Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/43AB64E24B611504924D9E56C85FF577E33A471B.mft
File:                     43AB64E24B611504924D9E56C85FF577E33A471B.mft (raw, json)
Hash identifier:          3eJbnI+PdtIV0nkZuiRQLHH57zYfvUO+bqTMk5BE8Yk=
Subject key identifier:   7E:35:F3:8B:85:D4:0D:68:26:0F:D5:0A:2E:13:DF:69:1D:49:23:81
Authority key identifier: 43:AB:64:E2:4B:61:15:04:92:4D:9E:56:C8:5F:F5:77:E3:3A:47:1B
Certificate issuer:       /CN=43AB64E24B611504924D9E56C85FF577E33A471B
Certificate serial:       4EA34085B19DA6A96056B84E6CAEEE14F7378242
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AB64E24B611504924D9E56C85FF577E33A471B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/43AB64E24B611504924D9E56C85FF577E33A471B.mft
Manifest number:          01C9
Signing time:             Sun 14 Apr 2024 18:38:30 +0000
Manifest this update:     Sun 14 Apr 2024 18:33:30 +0000
Manifest next update:     Mon 15 Apr 2024 20:06:30 +0000
Files and hashes:         1: 323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa (hash: VbGJBiRsC+TSiOozUhYelZAn4v3lYOpH1x4DeTlxA9U=)
                          2: 43AB64E24B611504924D9E56C85FF577E33A471B.crl (hash: Vjb06pjFcm31ldyR84t2RJcyFAETdz64rAUOToj1mPQ=)
                          3: 34352e3232342e3138352e302f32342d3234203d3e20323637303836.roa (hash: vVamIaeb+O+h/KdETZBcl5LAiQI14sfvnwrSaIapwFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a3:40:85:b1:9d:a6:a9:60:56:b8:4e:6c:ae:ee:14:f7:37:82:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AB64E24B611504924D9E56C85FF577E33A471B
        Validity
            Not Before: Apr 14 18:33:30 2024 GMT
            Not After : Apr 15 20:06:30 2024 GMT
        Subject: CN=7E35F38B85D40D68260FD50A2E13DF691D492381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:2d:9e:2f:02:09:79:3c:bf:3c:37:ae:c9:
                    8f:6d:1d:ba:be:61:dd:02:76:2a:c8:ff:df:72:49:
                    ff:6a:4e:0e:10:02:60:9b:9c:17:95:f3:87:91:69:
                    c2:3e:40:14:22:62:d1:ce:27:89:e3:e7:85:de:dc:
                    40:42:f3:83:9f:5d:6a:d3:b0:55:1f:bb:a4:3f:61:
                    ba:85:ab:00:a2:d0:43:67:f3:8b:ed:38:8e:2f:ee:
                    6a:ba:59:27:29:7f:fe:f1:91:fb:91:e3:1f:ce:6d:
                    0e:a5:19:8a:d7:bc:ed:45:06:c8:98:19:03:3b:07:
                    2f:64:f5:85:30:1b:15:37:77:d0:1a:17:fa:7b:75:
                    fe:8e:29:12:e1:c9:24:de:06:cb:80:da:49:f5:ff:
                    85:80:35:a6:a7:f6:0b:ca:15:c4:62:0b:4c:d5:73:
                    d9:61:dd:0a:a6:6a:7b:a3:3e:4b:0f:b2:fd:89:bd:
                    14:3f:28:b5:53:e0:8a:2b:01:0f:10:bb:52:2d:28:
                    a0:37:cc:81:3a:10:7c:54:f9:d4:bb:78:53:65:4c:
                    a0:58:4a:28:8d:3a:7e:5d:6a:6b:e9:38:b4:88:89:
                    33:9b:e1:c9:55:71:2f:18:a8:59:c2:17:46:1c:6f:
                    ba:2e:da:4a:d4:ed:88:0f:69:82:30:6f:66:90:97:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:35:F3:8B:85:D4:0D:68:26:0F:D5:0A:2E:13:DF:69:1D:49:23:81
            X509v3 Authority Key Identifier:
                keyid:43:AB:64:E2:4B:61:15:04:92:4D:9E:56:C8:5F:F5:77:E3:3A:47:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/43AB64E24B611504924D9E56C85FF577E33A471B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AB64E24B611504924D9E56C85FF577E33A471B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/43AB64E24B611504924D9E56C85FF577E33A471B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:db:d2:ea:99:05:6b:4c:28:e1:68:62:ac:79:b3:44:00:d9:
         0d:ec:48:00:d2:c4:e2:1c:87:da:ee:f3:d2:55:4e:67:82:33:
         42:79:4e:3f:52:42:17:26:96:9a:7a:58:4c:eb:5d:2a:5c:e5:
         b1:57:e6:cb:d4:bb:f4:d0:3e:79:f9:0e:38:20:9d:0a:6b:05:
         da:18:12:45:c0:bd:de:e3:9f:34:a7:94:c8:e1:1d:3e:44:5b:
         a1:ca:e3:fb:7a:4c:d1:d2:0b:36:19:7f:87:67:04:97:48:be:
         85:29:76:2b:1f:2e:a8:8e:24:e1:9e:21:83:ca:2b:c8:bf:2a:
         b9:3a:54:01:fb:c1:df:e3:b9:38:f5:28:c1:48:4c:ab:7d:0b:
         0f:c5:e0:0e:f5:b5:59:f6:cd:61:9f:fa:49:94:00:0c:c2:aa:
         7c:c6:00:c2:07:a4:42:2d:22:01:c7:8a:40:24:5b:00:9a:b2:
         e0:f6:12:c3:e8:52:2b:2d:36:b1:29:b8:08:3c:60:0a:f0:34:
         e0:5e:d9:4f:c4:60:f7:c8:46:c3:00:55:2b:0e:fd:b7:e6:69:
         6d:38:55:fc:ae:55:57:d3:15:05:2c:1a:8a:a9:2c:0c:8c:77:
         ea:10:84:13:e1:92:2c:5f:da:3e:03:ae:a6:c2:c1:ef:08:d2:
         37:62:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----