Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.mft
File:                     0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.mft (raw, json)
Hash identifier:          exuHQTbLguGJAhjwYnJJ7Pwyx0bSiVzfzwZh77JCdVQ=
Subject key identifier:   FF:54:FD:3C:8D:62:12:D9:42:8E:C3:49:DF:AD:C1:B2:2B:35:AC:E1
Authority key identifier: 04:43:FC:FC:D1:3B:EA:6D:91:E1:CD:71:54:46:13:BD:4E:2A:69:F5
Certificate issuer:       /CN=0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5
Certificate serial:       78AB8F33AC15FEEC72E672DBE1F03529D323002E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.mft
Manifest number:          19
Signing time:             Thu 05 Sep 2024 11:55:42 +0000
Manifest this update:     Thu 05 Sep 2024 11:50:42 +0000
Manifest next update:     Fri 06 Sep 2024 14:18:42 +0000
Files and hashes:         1: 323830343a323766343a3a2f33322d313238203d3e20323633393331.roa (hash: 0jWCP3ix2icTqzZU/ybtKQJUdUML5ylV5yJeKYu8K/I=)
                          2: 0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.crl (hash: sAdvNE4X3CcNKtvQbo+LQyRvSWxOTiPdUH4mavj1xX0=)
                          3: 3133382e3231392e3133362e302f32322d3332203d3e20323633393331.roa (hash: NFDQAQGOQ7XPTt+Nuu479YxZfHl2GLSwYVd/2GD1+xc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ab:8f:33:ac:15:fe:ec:72:e6:72:db:e1:f0:35:29:d3:23:00:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5
        Validity
            Not Before: Sep  5 11:50:42 2024 GMT
            Not After : Sep  6 14:18:42 2024 GMT
        Subject: CN=FF54FD3C8D6212D9428EC349DFADC1B22B35ACE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:4c:fd:65:96:2b:84:69:21:c6:8c:5a:9e:
                    a2:93:2c:2d:a7:79:1f:5e:8f:44:4f:e1:f4:41:53:
                    e9:d7:b0:c1:77:6e:e6:cb:75:32:68:1f:15:5a:3c:
                    b7:12:16:83:3a:bf:ff:55:5d:7c:f2:e8:4f:2d:5f:
                    b5:02:8a:8f:ba:be:a4:9a:7b:b7:34:d2:d9:4c:6c:
                    1e:a4:45:d3:aa:b7:ce:1a:26:32:e2:bc:09:37:58:
                    2b:5c:09:da:93:ed:b3:ee:04:84:68:16:1a:65:8f:
                    6e:b0:71:8f:9a:f3:e3:51:c2:15:f7:ba:f6:46:89:
                    e2:37:af:34:b8:99:30:58:5b:38:f1:26:c4:f2:95:
                    ad:ca:7c:30:b3:85:4f:c3:76:25:88:bc:94:07:a6:
                    72:2d:a0:9d:89:40:83:11:3e:f6:d9:93:05:63:04:
                    bf:c1:cd:34:11:58:a4:dc:e7:c8:67:ea:77:2f:f1:
                    96:73:bf:66:90:0f:bd:2c:54:37:6c:ae:94:d0:0c:
                    10:75:17:3c:33:c3:dd:16:a4:97:99:07:a2:03:e2:
                    73:5c:6c:85:07:7e:a2:fa:9f:e7:16:13:74:9a:44:
                    49:08:c8:3d:7d:18:0f:aa:58:97:f4:49:40:95:25:
                    3d:10:5a:fc:f0:b5:70:33:a7:5a:d6:b0:c2:b7:87:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:54:FD:3C:8D:62:12:D9:42:8E:C3:49:DF:AD:C1:B2:2B:35:AC:E1
            X509v3 Authority Key Identifier:
                keyid:04:43:FC:FC:D1:3B:EA:6D:91:E1:CD:71:54:46:13:BD:4E:2A:69:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:66:38:9e:82:88:dd:d5:50:37:bf:95:f5:c4:b1:99:0f:90:
         d0:a6:fb:6c:7b:af:8f:1a:54:30:65:a8:61:8b:85:f4:d4:7f:
         bd:2b:ec:03:a6:34:a6:dc:bd:20:62:ae:25:f9:39:45:eb:6e:
         8e:c9:71:c7:05:d9:48:9e:ef:7f:ce:1b:c3:2d:fa:2b:84:05:
         2f:ec:df:da:b4:82:3a:69:67:19:39:81:dc:ee:c0:78:64:60:
         63:2e:ad:87:e1:c4:42:93:11:2b:7b:2f:09:69:58:c1:8a:26:
         4a:b2:9a:b9:f0:c9:70:df:02:5d:f0:cf:e0:91:67:30:c2:a2:
         42:f6:bf:e6:a7:02:50:d3:cf:16:0c:84:79:6f:4f:1a:a6:a7:
         8c:30:73:6b:c8:92:2c:99:a6:1c:b8:f1:5f:bc:b4:69:af:4c:
         c2:a9:51:9b:d9:ca:6e:da:b8:ab:2c:16:49:ad:86:44:3c:ba:
         ff:b1:9f:2b:d4:89:e7:89:e8:7f:19:ba:ff:8b:8c:35:94:58:
         8a:d0:43:26:85:f7:56:f1:0f:ba:cd:13:71:82:4d:b8:cc:c2:
         82:aa:34:67:1a:26:30:e2:75:fc:f0:9b:30:2f:37:69:1d:d2:
         27:d3:a6:a8:21:9d:ba:8b:81:b2:4d:23:24:46:67:ce:7b:62:
         f5:03:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----