Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.mft
File:                     43601DF506C45BF04A33C11D3FD594AC48E74F90.mft (raw, json)
Hash identifier:          rkhzshC6eYoj11ZEFPzJswwmy8d5ozEy3/xCqtpzNtc=
Subject key identifier:   A1:5E:76:14:B2:22:FF:4E:F6:6B:04:C2:A1:A8:E2:E6:77:9C:6A:63
Authority key identifier: 43:60:1D:F5:06:C4:5B:F0:4A:33:C1:1D:3F:D5:94:AC:48:E7:4F:90
Certificate issuer:       /CN=43601DF506C45BF04A33C11D3FD594AC48E74F90
Certificate serial:       09ED7C015C4C815DB67539514EEDAC085CA9A5EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.mft
Manifest number:          44
Signing time:             Thu 23 May 2024 07:30:00 +0000
Manifest this update:     Thu 23 May 2024 07:25:00 +0000
Manifest next update:     Fri 24 May 2024 09:51:00 +0000
Files and hashes:         1: 34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa (hash: 90cGOjGVUSMTtx8GEfeCRp9Iiq2EX+lrP0bum7yB8yA=)
                          2: 43601DF506C45BF04A33C11D3FD594AC48E74F90.crl (hash: 3t0L+YkWtc3GPfC7twlzQ5igYalUmXx/YJZUkwJA3cU=)
                          3: 323830343a343934383a3a2f33322d3334203d3e20323637313735.roa (hash: QQsRUJ2lRgUy468GuFhTN7/UGnt707JqXDzsZkUNrRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ed:7c:01:5c:4c:81:5d:b6:75:39:51:4e:ed:ac:08:5c:a9:a5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43601DF506C45BF04A33C11D3FD594AC48E74F90
        Validity
            Not Before: May 23 07:25:00 2024 GMT
            Not After : May 24 09:51:00 2024 GMT
        Subject: CN=A15E7614B222FF4EF66B04C2A1A8E2E6779C6A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:18:bf:b7:b3:55:c1:f7:45:b7:0d:9b:97:
                    be:20:2c:49:f0:90:04:32:94:e7:84:05:2d:e2:e8:
                    3e:1a:10:e4:9e:35:3d:c3:a7:39:4f:27:8e:f3:fd:
                    b2:71:7c:6a:2a:a7:f2:88:36:86:b3:37:82:60:08:
                    b0:99:d2:bb:61:cf:14:c4:c5:2f:d5:74:a7:f9:59:
                    e1:3c:32:5e:f9:37:45:96:28:ac:f6:2c:d1:bb:3f:
                    58:51:2c:81:f8:0a:76:aa:97:04:d1:1e:fe:54:3b:
                    5c:7e:e0:c4:f6:b7:17:a0:26:22:82:7b:2f:00:29:
                    4c:09:66:02:c7:d1:c8:47:2d:ca:9a:2f:8b:d5:7e:
                    d3:98:39:12:9d:2f:f6:a0:6c:eb:29:7b:6f:91:04:
                    bc:2f:03:10:96:70:55:41:64:b9:76:a6:3b:61:fc:
                    8b:df:9f:02:ea:ee:80:1b:21:47:90:31:74:78:82:
                    c9:de:18:b1:ca:f2:cc:45:55:ee:56:5f:12:f4:9a:
                    d7:bb:95:4a:88:19:c0:36:89:3c:79:d1:4a:af:b7:
                    27:48:51:50:ce:5a:20:4e:06:8a:03:c6:61:2a:d7:
                    c0:f9:82:f7:77:f9:7e:3a:96:fd:0f:91:d2:a2:82:
                    89:eb:2d:37:ca:99:45:d2:d9:94:22:17:46:fd:c9:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5E:76:14:B2:22:FF:4E:F6:6B:04:C2:A1:A8:E2:E6:77:9C:6A:63
            X509v3 Authority Key Identifier:
                keyid:43:60:1D:F5:06:C4:5B:F0:4A:33:C1:1D:3F:D5:94:AC:48:E7:4F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:20:f8:40:27:70:51:4f:8c:83:96:52:e5:5b:e1:bc:03:90:
         b6:6d:e7:cf:52:b8:73:8a:f0:11:a5:ae:27:d3:ed:30:05:8a:
         96:b8:1b:b9:df:f4:de:ed:6a:9f:99:e9:74:29:1d:bf:bc:f6:
         cd:a7:a7:7e:f9:ae:be:78:e8:e7:e6:14:1d:03:d6:16:86:67:
         c6:2b:03:a2:06:bd:c4:89:2c:2d:29:e1:a4:9b:86:45:0d:97:
         cc:72:f6:3f:23:15:c5:5e:13:40:6f:de:9d:a5:16:ec:0e:a7:
         af:a0:a8:9c:53:d8:88:2c:72:7b:0c:27:67:40:25:ea:e0:1e:
         09:51:d6:3f:ac:d6:73:7f:da:25:a2:72:7b:3d:93:37:75:cf:
         65:00:f5:ec:46:49:2a:ee:e3:e7:a3:6d:4a:c9:9e:d3:2c:0e:
         dc:cc:c9:10:57:cb:55:ab:8a:86:4b:cc:40:56:5b:9f:a4:f9:
         19:75:d3:e8:fd:45:76:c9:ba:e0:4a:6a:52:fb:c8:c3:d2:b7:
         f9:bc:ba:0c:f4:bf:c8:c3:84:d3:1c:f0:c8:48:96:71:1c:36:
         11:18:ec:2f:82:1a:e1:b5:7c:e6:5f:7e:a7:3b:6b:c3:05:ef:
         c1:5f:3c:44:af:85:0e:bb:e3:6b:86:45:58:87:8b:96:75:14:
         1c:d6:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----