c2:b6:a7:d7:2a:fd:99:d3:
                    6b:0d:0e:a8:ba:a2:ac:e5:72:bb:72:1b:c6:bf:40:
                    f6:b7:04:b0:f2:e9:e2:ac:4e:e5:98:b5:5e:24:97:
                    06:2b:52:8d:20:4f:ff:bf:cd:ac:45:52:6b:93:c0:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9E:89:8B:86:22:3A:F5:EE:3A:D4:64:15:D3:37:45:24:1F:5A:0A
            X509v3 Authority Key Identifier:
                keyid:43:86:1D:E4:D9:EB:4A:4A:65:C2:BE:7F:D7:F8:8E:0F:CD:C3:CB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/2/43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/2/43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4c:54:b4:f6:c3:ab:d4:01:24:c9:f9:73:12:82:79:d1:39:
         fe:48:84:e7:14:56:07:2e:1d:91:cd:6b:0d:6f:32:2d:65:45:
         3c:52:6b:6e:18:86:96:bf:65:b5:4e:e5:ae:4b:aa:0d:49:ec:
         f3:73:81:15:d2:9a:ed:48:4e:9a:8c:98:bd:3e:86:12:7f:83:
         8f:a9:af:6b:fd:08:c0:46:6e:6e:98:cc:24:fa:71:fc:4b:30:
         1d:e0:82:53:25:ca:bb:1d:0c:c4:c2:7f:cf:da:37:bf:47:76:
         d8:8e:10:81:c3:e9:e5:a1:c8:c4:73:ec:f8:d3:a2:92:11:74:
         9e:5d:ba:d2:e4:01:22:c8:d8:22:b9:41:37:21:00:ca:3d:59:
         f3:2a:ba:71:46:7a:52:55:53:5c:f7:8c:36:21:cd:71:23:34:
         1e:3e:fc:34:51:96:9b:45:b7:18:20:b5:4e:89:ef:a1:1e:11:
         9c:51:e5:80:a7:86:e7:5e:48:af:1a:12:03:ef:b7:a9:36:c5:
         4a:8b:2a:a6:ad:9c:9e:9a:96:a6:1e:d6:fa:e4:c0:94:7b:31:
         cc:21:a1:b9:b4:e7:f2:3e:8d:7d:22:24:37:be:a5:70:d9:10:
         d3:67:d0:31:4d:ab:ad:57:88:39:93:ed:bf:e6:49:98:45:5d:
         fb:a3:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----