Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.mft
File:                     FB3862529E205770549D2C9C549C9466E5CB21B5.mft (raw, json)
Hash identifier:          rOToRVCkcfNd0swPiPTP/tmWvK+NT9PtnZ4ZUAq6iw4=
Subject key identifier:   C9:B1:1F:D3:C3:5A:65:80:CF:67:79:DA:ED:42:AA:BE:B2:B5:12:F5
Authority key identifier: FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5
Certificate issuer:       /CN=FB3862529E205770549D2C9C549C9466E5CB21B5
Certificate serial:       17E0A7D09FF41A0F79DC1EA8E40C4842A242FB67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.mft
Manifest number:          03FE
Signing time:             Sun 14 Apr 2024 20:50:00 +0000
Manifest this update:     Sun 14 Apr 2024 20:45:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:00:00 +0000
Files and hashes:         1: 34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa (hash: Bk2ddY+oDG8EtarrY1uyHdMYmuLAwkRVo6+mr3Xp3ig=)
                          2: FB3862529E205770549D2C9C549C9466E5CB21B5.crl (hash: +/zX0BW5gRu4bsGWIhFFyxolkjmrvIteEuwkNyBB/A8=)
                          3: 323830343a363439303a3a2f33322d3438203d3e20323639343335.roa (hash: DFxBvdMhl2yhA9h2W/fBVhSyrOBrlO6gAtA0QLsLN9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e0:a7:d0:9f:f4:1a:0f:79:dc:1e:a8:e4:0c:48:42:a2:42:fb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3862529E205770549D2C9C549C9466E5CB21B5
        Validity
            Not Before: Apr 14 20:45:00 2024 GMT
            Not After : Apr 16 00:00:00 2024 GMT
        Subject: CN=C9B11FD3C35A6580CF6779DAED42AABEB2B512F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:5c:a1:e0:e1:b8:a1:14:ad:82:3c:b6:84:
                    67:e0:71:47:ad:42:67:6c:b7:61:26:ed:64:f6:77:
                    ae:fa:52:f7:55:21:3c:64:01:83:dd:82:fe:94:e5:
                    78:f5:c8:2c:2e:0b:e2:ce:d1:5b:86:07:cd:ea:e0:
                    dc:d4:b6:34:10:21:cb:9a:a6:48:04:1e:2a:dc:1b:
                    2e:4b:01:08:d6:d5:5e:19:1d:94:91:f7:02:68:d5:
                    ff:e7:aa:3f:b9:dd:bd:7d:e7:84:89:54:c8:cb:cf:
                    64:fe:23:1f:b9:ad:38:5e:b9:11:e2:3c:db:84:e8:
                    9f:85:a6:4b:de:75:03:54:68:b5:a3:3e:ec:52:0a:
                    bc:a4:63:93:94:b0:67:53:51:4f:dc:e9:88:26:a9:
                    07:c3:ff:ef:f6:f3:59:97:cd:14:3d:ae:2f:5c:a3:
                    b4:8f:7d:30:7c:ef:06:18:f4:6f:b0:bf:9f:43:72:
                    13:bc:52:da:97:15:64:fe:4b:38:98:9f:6d:4c:61:
                    ec:cd:4e:03:d4:0b:cb:4e:1f:b6:f6:ec:3d:8e:be:
                    82:fd:62:e0:15:5d:60:da:f7:48:e8:11:61:03:4e:
                    47:e8:f1:77:0f:9f:51:9a:82:00:84:f0:91:f0:92:
                    33:68:5d:b1:09:4f:45:a0:6c:96:22:38:17:04:76:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:1F:D3:C3:5A:65:80:CF:67:79:DA:ED:42:AA:BE:B2:B5:12:F5
            X509v3 Authority Key Identifier:
                keyid:FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:1f:41:62:ff:df:a1:e1:f1:33:57:6b:6c:7d:c7:7a:1f:79:
         1c:34:1f:c8:d3:e5:88:0d:8e:c7:dd:54:37:58:39:82:59:11:
         7a:de:5a:b2:80:86:97:24:ca:6c:08:0f:ed:12:1c:56:37:56:
         e6:0e:eb:2f:26:5a:4e:fc:ba:ed:b3:98:92:5b:62:60:f0:bf:
         ee:01:d7:82:62:a3:2c:05:a8:25:2b:4e:bf:80:8f:1c:d0:9e:
         47:23:52:f6:aa:57:42:e5:3d:1c:ff:c0:a4:c0:2f:08:2d:b9:
         64:64:a4:30:48:80:eb:1d:59:d9:5f:0d:0c:72:98:8b:61:ce:
         6e:d4:9b:1f:9c:62:15:b9:e9:18:af:2c:3d:96:53:2b:96:3a:
         8f:2a:e0:cf:d8:4f:99:91:37:c3:4d:22:13:b3:77:87:ad:17:
         b0:d8:cb:11:c8:27:48:05:52:b0:c7:62:8b:29:d5:88:ca:4d:
         2f:28:4d:4c:76:76:20:cf:9b:6b:33:5d:72:c2:b8:88:57:08:
         75:0d:f6:6b:f9:57:ed:59:3f:bf:b2:7e:68:3e:c1:7d:a5:93:
         40:cf:25:d4:dd:fa:03:1d:f2:8d:d3:46:fa:8d:62:9d:49:c4:
         66:f6:55:fb:dd:7b:83:54:57:3e:e0:85:51:7c:4f:48:bd:5a:
         c8:49:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----