Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD.mft
File:                     FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD.mft (raw, json)
Hash identifier:          pGukolbm9s0DaTODnYDuReQEz25VdgZlElsfLiPLWFE=
Subject key identifier:   F6:56:D0:D5:69:57:93:93:D4:68:81:56:0F:99:16:14:2D:06:CD:BB
Authority key identifier: FC:EF:1B:DC:45:03:8C:5A:D0:90:94:2B:6F:30:78:F7:CE:3D:19:DD
Certificate issuer:       /CN=FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD
Certificate serial:       154026E3DFBBC55C49109D2B8732D7AC91D8AC1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD.mft
Manifest number:          91
Signing time:             Fri 28 Feb 2025 18:14:40 +0000
Manifest this update:     Fri 28 Feb 2025 18:09:40 +0000
Manifest next update:     Sat 01 Mar 2025 18:25:40 +0000
Files and hashes:         1: 323830343a313736383a3a2f33322d3438203d3e20323633313434.roa (hash: wBe9rFSgKdicTNcByfOOTKWgkaYc583JJ/luy9Mt3Pk=)
                          2: FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD.crl (hash: Cr0M3WR+eQkRaJWFXGu6BOmRfK/lAu3jZ3PUkSd571o=)
                          3: 3139312e3234322e3232302e302f32322d3234203d3e20323633313434.roa (hash: eH/m1baQI6gPGszHOEWhu4sHMrpBZCdVL/NYnMsz5tw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:40:26:e3:df:bb:c5:5c:49:10:9d:2b:87:32:d7:ac:91:d8:ac:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD
        Validity
            Not Before: Feb 28 18:09:40 2025 GMT
            Not After : Mar  1 18:25:40 2025 GMT
        Subject: CN=F656D0D569579393D46881560F9916142D06CDBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:97:38:fb:94:32:0e:67:e0:b5:e8:d4:67:b9:
                    de:87:72:4e:06:7f:f3:a4:28:ee:61:63:11:02:02:
                    14:1b:ef:3e:e6:ec:41:e0:62:28:b1:af:87:37:c1:
                    e3:80:57:76:0f:2e:1a:84:8d:4a:aa:82:52:21:f5:
                    dc:eb:25:8e:d2:72:75:6e:b5:ec:08:8e:4a:23:d5:
                    14:49:11:61:3e:3c:ff:59:b7:88:be:93:f3:b5:25:
                    42:8e:88:b0:0d:3f:6a:21:58:2b:0c:68:c5:d6:6b:
                    aa:32:b6:f9:c6:9d:84:95:d5:52:d4:e2:16:0b:e4:
                    e2:c7:0d:cd:ce:cd:ca:a8:0c:0b:3b:1a:e1:b7:5f:
                    a0:f8:1b:5f:d9:2f:68:af:ab:b2:34:dc:03:ed:1d:
                    65:bc:22:05:38:ca:94:60:82:48:e4:c5:b8:3a:ad:
                    4c:73:bf:7d:7b:d0:ff:3e:ef:54:87:24:42:8c:dd:
                    70:b9:b9:e5:29:f8:8a:d5:94:b2:1e:7f:c2:8f:75:
                    b1:67:82:01:15:e9:95:34:fc:e7:a0:57:16:62:af:
                    21:3a:33:1f:d6:eb:33:ea:a6:88:0a:82:3f:2e:9b:
                    5f:9f:5f:bc:67:82:23:f8:55:8e:cf:76:2c:8d:a5:
                    b4:00:dc:03:d8:e5:bc:54:cb:71:ac:30:e5:12:85:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:D0:D5:69:57:93:93:D4:68:81:56:0F:99:16:14:2D:06:CD:BB
            X509v3 Authority Key Identifier:
                keyid:FC:EF:1B:DC:45:03:8C:5A:D0:90:94:2B:6F:30:78:F7:CE:3D:19:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/FCEF1BDC45038C5AD090942B6F3078F7CE3D19DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:36:bc:d5:33:cf:6b:00:24:6c:23:d8:92:29:9e:09:85:0a:
         ea:f7:d8:ee:8b:6d:cb:de:ee:44:34:7a:ad:38:6a:4e:77:a9:
         66:ec:b1:0b:e2:82:ef:3b:a7:3c:9d:a4:71:c4:72:af:48:d2:
         47:c9:09:ca:bc:a1:4f:60:a9:7f:ca:ad:d5:2b:e5:48:fa:eb:
         55:24:e5:c0:b3:e8:47:ee:a4:b9:94:3f:4e:b2:32:1c:8c:79:
         c7:6a:9f:ee:f2:c4:54:fb:c4:d0:c0:32:72:4c:1e:18:c3:0f:
         74:66:99:d4:ab:d0:ae:64:24:ca:33:d3:14:73:27:e1:e5:36:
         1a:7b:cf:49:7c:25:db:70:7e:78:59:a1:6d:c3:4c:c4:7c:bf:
         7d:2f:44:47:16:9c:c3:81:1b:f3:3e:26:79:d5:99:db:26:bc:
         74:4f:6a:1c:8e:74:68:c8:a1:60:ea:5a:8e:1c:5e:f2:d3:5b:
         d5:43:bd:4f:b2:da:6f:bd:cf:aa:0d:97:4c:d2:ac:a2:a2:69:
         1c:ca:d7:60:46:ae:50:cb:30:07:71:a5:7d:b1:40:bf:8e:69:
         ca:a9:90:13:76:02:5d:11:0b:2a:a2:4e:55:9b:01:b2:ad:da:
         40:ab:11:57:71:53:87:90:9d:eb:ed:7f:70:a6:34:54:83:39:
         8c:18:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----