Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.mft
File:                     43885CAAF241C57514F4BFCC379D2F93549E4FAB.mft (raw, json)
Hash identifier:          OJxaQsIcWsUBeG5reZFzhGAFiKpdZK+Sb/soU9s/JpM=
Subject key identifier:   6B:D0:65:C8:E8:1A:98:57:DC:F0:62:93:BD:49:10:C2:FD:48:83:21
Authority key identifier: 43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB
Certificate issuer:       /CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
Certificate serial:       3C71EF1F0822AAF9D73791E8654BB80E1DBF7765
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.mft
Manifest number:          FD
Signing time:             Fri 31 Jan 2025 06:27:58 +0000
Manifest this update:     Fri 31 Jan 2025 06:22:58 +0000
Manifest next update:     Sat 01 Feb 2025 09:48:58 +0000
Files and hashes:         1: 43885CAAF241C57514F4BFCC379D2F93549E4FAB.crl (hash: qqc9bcE8LdiGvJzRCVbZ9KNmW5CMG0Akas0cqj56xZo=)
                          2: 323830343a316131383a3a2f34302d3430203d3e203631383336.roa (hash: DDa4C0shpK60R+ElYD/UyDtBuEaVKF6wSeT52868j6M=)
                          3: 3230312e372e3231392e302f32342d3234203d3e203631383336.roa (hash: wHxTligKZrBoWB9eGAXftGMUjGCyI8LPq6OVIOw16Tw=)
                          4: 3230312e372e3231362e302f32342d3234203d3e203631383336.roa (hash: rqE+gPu7ExTMasupQl6wSYvnv0RA2MymVT/4a4pk7k8=)
                          5: 3230312e372e3231372e302f32342d3234203d3e203631383336.roa (hash: QLS/WJSb1padGA21Y7A96kpNMVzsnGKB9k0vlz4pnTg=)
                          6: 3230312e372e3231382e302f32342d3234203d3e203631383336.roa (hash: kTNpZNWgbnpdEnzF4HKcoDXhhnz0qWT8PdCYbWggOKI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:71:ef:1f:08:22:aa:f9:d7:37:91:e8:65:4b:b8:0e:1d:bf:77:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
        Validity
            Not Before: Jan 31 06:22:58 2025 GMT
            Not After : Feb  1 09:48:58 2025 GMT
        Subject: CN=6BD065C8E81A9857DCF06293BD4910C2FD488321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:21:70:75:f6:55:0d:75:77:6f:3b:02:e7:70:
                    eb:8a:00:0c:a7:b5:9e:b7:25:e1:02:89:23:3b:a8:
                    f7:06:83:8a:18:19:d7:54:18:82:1b:71:61:56:27:
                    bd:a0:8c:bc:10:22:ec:3a:a4:bc:55:85:b6:22:8e:
                    d0:fc:c0:b1:93:8a:a4:a5:7c:4b:c5:fa:a5:ec:53:
                    c4:d1:68:b0:69:04:13:5c:a7:d0:37:e6:52:4f:de:
                    37:10:ab:72:d2:d8:53:ad:09:b8:49:a3:48:b5:64:
                    f3:e6:5b:d6:ec:ce:0a:d0:d9:f7:34:16:39:cc:71:
                    1a:67:f5:c5:45:ad:5b:fb:28:5a:45:c1:37:8f:7e:
                    40:ed:c9:88:28:e6:16:94:40:e7:15:0a:16:8b:5a:
                    70:67:5e:91:7e:4a:55:ae:18:e4:79:87:6a:a5:1a:
                    69:3f:4a:bf:31:b0:1d:a6:f2:ca:90:35:2b:66:3c:
                    67:25:af:37:a4:b0:ec:6e:01:df:7f:6c:21:1c:05:
                    8e:81:11:dd:fd:a7:35:04:51:65:b9:7b:62:f2:21:
                    4e:4b:f6:58:3a:95:a3:a3:7b:26:05:7b:35:c5:88:
                    cc:a4:9b:4d:39:f4:8b:39:4f:63:2f:f8:6d:0c:8d:
                    32:7a:cd:ab:3f:7f:d8:31:9f:9d:fd:a3:ed:59:ba:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:65:C8:E8:1A:98:57:DC:F0:62:93:BD:49:10:C2:FD:48:83:21
            X509v3 Authority Key Identifier:
                keyid:43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:13:30:9d:f2:08:37:90:3b:c2:24:df:5e:a4:8a:be:cb:
         91:c0:18:12:b5:b8:85:89:88:ef:b5:a4:aa:37:53:c2:2d:3b:
         db:1b:3c:42:b6:1b:a0:dc:b0:c3:b9:ed:c8:b0:5c:bc:89:50:
         b5:41:b9:7e:f9:f2:9e:12:c9:b8:ef:4a:e1:fc:45:fa:b7:2f:
         b7:db:b2:c4:94:c4:ef:f8:dc:34:3b:b5:7f:38:67:2d:45:4f:
         90:fa:db:d7:53:1d:0e:20:83:8e:b0:49:61:4a:cb:82:58:b9:
         d3:30:5a:d3:45:03:80:f9:ab:57:33:32:55:e1:77:d4:eb:3e:
         06:2e:b1:48:db:09:ee:ab:ae:51:6e:38:f4:d2:31:46:a4:f6:
         86:73:e6:d7:7d:93:f4:90:93:3e:01:7e:32:ee:1a:45:e0:4e:
         36:a6:2b:df:e1:db:e5:03:9d:e6:de:c6:fa:45:08:18:ca:c2:
         81:a7:2c:6f:ee:1b:b0:75:c9:f0:60:ff:6f:f6:04:35:24:17:
         d2:07:32:14:e6:dd:bd:d9:23:8a:9b:64:c2:ed:a1:8b:a8:f4:
         db:b0:f2:4b:10:f7:94:cf:65:36:f3:40:3b:65:50:eb:6c:35:
         44:08:43:5f:55:d5:e0:b8:cf:8f:3b:9b:79:a7:1b:9a:e0:f0:
         71:ce:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----