Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.mft
File:                     43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.mft (raw, json)
Hash identifier:          eQBrzGCBAqpmSk9KNMug5aPZDkRC+eDXQBx0rhUN2h4=
Subject key identifier:   86:2F:03:A8:0E:8E:29:62:BF:E2:42:B3:1A:FE:06:C4:56:32:29:4B
Authority key identifier: 43:B7:A2:09:60:0F:E5:F5:01:BA:3E:DE:0E:72:CB:7C:A3:5D:87:43
Certificate issuer:       /CN=43B7A209600FE5F501BA3EDE0E72CB7CA35D8743
Certificate serial:       0B76A03B31BC18A63BCAD47549B0A2F893900EA1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.mft
Manifest number:          015A
Signing time:             Thu 19 Dec 2024 19:52:59 +0000
Manifest this update:     Thu 19 Dec 2024 19:47:59 +0000
Manifest next update:     Fri 20 Dec 2024 20:44:59 +0000
Files and hashes:         1: 34352e3136352e38312e302f32342d3234203d3e203533343237.roa (hash: 51EWIGuYdrSgMmEQzTRoWW27oNTV3qcs89B/PFwuKI0=)
                          2: 43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.crl (hash: 3rUe+9RGIw2c3Uh3JJG3Sp2+KlA0nzI6raA27DTfboY=)
                          3: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: e0nm0VIznkZWAn68yVzPsocwqCHC5dNgwuDxV6h8ogo=)
                          4: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: 2eaxUpIWFPKUhsklddqOXEnCdPC3vS1xPUd0+7hfGZQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:76:a0:3b:31:bc:18:a6:3b:ca:d4:75:49:b0:a2:f8:93:90:0e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B7A209600FE5F501BA3EDE0E72CB7CA35D8743
        Validity
            Not Before: Dec 19 19:47:59 2024 GMT
            Not After : Dec 20 20:44:59 2024 GMT
        Subject: CN=862F03A80E8E2962BFE242B31AFE06C45632294B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:0a:18:18:ed:76:59:42:a0:e9:17:a2:68:
                    f0:13:9f:ce:22:44:48:fb:41:5d:e4:a5:fa:55:7c:
                    57:6c:6f:8a:22:16:ba:8d:58:b3:b1:d6:86:2a:3a:
                    46:51:24:73:16:9c:12:e1:c6:1e:ec:ca:99:09:b6:
                    0f:33:3f:54:b9:f0:65:0b:c0:85:9b:7d:37:a4:3c:
                    4b:e3:71:80:74:cf:cf:a2:72:69:e8:1b:aa:b3:ad:
                    b0:4b:02:eb:86:74:07:0a:59:2e:2f:1a:df:cd:42:
                    bf:86:39:52:ca:9a:e8:ff:9a:b6:87:d1:08:ca:27:
                    a8:99:e0:20:23:ff:b6:df:f3:05:cd:87:78:d4:96:
                    96:17:92:5a:38:83:15:a2:d6:e1:b4:bc:9d:f2:19:
                    4d:f3:b3:5e:4f:8e:55:2a:5d:7c:a1:52:fa:e5:58:
                    b4:34:9b:b9:d3:e0:57:58:a4:ea:2e:cf:b5:d0:62:
                    c7:d7:38:75:7f:64:63:06:8e:e5:75:e3:6b:a3:14:
                    62:84:42:3f:ae:e2:88:a0:0d:ee:f1:04:dc:40:2b:
                    a6:b4:13:da:49:6c:df:d0:71:6b:61:f6:c6:7a:b0:
                    98:fc:9e:d9:ed:2b:58:58:4a:63:5d:e8:30:84:35:
                    8c:49:81:f5:c6:3a:53:03:0f:05:1c:8f:e2:f4:a8:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2F:03:A8:0E:8E:29:62:BF:E2:42:B3:1A:FE:06:C4:56:32:29:4B
            X509v3 Authority Key Identifier:
                keyid:43:B7:A2:09:60:0F:E5:F5:01:BA:3E:DE:0E:72:CB:7C:A3:5D:87:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:23:ef:46:4c:d2:23:ae:43:d8:ef:a8:9c:19:a9:ea:24:
         13:13:c9:a1:fc:20:9a:8a:e7:be:4d:54:ce:28:ba:be:44:c5:
         ab:03:88:15:77:f8:70:01:f6:66:5b:1e:2f:04:31:59:a9:3f:
         62:75:20:85:0a:35:f9:20:08:54:6d:60:f2:1d:0f:4d:3a:fb:
         dd:77:83:8a:03:dc:f1:03:b0:a5:77:09:0e:a1:5f:11:30:8d:
         c6:bd:6a:cd:6f:fc:1f:34:ca:73:e6:9f:11:85:1b:24:3a:b3:
         0e:d6:ff:af:1d:53:73:3a:13:6c:d0:2e:c4:94:36:2b:7f:b2:
         31:7e:e3:fa:e7:e3:5f:f1:f1:5d:e8:f9:ea:38:5e:4d:0c:65:
         e3:90:eb:7e:f0:be:1f:40:08:82:a5:2d:7e:72:ae:67:f9:7a:
         7d:b8:d1:25:e1:1c:11:2d:41:b9:09:c7:e3:04:60:ac:02:21:
         74:b2:87:cf:98:ad:96:82:8c:b6:7f:e7:5f:3b:28:dc:8d:3f:
         25:9c:9b:6d:64:80:60:29:fe:5f:fb:6a:4e:17:67:35:93:f6:
         69:ca:3a:11:1a:8e:bd:2a:c5:86:a9:41:44:32:78:f9:09:9f:
         e1:df:d9:32:07:43:be:ad:1f:ad:dd:ea:8a:25:a7:f6:bc:23:
         a7:2e:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----