Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE.mft
File:                     A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE.mft (raw, json)
Hash identifier:          eo9gXe67gEidWPfBzfz9Yp7eVGcJW+g/c612kL1uquQ=
Subject key identifier:   43:A9:74:56:DB:BA:46:05:4B:AC:0A:B8:4C:42:9F:9E:EE:99:58:D4
Authority key identifier: A0:39:47:D3:F0:FF:2E:AA:38:CD:74:FB:DA:92:ED:42:D4:26:5B:DE
Certificate issuer:       /CN=A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE
Certificate serial:       6F5F2D8D0E93721948E26BBD9CA978E043216185
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE.mft
Manifest number:          0125
Signing time:             Tue 14 Nov 2023 17:49:42 +0000
Manifest this update:     Tue 14 Nov 2023 17:44:42 +0000
Manifest next update:     Wed 15 Nov 2023 20:47:42 +0000
Files and hashes:         1: 34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa (hash: PKHCLlZlgyQFeUm1m400vhqAlj2eJkMPQJQawVmnw+8=)
                          2: A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE.crl (hash: Qbp87tQXqrr0oPQ4kWIRsmA7KHUEFFkzTXN6esP3j70=)
                          3: 323830343a363530343a3a2f33322d3338203d3e20323639343633.roa (hash: f0ndKnEXUqyG1OjziaKC0qEKSnlnODuI9TsTTpS5Ryc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5f:2d:8d:0e:93:72:19:48:e2:6b:bd:9c:a9:78:e0:43:21:61:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE
        Validity
            Not Before: Nov 14 17:44:42 2023 GMT
            Not After : Nov 15 20:47:42 2023 GMT
        Subject: CN=43A97456DBBA46054BAC0AB84C429F9EEE9958D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:94:a0:cf:0a:9a:0a:dc:46:fd:bd:4a:d4:1c:
                    c5:30:d0:0d:14:f1:60:78:15:7e:54:b6:71:7f:6a:
                    fe:ce:ff:d2:74:40:dc:92:63:36:06:63:44:84:8b:
                    1c:08:47:c6:0b:54:78:dc:38:ce:61:41:31:fc:19:
                    ec:41:0e:43:c6:04:50:41:dc:fc:0a:df:bf:c0:f7:
                    6a:88:45:63:18:17:8e:82:7e:c9:0f:e6:34:f2:c0:
                    b3:2e:1e:62:c5:a9:a4:00:50:3b:6a:b6:d4:d5:4f:
                    20:9f:28:c1:5d:72:67:1e:ea:64:1c:51:d8:c9:c2:
                    84:9f:53:0c:08:95:14:89:33:c2:25:64:60:50:b6:
                    ec:12:1b:99:7e:59:26:41:5c:f3:24:9d:0c:c3:88:
                    dd:90:8d:06:5b:95:71:3e:1e:44:7f:44:05:2b:7a:
                    6c:09:bc:fb:fe:86:a2:66:ff:50:42:1f:23:c0:56:
                    39:99:26:a9:f4:f2:34:ef:bf:94:73:12:dd:f9:df:
                    99:55:5d:3e:d4:1e:3d:d1:bb:ca:3e:28:14:c7:fa:
                    f4:d7:60:a1:5b:03:30:6b:84:da:54:56:5b:8d:c4:
                    ed:df:bc:e4:42:9d:74:d7:c1:e6:d6:a4:46:5a:62:
                    e3:e9:9c:e3:a9:8e:f7:6b:09:2c:24:c0:e6:53:d1:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A9:74:56:DB:BA:46:05:4B:AC:0A:B8:4C:42:9F:9E:EE:99:58:D4
            X509v3 Authority Key Identifier:
                keyid:A0:39:47:D3:F0:FF:2E:AA:38:CD:74:FB:DA:92:ED:42:D4:26:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/A03947D3F0FF2EAA38CD74FBDA92ED42D4265BDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d6:0c:e5:a4:9f:aa:ce:c0:d9:aa:53:80:6f:53:a6:c3:f6:
         17:bd:10:c4:6f:3b:3a:86:8c:2d:37:f8:bb:22:fa:f3:99:14:
         89:18:5f:d4:83:f5:7b:82:0b:e5:dd:15:28:a8:d8:75:74:fe:
         9f:39:5c:8b:9f:32:df:1b:78:eb:9e:1f:ab:b5:36:54:13:28:
         da:78:6c:38:12:ad:8c:2f:4f:27:a5:c3:d0:d0:f8:ae:ef:73:
         46:6c:03:2b:69:db:96:34:e6:c7:c3:b4:82:7a:26:e8:55:fe:
         89:00:79:77:95:f0:d4:aa:e7:20:72:d1:b8:a4:cd:92:21:17:
         8c:ba:b4:af:75:f2:55:9d:76:c6:b9:d1:2c:2f:da:97:e7:4e:
         c0:4b:0c:bd:8c:f0:72:5a:f5:79:ae:a9:95:0d:41:d7:df:5d:
         de:9b:23:b6:b9:76:ec:81:b6:8d:9b:da:ae:d8:98:a2:b5:6c:
         4e:81:a3:d6:f5:fa:2d:6e:30:26:5c:2e:f3:9c:07:48:4a:80:
         f6:8d:22:fd:cb:7b:13:73:6f:e8:15:d8:5d:6f:aa:a0:a3:80:
         e4:07:ac:e0:8b:77:04:04:81:48:71:b5:79:67:4a:82:92:bf:
         19:10:38:fd:61:e6:73:f1:e5:64:09:5a:7f:cb:fa:8f:95:4e:
         d9:e7:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----