Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/421E09668B818138A7042390126BB72A7AF8DED3.mft
File:                     421E09668B818138A7042390126BB72A7AF8DED3.mft (raw, json)
Hash identifier:          WBkWPNHsvTSZLGhjN2RyxgKvYMM9CcZBXyZw6Gfwvkk=
Subject key identifier:   E3:E9:F5:37:43:D4:A3:2E:94:EA:1E:F2:52:B5:AC:53:1C:78:12:33
Authority key identifier: 42:1E:09:66:8B:81:81:38:A7:04:23:90:12:6B:B7:2A:7A:F8:DE:D3
Certificate issuer:       /CN=421E09668B818138A7042390126BB72A7AF8DED3
Certificate serial:       7D9191391C00355EAF663BD74D71A89FFC3D8789
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/421E09668B818138A7042390126BB72A7AF8DED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/421E09668B818138A7042390126BB72A7AF8DED3.mft
Manifest number:          43
Signing time:             Tue 29 Aug 2023 16:06:13 +0000
Manifest this update:     Tue 29 Aug 2023 16:01:13 +0000
Manifest next update:     Wed 30 Aug 2023 16:35:13 +0000
Files and hashes:         1: 323830343a6237633a3a2f33322d313238203d3e203532373632.roa (hash: yji0ozI5FgK7jg3QKiNZYZtOQmGUvNq4o6Y5OsPpA/s=)
                          2: 3137372e32332e32382e302f32322d3332203d3e203532373632.roa (hash: aNyJLIFCfqajDNR3PiCGKr12L7jVGHcl9wuW0DXOBL4=)
                          3: 421E09668B818138A7042390126BB72A7AF8DED3.crl (hash: C4WD6T/xNlSi0+JfIWViUHzMND9ut46nU4+jTlKztR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:91:91:39:1c:00:35:5e:af:66:3b:d7:4d:71:a8:9f:fc:3d:87:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421E09668B818138A7042390126BB72A7AF8DED3
        Validity
            Not Before: Aug 29 16:01:13 2023 GMT
            Not After : Aug 30 16:35:13 2023 GMT
        Subject: CN=E3E9F53743D4A32E94EA1EF252B5AC531C781233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:d2:1a:26:8a:b1:92:24:3c:b9:36:6d:79:
                    dd:9a:fb:7b:8b:2b:a5:a7:8d:b2:c7:aa:68:9f:fe:
                    d3:4f:b2:10:4a:b3:c7:f2:09:bf:ed:3d:fc:64:24:
                    ed:ad:ce:e8:d8:6a:c5:ef:f8:ef:35:55:79:04:14:
                    7a:01:58:10:51:a3:4b:84:1a:eb:42:ee:ad:32:ab:
                    72:c2:26:62:54:44:4f:6e:dd:7a:fd:7a:e6:8f:e4:
                    30:80:a7:e7:52:3e:ef:42:5f:6e:ab:d2:18:1a:9e:
                    1a:5e:a3:62:9f:1a:75:03:3e:49:88:41:30:25:57:
                    6c:df:c7:cb:d2:87:fe:66:f6:9a:3e:67:89:c3:75:
                    7a:10:eb:b8:9d:6c:b3:dc:24:f3:7f:63:c6:1d:3c:
                    a9:7b:08:22:67:3d:77:49:09:b1:44:5c:38:31:f4:
                    85:1b:12:e9:d5:82:15:fd:4e:9c:19:da:31:f0:83:
                    62:e6:a9:b8:52:48:ee:3f:08:3d:2c:f5:65:3b:54:
                    e7:29:94:9f:8d:ee:d8:0d:d8:36:16:3c:ee:95:f6:
                    9d:68:e5:fc:30:1a:88:0d:79:21:fb:84:92:4a:2b:
                    80:c0:88:91:df:b5:52:1f:9b:41:37:4a:f5:8a:37:
                    8a:c3:7f:08:cc:52:05:56:64:00:71:2c:08:07:c3:
                    17:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E9:F5:37:43:D4:A3:2E:94:EA:1E:F2:52:B5:AC:53:1C:78:12:33
            X509v3 Authority Key Identifier:
                keyid:42:1E:09:66:8B:81:81:38:A7:04:23:90:12:6B:B7:2A:7A:F8:DE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/421E09668B818138A7042390126BB72A7AF8DED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/421E09668B818138A7042390126BB72A7AF8DED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/421E09668B818138A7042390126BB72A7AF8DED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:95:14:be:55:df:83:69:64:1e:74:35:ae:2a:5b:aa:bf:
         20:0e:11:41:4c:70:81:57:ae:95:b0:89:e4:a0:3f:41:46:8b:
         f8:83:8e:0a:93:6e:3d:cf:b5:19:e7:93:40:78:46:b5:0b:2c:
         79:31:81:90:be:cb:07:f6:ca:be:99:d2:c1:7c:f9:2a:94:26:
         69:51:fc:d6:08:48:00:de:e2:d8:ac:bf:9c:09:67:3b:da:b9:
         36:fb:a7:c2:db:a5:9a:a3:51:41:fd:c2:ea:25:8e:07:f1:77:
         78:9a:86:38:9a:a5:cd:42:58:f8:18:ac:7e:c3:63:92:30:c8:
         e2:db:31:1d:ec:f7:f2:cd:13:9a:e7:a4:6b:1e:6f:bd:fc:67:
         52:c5:31:10:b8:0d:d3:cc:1d:4c:dc:40:09:0c:7f:8f:0b:85:
         03:88:9f:57:2c:b9:3a:24:b8:00:ad:f8:8a:f6:78:5d:04:d8:
         3a:1d:9a:ea:6a:1d:9d:e0:b2:54:de:ea:67:23:f6:01:f8:7e:
         97:76:49:0c:73:81:5b:f3:00:6a:91:9a:dd:17:c7:81:04:9f:
         6d:55:49:7e:ab:d3:a8:fc:1d:07:97:dc:e5:94:bd:c9:7a:28:
         27:7b:d4:31:c0:d3:f2:f1:12:32:23:12:f1:85:0a:48:90:b7:
         b3:6b:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----