Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.mft
File:                     A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.mft (raw, json)
Hash identifier:          +ciErzfP1IRiwf7kSXM8bPPtTieEVwzidT83XXjMmHI=
Subject key identifier:   00:95:43:07:0B:E7:B0:CC:D3:8F:F2:47:FF:7B:66:C2:C0:37:2A:74
Authority key identifier: A1:72:A3:8C:FC:F4:2B:A2:8C:2A:28:82:DD:DE:F4:EB:80:06:FE:E7
Certificate issuer:       /CN=A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7
Certificate serial:       0E8F8ECD81CAC6D2E42EE9A03E0A20C71D1B96B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.mft
Manifest number:          043A
Signing time:             Mon 08 Jan 2024 23:56:00 +0000
Manifest this update:     Mon 08 Jan 2024 23:51:00 +0000
Manifest next update:     Tue 09 Jan 2024 23:56:00 +0000
Files and hashes:         1: 323830343a6430343a3a2f33322d3438203d3e203532353834.roa (hash: hvjiXU2lCaZxcOiYesqmaA50hEljgO7WVe+FFNCPtAk=)
                          2: 3137372e38362e3234342e302f32322d3234203d3e203532353834.roa (hash: XBxQToYf1gk1W7ChH1n913WUK3c52Qt9rZr/EQHfFBA=)
                          3: 3137302e3235342e3235322e302f32322d3234203d3e203532353834.roa (hash: DFH8+KPP2bkA7bkxqNBRmppg9Cpm3naVi+Z5rwxLkk0=)
                          4: A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.crl (hash: H2JZaWS6GJPLeHkCxxXq68B6gV1ztdH5tn6Foq8FM40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8f:8e:cd:81:ca:c6:d2:e4:2e:e9:a0:3e:0a:20:c7:1d:1b:96:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7
        Validity
            Not Before: Jan  8 23:51:00 2024 GMT
            Not After : Jan 15 23:56:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:ea:92:2b:f5:3b:7e:75:cf:f7:86:0c:39:
                    a2:46:51:bb:a6:48:a4:e0:c7:c4:f4:06:2a:0e:33:
                    9b:4e:48:55:2c:a3:47:91:da:0d:c6:d9:92:be:69:
                    22:3a:f9:23:24:1a:52:ba:fa:75:da:4a:fd:63:8a:
                    07:6a:5d:f4:a7:2a:4c:ce:cf:5a:cf:8b:bd:c6:02:
                    8c:26:5c:47:b6:2e:c7:52:69:76:11:3c:04:2f:83:
                    2e:2d:19:10:99:ec:1b:55:9e:49:1c:e3:69:28:99:
                    6d:e0:e2:c8:21:06:fc:bc:dd:a4:73:73:a6:72:8d:
                    8c:d5:48:db:b6:19:d0:5e:9d:9c:f3:26:48:f1:53:
                    e9:73:27:30:5c:b8:fc:48:95:80:9c:e6:e2:eb:ee:
                    b1:22:85:ca:da:45:bb:35:d4:82:d8:4d:6b:5a:de:
                    16:4b:39:9e:c2:53:f9:76:0c:89:2d:07:d2:de:8b:
                    ad:d8:22:59:84:55:2f:42:ab:30:67:6c:9c:4f:e9:
                    c7:65:84:c9:e6:30:14:6d:6b:c6:22:55:ec:3f:9a:
                    72:e9:5d:f2:8c:fa:06:26:dd:4d:a3:30:90:40:47:
                    61:3f:16:65:48:c4:6d:56:01:98:0f:b9:6c:d4:82:
                    05:b4:e5:9f:d9:38:25:1a:d8:2f:39:b3:7a:71:04:
                    3f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:95:43:07:0B:E7:B0:CC:D3:8F:F2:47:FF:7B:66:C2:C0:37:2A:74
            X509v3 Authority Key Identifier:
                keyid:A1:72:A3:8C:FC:F4:2B:A2:8C:2A:28:82:DD:DE:F4:EB:80:06:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/A172A38CFCF42BA28C2A2882DDDEF4EB8006FEE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:dc:ae:09:d4:13:35:9d:4b:af:b0:9d:3a:1d:cf:4b:ca:
         c4:8f:89:fc:53:7c:4e:a1:35:2d:09:a2:6d:7e:12:d6:74:a9:
         76:48:49:1d:a6:c7:be:5e:17:75:58:d1:66:48:9d:33:3f:56:
         fd:c8:26:35:c6:75:28:a5:94:b3:e2:be:1b:8b:7b:09:d2:a6:
         3a:74:99:f4:24:73:18:07:c8:7e:1b:0e:af:65:ee:31:02:69:
         23:04:ca:2e:ef:cc:28:e5:1c:7e:ce:28:97:bb:9d:3c:88:50:
         7f:e9:40:1d:f9:7c:97:f4:10:af:f5:37:f3:5c:62:61:3f:6a:
         16:25:52:68:df:70:ec:a6:f1:7e:26:58:9f:37:b5:17:f7:a6:
         56:2e:bd:d8:7a:1f:41:9d:6e:ae:1e:c8:d5:3a:7e:20:95:f9:
         cb:a3:4a:9c:b3:d2:8e:f2:a5:92:35:e8:eb:d6:91:cd:6d:f0:
         cf:c8:91:da:f7:0e:ef:e9:55:5c:d2:21:7a:ed:14:a7:47:40:
         98:39:11:96:1f:4e:f8:c0:db:65:26:db:1d:9c:04:20:09:52:
         6e:bd:ce:b9:16:60:f0:c4:8d:ad:86:0d:f7:0d:a3:c8:f7:d8:
         43:61:1c:fd:07:3d:fc:47:4e:84:0b:ba:a7:e6:ed:bf:99:0c:
         fb:fb:2f:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----