Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.mft
File:                     43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.mft (raw, json)
Hash identifier:          C4SlO9jaku0sRbhOLo8ox8gpIQ1mznLe4MRGqBpkG8s=
Subject key identifier:   7C:46:BA:C7:34:CF:26:DF:06:EE:48:A6:02:FA:B3:95:E0:27:7F:A2
Authority key identifier: 43:55:8B:0E:62:F3:AB:F2:4D:E8:8B:7F:8C:4B:D4:7D:CE:78:4B:AF
Certificate issuer:       /CN=43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF
Certificate serial:       5A34E4D700967253E54DFAFE4B8A06662DDC0767
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.mft
Manifest number:          11
Signing time:             Mon 15 Apr 2024 03:15:53 +0000
Manifest this update:     Mon 15 Apr 2024 03:10:52 +0000
Manifest next update:     Tue 16 Apr 2024 17:07:52 +0000
Files and hashes:         1: AS267041.roa (hash: IBCRfxCEkWPHpYhhv8n5ISd34ZMa/LT7KpGcaGt7U7U=)
                          2: 43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.crl (hash: t9ZZUL5an+hUyvk97+bbMWTyzeSujfRuQNw8c4BeI1I=)
                          3: AS262468.roa (hash: IcDavUXnu0mdSqLyEM4ajDX9CAW5JYW76Ish8+g8Px4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:34:e4:d7:00:96:72:53:e5:4d:fa:fe:4b:8a:06:66:2d:dc:07:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF
        Validity
            Not Before: Apr 15 03:10:52 2024 GMT
            Not After : Apr 16 17:07:52 2024 GMT
        Subject: CN=7C46BAC734CF26DF06EE48A602FAB395E0277FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:e9:90:d2:60:99:55:fb:d8:c3:70:8e:69:
                    50:d0:a1:cb:0b:79:53:c4:47:01:22:ca:05:61:8f:
                    e4:19:a7:e3:5c:83:fe:95:36:08:c5:1c:ef:97:11:
                    f8:44:fa:39:43:72:c1:d2:46:a3:52:28:ae:ba:31:
                    66:f8:5c:47:4c:35:12:4f:3e:55:a6:ef:c4:33:61:
                    45:18:8e:3b:e2:bb:76:89:f3:72:6f:21:b5:88:44:
                    df:dc:ad:91:33:50:53:e5:0f:e3:da:c1:45:e5:71:
                    04:fe:59:49:c8:06:53:5e:b9:46:a9:2f:de:90:af:
                    c8:3a:4c:2d:d9:a9:a9:86:13:17:7e:94:4e:86:03:
                    c6:54:90:19:67:2f:95:6c:ee:25:05:86:66:9d:97:
                    ae:99:6d:19:a2:bf:05:8d:7c:2a:57:b1:ac:35:ea:
                    1f:56:c2:15:aa:25:25:3a:89:48:02:1a:a0:47:8e:
                    b1:30:bb:15:0f:f6:bc:18:9c:c1:98:28:09:ae:a5:
                    29:36:20:10:c4:1c:79:39:cd:ba:8b:7c:ab:6e:9e:
                    0c:3b:26:12:a6:94:e7:bc:93:3a:15:f3:bb:c3:e7:
                    ed:24:a1:44:c7:20:db:2a:5f:a1:03:54:99:73:23:
                    36:4b:2b:47:64:7f:ed:81:77:e5:99:04:8b:5d:a0:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:46:BA:C7:34:CF:26:DF:06:EE:48:A6:02:FA:B3:95:E0:27:7F:A2
            X509v3 Authority Key Identifier:
                keyid:43:55:8B:0E:62:F3:AB:F2:4D:E8:8B:7F:8C:4B:D4:7D:CE:78:4B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:38:f4:bb:8a:c8:1b:14:2a:78:0b:4a:eb:72:cd:62:37:2c:
         c4:90:ea:21:34:5b:cc:8e:00:66:6d:be:14:e5:97:b6:d5:47:
         e8:6d:52:b4:be:fd:2d:7a:18:be:75:89:a2:b8:26:05:91:4e:
         52:6a:d7:30:7f:64:d1:5e:66:fe:a5:be:37:ba:d8:3c:af:69:
         e8:e9:f2:60:8f:dd:18:fa:8a:ab:53:ca:be:56:d6:b5:28:53:
         b4:0c:65:cf:ab:c0:93:40:c4:5a:b1:74:e9:0e:b5:a3:e6:cf:
         7a:91:65:83:0d:55:ee:29:08:3d:12:f7:2a:a4:bf:d1:b8:84:
         47:83:24:a9:3d:3d:c0:ad:aa:fc:69:1a:aa:00:97:a2:46:59:
         12:d5:09:53:de:01:91:c5:61:2d:05:30:f1:92:28:0e:d1:aa:
         8d:f2:64:48:89:b8:eb:4a:00:94:bd:32:cd:08:2b:e4:06:4a:
         65:48:ed:eb:a8:ac:e2:18:a3:e3:a7:12:34:8e:cb:3f:23:9a:
         0e:e4:1c:ce:d6:c1:dc:06:2e:86:48:4f:c6:77:d0:83:f8:da:
         a6:33:c8:60:5a:11:e9:f0:d1:b1:02:23:65:39:9a:f1:85:d4:
         3f:5d:3b:5c:4d:df:26:dc:7e:9e:d6:46:df:6e:e3:4d:4d:bb:
         ad:3f:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org