Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.mft
File:                     FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.mft (raw, json)
Hash identifier:          bjWJEBst/vEGj5+wEDysmrl12xKlliVaw5qJRVZ2cKA=
Subject key identifier:   65:C9:BD:E0:D3:4C:B1:6C:D1:30:88:EB:76:B2:05:8D:F2:62:4C:3D
Authority key identifier: FD:DB:AF:0C:3C:92:B9:78:7A:52:03:F8:C7:C9:2C:5C:DD:72:CF:99
Certificate issuer:       /CN=FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99
Certificate serial:       4A57FD2D22EEE75F6C86E1D15E59E25DA85333A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.mft
Manifest number:          4D
Signing time:             Mon 15 Apr 2024 05:08:22 +0000
Manifest this update:     Mon 15 Apr 2024 05:03:22 +0000
Manifest next update:     Tue 16 Apr 2024 08:56:22 +0000
Files and hashes:         1: FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.crl (hash: oBcQsmn2TeA2GoR2IIUnkX6EpqTDkqsISFEoP8v3DJA=)
                          2: 323830343a363336383a3a2f33362d3336203d3e20323639333539.roa (hash: gRXQWxQL18Fr6Jeo12W+IfkmvH7/6bw7WFd3SC66OmY=)
                          3: 34352e3233302e38342e302f32332d3234203d3e20323639333539.roa (hash: uygIrx9HieBfuBZKJUI7g+J8+F5bOCAFnrWzE5mC7TQ=)
                          4: 323830343a363336383a313030303a3a2f33362d3336203d3e20323639333539.roa (hash: Jo/5hWf+EjvWfDcW6lL8yjEZCq3iOicUx577n52WhgU=)
                          5: 3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa (hash: YXJik+5bFJh2NC6F1d8VJ/o3iAerv0u3r9tG8DW5j6Q=)
                          6: 34352e3138342e36382e302f32322d3234203d3e20323639333539.roa (hash: dMp98V8tkQ/FHXuioDjCWyVQNmEFIv7L9eisQDqgKZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:57:fd:2d:22:ee:e7:5f:6c:86:e1:d1:5e:59:e2:5d:a8:53:33:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99
        Validity
            Not Before: Apr 15 05:03:22 2024 GMT
            Not After : Apr 16 08:56:22 2024 GMT
        Subject: CN=65C9BDE0D34CB16CD13088EB76B2058DF2624C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:63:78:dc:03:5e:6c:19:0b:f0:c2:eb:6b:
                    f0:a5:3e:d2:6c:e8:7d:fc:d2:ca:d9:25:57:d3:39:
                    4b:84:9b:63:20:ee:15:22:40:79:96:11:24:69:37:
                    d9:b9:92:ba:c9:89:60:90:0f:3b:0e:d8:b2:77:bb:
                    56:b5:31:50:e8:dd:14:e0:57:6a:08:80:ce:73:1c:
                    99:71:8e:80:62:65:c1:94:96:b9:47:b0:64:a5:a8:
                    22:fa:ac:20:73:37:75:6a:0d:48:da:5c:66:4a:3d:
                    c8:7b:74:24:20:b0:30:cd:b1:dc:45:dc:05:91:07:
                    b7:6c:b2:94:93:ed:66:f8:4d:f7:b0:91:d1:7d:a3:
                    b5:1f:a8:4c:35:78:03:dc:9f:3a:65:42:30:37:55:
                    b8:02:11:33:3c:88:5f:d9:ab:26:8c:06:09:54:ee:
                    19:a6:2b:39:0e:98:b6:f8:3d:1b:92:22:d8:f4:64:
                    90:fe:a8:c1:c4:1c:e3:7d:6d:5c:ec:4b:3d:2e:ef:
                    cb:6b:3f:51:81:6e:1b:2e:05:a3:56:73:f5:d9:88:
                    bd:3b:97:26:9c:bc:b3:6a:5c:e8:76:9c:ae:f4:23:
                    49:8a:97:8a:19:8f:24:22:7d:af:ba:25:50:fa:e6:
                    d4:14:1b:43:a0:b9:2f:ac:8d:8c:3b:65:10:63:4e:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C9:BD:E0:D3:4C:B1:6C:D1:30:88:EB:76:B2:05:8D:F2:62:4C:3D
            X509v3 Authority Key Identifier:
                keyid:FD:DB:AF:0C:3C:92:B9:78:7A:52:03:F8:C7:C9:2C:5C:DD:72:CF:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/FDDBAF0C3C92B9787A5203F8C7C92C5CDD72CF99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:16:f0:21:cc:ae:d9:8d:1c:39:6c:81:e6:15:a5:64:35:
         27:2c:a2:c0:be:c3:40:c4:1b:0d:a1:5b:cd:86:33:67:01:42:
         68:7e:f9:91:f3:53:92:b3:30:f2:fe:00:77:83:57:b5:b7:3c:
         ea:ed:63:f0:0b:5e:e7:77:65:7f:99:83:33:59:1f:2f:55:c1:
         50:e2:00:c0:02:1c:01:7b:77:ca:52:ea:35:c6:40:a0:9b:44:
         e8:34:c0:2d:f7:f1:3e:12:a2:78:2b:75:52:64:c9:86:c8:c9:
         b3:7f:ed:05:b2:02:6f:b0:f1:a3:8a:44:a3:f0:61:ef:fc:6b:
         23:29:93:13:9b:5f:b0:ab:88:68:a2:32:89:fe:ca:69:96:1c:
         5e:e4:25:70:2e:4c:06:fa:0d:6d:c9:b3:b5:a2:31:8e:eb:e1:
         fb:0a:99:71:5b:d4:9b:85:22:64:3e:84:5c:9d:f7:57:ba:23:
         0e:b1:1a:6b:01:f8:7f:79:9c:21:c7:12:4b:69:fd:fa:8d:c9:
         c6:c0:a5:68:13:a3:eb:96:b6:80:d9:2f:14:5f:72:dd:a2:8f:
         77:fd:3a:60:97:13:dc:f9:96:16:85:ae:fd:2d:26:bb:da:91:
         2b:c7:87:ec:15:58:87:d0:4f:32:8e:d4:06:ed:2c:36:d8:f6:
         27:e0:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----