Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.mft
File:                     BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.mft (raw, json)
Hash identifier:          X5GYTJrZq7+IbTVF0Z2dnlhs07V+4cFoOOrU5ZIureI=
Subject key identifier:   96:D7:8C:5C:97:19:D7:56:28:EE:59:5F:3B:03:A9:C2:6B:14:2D:05
Authority key identifier: BA:B4:3B:B8:90:0B:A7:B9:2C:91:D6:5B:3D:E1:2D:CC:80:A5:CA:05
Certificate issuer:       /CN=BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05
Certificate serial:       6FF4C45490880528CABB6E0DE0C7D7C3A2C28B40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.mft
Manifest number:          41
Signing time:             Tue 14 Mar 2023 08:52:54 +0000
Manifest this update:     Tue 14 Mar 2023 08:47:54 +0000
Manifest next update:     Wed 15 Mar 2023 12:19:54 +0000
Files and hashes:         1: 323830343a333836633a3a2f33322d313238203d3e20323636343736.roa (hash: XnLUMsihmdjtA905c64E85bzP970cAAVaxs2LB6yE10=)
                          2: BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.crl (hash: foVxSYK+Z91+6fP7eKEWICG1idTdvSBQTwdk/Pvhr+g=)
                          3: 3137302e38332e3139362e302f32322d3332203d3e20323636343736.roa (hash: 2eGFH+XHcledHsOL6EQdc123S/jhQwD0xF6jzI1F2L8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f4:c4:54:90:88:05:28:ca:bb:6e:0d:e0:c7:d7:c3:a2:c2:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05
        Validity
            Not Before: Mar 14 08:47:54 2023 GMT
            Not After : Mar 15 12:19:54 2023 GMT
        Subject: CN=96D78C5C9719D75628EE595F3B03A9C26B142D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:b7:18:20:5d:8a:49:93:44:a1:9c:57:2a:
                    82:ab:a7:c6:46:32:88:b3:f0:82:d3:6e:f0:94:9d:
                    f1:97:50:fe:bf:77:43:99:a3:eb:01:78:31:99:55:
                    75:90:e1:03:84:05:b0:11:20:d8:1c:54:60:6d:2a:
                    3d:88:0c:af:a3:8f:28:d0:67:a1:fc:0d:8d:f8:4b:
                    cb:8d:00:9c:69:96:cf:0a:7f:28:d2:b9:fa:6b:1d:
                    c1:4f:ff:59:50:22:3e:f6:94:ba:1d:cb:74:83:a2:
                    9b:81:41:bc:a1:04:0c:ad:dd:a8:70:b6:f4:a1:ac:
                    98:a0:72:66:30:40:96:98:26:15:b0:70:55:31:88:
                    80:b1:4a:f9:26:ad:bd:d2:a6:9f:36:bc:05:f4:7c:
                    4e:5e:ca:e8:05:27:c7:42:05:9d:59:69:75:fa:93:
                    3c:ca:63:c8:e8:e3:2a:36:f9:60:a1:f3:58:4c:31:
                    63:47:db:bc:8e:5c:f4:f4:fa:86:7b:de:81:6c:00:
                    be:92:5a:30:34:ce:4e:f6:d8:00:96:ec:0b:47:a4:
                    48:54:bd:b7:80:a5:35:38:aa:5a:da:d0:3d:1b:31:
                    90:82:e9:ad:ad:ce:c6:f4:11:83:a2:90:16:7b:0f:
                    09:ac:55:30:09:b6:84:0f:b2:dd:32:1c:b8:28:34:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:8C:5C:97:19:D7:56:28:EE:59:5F:3B:03:A9:C2:6B:14:2D:05
            X509v3 Authority Key Identifier:
                keyid:BA:B4:3B:B8:90:0B:A7:B9:2C:91:D6:5B:3D:E1:2D:CC:80:A5:CA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:f7:68:3d:fb:71:bf:dc:c1:2f:44:f0:44:d9:0e:cc:04:
         8c:6f:5c:c3:bc:a8:cd:29:a2:7b:71:39:89:bc:05:29:38:14:
         02:62:fd:e8:f6:d4:05:ff:16:03:4a:5a:6f:90:73:c8:c5:eb:
         bc:32:55:2d:fd:f8:b1:0f:ac:6a:4a:cf:c6:ba:ad:f6:c0:15:
         87:1b:8f:ec:2d:8a:0c:e1:c1:71:2b:e6:51:df:3b:99:14:8d:
         2c:4c:96:a3:32:9b:74:ad:1d:f0:81:32:d7:e7:96:45:7d:a1:
         45:ea:ca:47:3e:86:c6:ff:ed:69:4a:a7:bb:0e:2f:71:33:aa:
         00:cd:43:ed:ab:39:64:e3:37:43:b3:70:d4:5c:4c:69:f2:3f:
         b4:02:fe:36:b8:60:e2:d5:f0:7b:64:aa:33:c6:4b:79:ae:26:
         74:d8:b7:6c:cb:08:f5:4b:13:a6:62:77:c0:58:99:0b:44:98:
         64:05:cf:50:5c:96:03:de:6d:41:98:45:f4:d9:b0:39:52:db:
         87:5a:5b:08:ee:55:4b:48:93:41:14:e8:02:dd:0d:df:5f:f0:
         cf:b5:75:3a:79:02:a7:56:a8:d4:cb:ab:c5:97:e8:3f:98:ba:
         5e:2b:77:d5:35:9e:81:e4:dd:7e:78:89:aa:2b:35:1c:9f:94:
         13:d5:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----