Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.mft
File:                     FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.mft (raw, json)
Hash identifier:          DsJjI0GXRuDBBL76Nwxrd0e2W4Z2Uhh7p59L06MavGQ=
Subject key identifier:   F7:AC:81:CE:3A:82:B3:C4:A8:58:0F:92:32:11:02:7D:CA:AE:E2:34
Authority key identifier: FF:FC:81:4D:5B:A0:AA:F8:89:4C:9F:9A:C9:FF:0D:0C:1A:5A:27:EE
Certificate issuer:       /CN=FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE
Certificate serial:       17CE7AF134C431800BEB09FFCCB7BB25FF9B2BDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.mft
Manifest number:          A4
Signing time:             Fri 12 May 2023 17:57:40 +0000
Manifest this update:     Fri 12 May 2023 17:52:40 +0000
Manifest next update:     Sat 13 May 2023 20:11:40 +0000
Files and hashes:         1: FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.crl (hash: zfpn9eSw6IlS/xrG5AAMtnO8jef6L9e/n0mbN0yBjG4=)
                          2: 323830343a323161633a3a2f33322d3438203d3e20323634353636.roa (hash: sw271qaYhgD2f/reH/68QwDMwBJFdRXmHXwTpSqEKwc=)
                          3: 3133382e302e3134342e302f32322d3234203d3e20323634353636.roa (hash: ud26CYlteiMQnXuX1Rf//sT2JXFjDuuGQvdN9G2wSSw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ce:7a:f1:34:c4:31:80:0b:eb:09:ff:cc:b7:bb:25:ff:9b:2b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE
        Validity
            Not Before: May 12 17:52:40 2023 GMT
            Not After : May 13 20:11:40 2023 GMT
        Subject: CN=F7AC81CE3A82B3C4A8580F923211027DCAAEE234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:00:a2:c5:60:80:05:de:a1:5d:9c:af:20:
                    fb:45:08:f6:03:df:4a:41:c9:af:22:de:24:bc:96:
                    59:b2:b7:32:a1:f8:ec:3c:0d:75:1f:57:da:64:a1:
                    cc:78:e8:60:73:d7:0f:fb:63:33:58:14:33:4e:45:
                    b8:4f:be:0f:f8:2b:8e:1a:25:91:7b:79:86:b1:13:
                    ca:2f:c4:ac:10:83:32:10:79:69:4c:c4:70:50:69:
                    67:e3:b0:ce:45:83:ff:ab:db:a1:7c:d0:82:0c:6a:
                    4b:4a:47:b7:37:e3:62:fa:ee:c8:0c:29:35:f9:16:
                    52:d6:2c:4f:c6:61:dc:20:48:47:fa:fb:c6:04:4a:
                    da:25:ed:1a:f9:9a:5c:27:80:26:47:04:fa:8b:50:
                    5a:38:77:78:29:fe:a2:d0:72:41:af:18:b7:e0:23:
                    a7:68:da:39:da:9b:ff:6f:59:f6:35:3b:af:bd:e3:
                    9f:23:10:4b:b5:d4:eb:f8:3f:d4:2c:60:c6:34:af:
                    9d:9b:e3:2f:e2:df:64:be:7f:b0:87:2f:df:3f:ca:
                    40:54:fd:16:e6:52:79:8b:c6:62:80:eb:98:56:63:
                    8c:2c:2b:58:9c:a3:57:79:dd:7c:01:f4:bc:bf:d3:
                    62:3e:48:68:ff:06:9d:02:a5:ab:0c:0d:b1:78:b2:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AC:81:CE:3A:82:B3:C4:A8:58:0F:92:32:11:02:7D:CA:AE:E2:34
