Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.mft
File:                     FDF912AB43D9EC498247AB2AA097FCC4CF726502.mft (raw, json)
Hash identifier:          YFnuf1IypynkkvpH1IKUOdabqQF8F3YFWRe4qeJ1Egg=
Subject key identifier:   B4:75:87:B1:24:2B:8D:E9:40:32:75:CB:03:AF:F4:C9:C4:0B:17:21
Authority key identifier: FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02
Certificate issuer:       /CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
Certificate serial:       01281087F7FCFA2ADDDE9417B6F9BC28D121DD55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.mft
Manifest number:          016B
Signing time:             Fri 18 Nov 2022 23:40:00 +0000
Manifest this update:     Fri 18 Nov 2022 23:35:00 +0000
Manifest next update:     Sun 20 Nov 2022 00:08:00 +0000
Files and hashes:         1: FDF912AB43D9EC498247AB2AA097FCC4CF726502.crl (hash: 9+9jp/+pAp3jJM/9BNYGFepQiLzayXDj+LmzRvZYTEk=)
                          2: 3138312e3232342e302e302f32322d3234203d3e20323731343134.roa (hash: wGjxbeZ0Yivv2d0gZDMwX6yYp+Jq28iwR9yZI/tY/Ds=)
                          3: 323830343a376232383a3a2f33322d3438203d3e20323731343134.roa (hash: m+OMEwZ8neep9WAaM+kXbJFyZORMxpUHdaAg3mJPGGc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:28:10:87:f7:fc:fa:2a:dd:de:94:17:b6:f9:bc:28:d1:21:dd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
        Validity
            Not Before: Nov 18 23:35:00 2022 GMT
            Not After : Nov 20 00:08:00 2022 GMT
        Subject: CN=B47587B1242B8DE9403275CB03AFF4C9C40B1721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:1b:f1:ee:b7:9c:9d:76:09:18:d6:db:dd:
                    46:12:f0:29:de:54:a7:c9:d3:f8:fc:e4:01:c8:ca:
                    49:e0:37:0b:a8:27:9b:12:5d:0b:57:86:51:27:50:
                    37:bd:c7:db:97:e7:d0:6b:cd:b9:35:f3:68:4f:cf:
                    8a:a9:6f:e8:85:61:d1:61:03:33:92:22:ca:4e:e1:
                    ad:3a:33:2c:07:1c:3c:c5:ff:a1:66:90:a8:2f:f0:
                    fd:b4:01:5e:b7:c4:5e:cc:0a:4d:29:db:2d:2d:7b:
                    96:cb:c2:d2:af:48:6b:09:f6:18:eb:8c:6b:86:7c:
                    a5:e8:a6:1f:e4:73:13:1a:04:e6:a8:2f:7d:57:d6:
                    4d:41:38:14:5b:c0:23:7a:cf:ff:c0:23:ac:d4:0e:
                    90:c4:d3:0c:31:31:d5:48:32:0e:4e:ba:7b:bc:e5:
                    d3:cc:d5:f9:7d:e9:b2:81:5a:40:c4:30:96:58:a7:
                    59:9f:b3:73:8e:42:b4:d2:99:a9:f6:9f:15:87:d0:
                    3c:44:cf:5a:ce:dd:25:22:8d:7f:9c:eb:60:d6:29:
                    25:3e:9e:68:5b:c0:0d:27:83:42:ec:cc:a2:3e:9c:
                    7d:c4:a6:1e:01:63:e7:78:5f:b4:14:b1:b8:9c:d2:
                    ae:b1:8e:5b:56:99:39:95:43:e4:ca:cb:30:bc:e3:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:75:87:B1:24:2B:8D:E9:40:32:75:CB:03:AF:F4:C9:C4:0B:17:21
            X509v3 Authority Key Identifier:
                keyid:FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:63:c2:4b:8b:cd:83:a6:fa:c0:b2:7c:12:cb:00:d8:42:7f:
         7e:20:eb:4d:de:63:5d:5b:5d:7f:e6:08:53:29:47:9a:cb:b2:
         27:d0:44:45:8f:62:cc:38:fc:cb:ea:37:cb:ae:3d:59:60:c7:
         83:b5:7a:5f:ef:46:10:e7:a2:0e:e3:2c:f7:8e:8c:e3:e0:c1:
         95:8b:f9:fc:3b:50:e3:4e:7e:66:92:67:65:6f:b7:05:e2:4d:
         7c:22:4b:42:ac:c2:da:d6:4b:d5:91:57:bc:db:12:7f:10:c1:
         63:9e:3c:e4:f0:a6:81:39:70:22:8f:7f:a2:3a:38:83:12:57:
         af:48:93:4c:2e:ee:bd:ac:cd:1f:a1:8f:aa:33:a0:91:f0:0c:
         48:df:98:36:8f:47:a7:3b:94:1d:b0:12:3f:43:6c:2d:66:be:
         cb:36:19:f7:93:1f:d4:e7:c0:31:67:bb:de:d5:a9:e8:16:b6:
         e4:cb:f8:7b:0e:5c:52:e4:c7:be:79:9a:47:32:3f:56:83:86:
         79:51:5d:94:20:9a:79:cc:bb:02:79:6f:2d:1e:4d:56:8a:27:
         d6:6f:08:19:3d:54:3f:24:be:c5:cf:2d:7b:f8:bb:25:0a:d5:
         46:64:c3:8b:82:09:39:86:df:d2:76:92:f2:27:e8:41:d4:1e:
         f1:9b:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----