Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.mft
File:                     42BF35C6FF36C97758EA11F34742DBBF27A61DE9.mft (raw, json)
Hash identifier:          OflR3pBzbNDonT3JWMHhnbxGRo7VNWbaa7Bw6+P7nGU=
Subject key identifier:   BF:CD:A2:E2:06:FF:05:D2:3A:CC:FD:1B:35:F8:8C:EA:0A:85:29:74
Authority key identifier: 42:BF:35:C6:FF:36:C9:77:58:EA:11:F3:47:42:DB:BF:27:A6:1D:E9
Certificate issuer:       /CN=42BF35C6FF36C97758EA11F34742DBBF27A61DE9
Certificate serial:       18512352F80D4807BC28714751FEB0352849043E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.mft
Manifest number:          03F2
Signing time:             Sat 17 Feb 2024 13:30:00 +0000
Manifest this update:     Sat 17 Feb 2024 13:25:00 +0000
Manifest next update:     Sun 18 Feb 2024 15:30:00 +0000
Files and hashes:         1: 323830343a343463303a3a2f33322d3438203d3e20323637363531.roa (hash: ne2OMMlAk4q7mmEx3pZ9QltBqOVQP2Dr91vepAVXUYA=)
                          2: 34352e37312e3234342e302f32322d3234203d3e20323637363531.roa (hash: rC1b3r0b+RtfyZjnSm/AaO+CiVmSSkxUHvDJZjMLCEk=)
                          3: 42BF35C6FF36C97758EA11F34742DBBF27A61DE9.crl (hash: ZczuxQ9iPUxx0PNORlNav8ZLXv/vnHfR5Cb4RYIU6HQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:51:23:52:f8:0d:48:07:bc:28:71:47:51:fe:b0:35:28:49:04:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42BF35C6FF36C97758EA11F34742DBBF27A61DE9
        Validity
            Not Before: Feb 17 13:25:00 2024 GMT
            Not After : Feb 18 15:30:00 2024 GMT
        Subject: CN=BFCDA2E206FF05D23ACCFD1B35F88CEA0A852974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:85:a7:17:82:51:78:7e:8a:6b:fe:69:a3:
                    b6:e6:f4:6a:1e:40:36:f1:c2:26:9c:02:6e:32:bd:
                    1c:4d:a5:b2:b7:6d:08:c5:e1:79:c5:de:62:a0:f0:
                    c8:05:fc:f8:f3:c2:a4:27:7f:30:0d:46:f6:ee:e1:
                    fc:b0:2b:48:de:01:f1:d0:4c:32:bb:f0:b6:27:be:
                    ec:3e:25:cf:55:1a:a8:35:41:10:54:c9:f6:94:8d:
                    47:26:67:57:ca:04:13:0d:e7:e9:b9:81:61:55:4d:
                    57:46:13:1c:55:60:56:56:de:b3:34:13:e0:5b:4a:
                    0b:e0:07:9a:d4:2e:80:72:eb:39:b5:00:f0:de:a6:
                    f2:2f:66:2d:a9:03:6a:a4:9a:21:17:90:14:31:65:
                    31:88:72:f5:e7:cd:13:8b:48:6d:b8:75:46:20:29:
                    99:af:b9:6f:cb:02:1c:3d:9e:ae:a8:7b:48:aa:8b:
                    58:76:30:a3:9d:30:e2:99:98:53:76:84:84:e0:f8:
                    93:4e:73:76:6d:17:ee:b4:0c:67:df:39:09:d1:72:
                    de:c9:ba:61:e0:36:20:d8:dc:7b:0e:7e:c8:b2:85:
                    86:ab:15:fe:c7:05:98:87:0c:dd:55:ff:7b:05:d3:
                    bf:fe:48:cf:c2:f7:58:02:1b:37:d2:5d:09:32:ac:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CD:A2:E2:06:FF:05:D2:3A:CC:FD:1B:35:F8:8C:EA:0A:85:29:74
            X509v3 Authority Key Identifier:
                keyid:42:BF:35:C6:FF:36:C9:77:58:EA:11:F3:47:42:DB:BF:27:A6:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:28:8f:46:d5:96:0f:72:95:5d:ad:f2:ec:cd:77:01:11:ef:
         18:7c:41:08:ab:90:ba:ac:e8:0a:88:59:3e:77:99:89:c2:40:
         a3:2e:80:e3:2b:18:f5:02:e9:0c:c0:33:a5:55:cf:0f:89:24:
         e6:e6:61:85:2a:5e:6b:0b:35:0f:7b:b3:d7:2b:6b:6c:a8:d2:
         e9:d1:c5:64:9a:43:93:89:68:c6:54:41:ad:83:ee:b3:e6:7c:
         5d:89:d8:1e:f2:71:76:21:1d:82:b8:d6:ec:89:d3:e8:a5:c5:
         f2:cc:5e:09:78:30:3f:b8:14:1b:d3:f6:f8:7c:53:6a:5e:53:
         e4:d5:80:c2:14:bf:7c:47:97:89:5b:cd:f3:3d:88:60:e3:96:
         9d:06:90:fc:c4:84:da:dd:c9:40:ea:3c:ec:99:f9:51:9a:44:
         5e:cf:2a:b8:43:6e:7c:9a:51:6a:ba:bb:fa:7c:b9:fc:de:04:
         51:9e:0c:54:fb:c4:e5:59:8e:8f:43:91:be:4d:13:b2:76:a9:
         2c:e5:ea:2f:a4:84:57:a6:62:c3:7a:8a:40:ea:b1:8e:e7:98:
         83:71:c9:8c:ef:3c:3a:72:09:2f:61:ae:7c:78:c2:72:7a:23:
         1f:28:07:eb:24:cd:7c:67:7d:30:31:76:6e:db:6c:25:d9:e7:
         d6:a6:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----