            X509v3 Authority Key Identifier:
                keyid:FF:FC:81:4D:5B:A0:AA:F8:89:4C:9F:9A:C9:FF:0D:0C:1A:5A:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/FFFC814D5BA0AAF8894C9F9AC9FF0D0C1A5A27EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:de:b2:b8:6a:4b:e3:25:aa:a7:db:29:8e:a5:e3:1f:38:2d:
         52:c1:ac:77:a6:c9:38:6c:b0:ee:33:7f:69:15:8f:b5:18:eb:
         25:c6:3b:aa:d3:2c:d5:5b:3d:62:29:b2:7d:e6:56:f6:b2:85:
         bd:8a:52:03:44:f6:b3:e5:ee:22:82:b6:b5:8a:23:0d:70:6a:
         4c:b1:b9:7a:f7:e8:18:5f:13:83:bf:e6:d0:45:50:50:e1:87:
         2c:02:43:0b:8d:63:d2:4b:bc:43:63:bf:fa:7f:e9:73:79:d4:
         86:95:41:cf:d0:15:fa:a5:58:73:b1:24:41:1e:71:86:90:ed:
         55:5d:5e:55:65:cb:a9:a8:35:66:2e:53:a7:3e:49:e9:0d:f2:
         7b:f5:c1:aa:f9:c9:90:9d:f1:5d:ff:f5:15:7d:0b:39:10:e8:
         f7:0b:68:41:66:22:de:ba:33:b9:df:b0:ea:33:68:0f:24:a3:
         b9:b7:50:cf:ab:35:cd:1f:15:28:00:cd:ca:58:8e:ea:82:df:
         60:00:6f:55:3e:9f:ca:17:29:03:42:e0:61:44:41:48:7e:dd:
         a1:e1:7c:bb:cd:72:f4:a2:fb:57:d0:76:db:13:d5:cc:6d:a0:
         45:54:10:d3:f6:38:c9:1a:69:ac:67:4b:2d:18:bd:66:b1:da:
         5c:06:00:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF8568TTEMYAL6wn/zLe7Jf+bK9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGQzgxNEQ1QkEwQUFGODg5NEM5RjlBQzlGRjBEMEMx
QTVBMjdFRTAeFw0yMzA1MTIxNzUyNDBaFw0yMzA1MTMyMDExNDBaMDMxMTAvBgNV
BAMTKEY3QUM4MUNFM0E4MkIzQzRBODU4MEY5MjMyMTEwMjdEQ0FBRUUyMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuQCixWCABd6hXZyvIPtFCPYD
30pBya8i3iS8llmytzKh+Ow8DXUfV9pkocx46GBz1w/7YzNYFDNORbhPvg/4K44a
JZF7eYaxE8ovxKwQgzIQeWlMxHBQaWfjsM5Fg/+r26F80IIMaktKR7c342L67sgM
KTX5FlLWLE/GYdwgSEf6+8YEStol7Rr5mlwngCZHBPqLUFo4d3gp/qLQckGvGLfg
I6do2jnam/9vWfY1O6+9458jEEu11Ov4P9QsYMY0r52b4y/i32S+f7CHL98/ykBU
/RbmUnmLxmKA65hWY4wsK1ico1d53XwB9Ly/02I+SGj/Bp0CpasMDbF4snfdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU96yBzjqCs8SoWA+SMhECfcqu4jQwHwYDVR0j
BBgwFoAU//yBTVugqviJTJ+ayf8NDBpaJ+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5VXJGVTg3Rm1IeFBjM2NBYUtBSmM2akU2U2JtYlo0QlFuVmFzSGhO
VWMvMC9GRkZDODE0RDVCQTBBQUY4ODk0QzlGOUFDOUZGMEQwQzFBNUEyN0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGRkM4MTRENUJBMEFBRjg4
OTRDOUY5QUM5RkYwRDBDMUE1QTI3RUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFo5VXJGVTg3Rm1IeFBjM2NBYUtBSmM2akU2U2JtYlo0QlFuVmFzSGhOVWMvMC9G
RkZDODE0RDVCQTBBQUY4ODk0QzlGOUFDOUZGMEQwQzFBNUEyN0VFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeN6yuGpL4yWqp9spjqXjHzgtUsGsd6bJOGyw7jN/aRWPtRjrJcY7qtMs1Vs9
YimyfeZW9rKFvYpSA0T2s+XuIoK2tYojDXBqTLG5evfoGF8Tg7/m0EVQUOGHLAJD
C41j0ku8Q2O/+n/pc3nUhpVBz9AV+qVYc7EkQR5xhpDtVV1eVWXLqag1Zi5Tpz5J
6Q3ye/XBqvnJkJ3xXf/1FX0LORDo9wtoQWYi3rozud+w6jNoDySjubdQz6s1zR8V
KADNyliO6oLfYABvVT6fyhcpA0LgYURBSH7doeF8u81y9KL7V9B22xPVzG2gRVQQ
0/Y4yRpprGdLLRi9ZrHaXAYARg==
-----END CERTIFICATE-----