Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/FA63D2BA12336DA0447E0B64EC511C5C4DE5429A.mft
File:                     FA63D2BA12336DA0447E0B64EC511C5C4DE5429A.mft (raw, json)
Hash identifier:          LEc05CO7stvDugV2d0Wgpg0K80KEfLK3Jq6b28rxVYk=
Subject key identifier:   13:B3:DD:98:A7:2C:B7:D1:A0:62:44:61:FA:35:38:B1:1F:C1:39:8C
Authority key identifier: FA:63:D2:BA:12:33:6D:A0:44:7E:0B:64:EC:51:1C:5C:4D:E5:42:9A
Certificate issuer:       /CN=FA63D2BA12336DA0447E0B64EC511C5C4DE5429A
Certificate serial:       30C3A9A8146C5748C4EDDE9312C2377994C19E9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA63D2BA12336DA0447E0B64EC511C5C4DE5429A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/FA63D2BA12336DA0447E0B64EC511C5C4DE5429A.mft
Manifest number:          30
Signing time:             Fri 22 Sep 2023 09:17:35 +0000
Manifest this update:     Fri 22 Sep 2023 09:12:35 +0000
Manifest next update:     Sat 23 Sep 2023 10:23:35 +0000
Files and hashes:         1: 323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (hash: 3bgb4aj6nu2jAJgLghGn9N0nyLASuhqBAS3Mkn6/OhA=)
                          2: FA63D2BA12336DA0447E0B64EC511C5C4DE5429A.crl (hash: 0e9MRRgIty4HbkppoVGcC4j7Or9Nxr8XSCEJgtQYJ+Q=)
                          3: 3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (hash: FUEzjOQvzYA5dR1u8M1x9gccbuJn5wfR9SBPstwXT14=)
                          4: 3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (hash: DIaFSjkaaL+kmQ4YRmQbnFlLnMt2sg9a2MLF98Hrfec=)
                          5: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (hash: 7qyG5UJBQzDqomf4t5bMtFqr4B8Llt/1J+6pyMzvRqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c3:a9:a8:14:6c:57:48:c4:ed:de:93:12:c2:37:79:94:c1:9e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA63D2BA12336DA0447E0B64EC511C5C4DE5429A
        Validity
            Not Before: Sep 22 09:12:35 2023 GMT
            Not After : Sep 23 10:23:35 2023 GMT
        Subject: CN=13B3DD98A72CB7D1A0624461FA3538B11FC1398C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6f:bb:f2:ae:fe:62:b3:bc:3a:00:38:33:00:
                    49:25:dd:c0:3b:13:7d:34:90:55:6f:2b:09:6b:a2:
                    8a:35:b2:d5:71:6a:38:d0:a5:24:b9:98:88:c2:d8:
                    b5:01:ca:b9:1c:fd:ed:70:6d:66:fc:24:4b:8a:78:
                    1e:bb:9b:0d:84:20:2b:e3:fe:d3:47:d6:70:dc:27:
                    3f:75:f5:0d:eb:e4:28:8f:3b:93:44:59:be:33:93:
                    f7:7e:01:fe:b3:c1:b2:64:f1:54:55:9f:9b:01:c7:
                    b6:e8:a8:5f:79:95:c2:a6:ba:4e:79:7e:cb:f5:d8:
                    ec:12:90:e5:e9:50:55:f8:88:24:5f:ec:f2:1b:69:
                    88:d2:f6:3b:5c:61:aa:1c:6b:03:55:da:56:48:26:
                    09:a4:69:da:2c:af:c0:93:7f:85:2a:3e:87:d1:b3:
                    73:9c:fa:55:ee:f2:01:46:4c:31:38:db:52:4b:c4:
                    f9:73:eb:49:f2:44:1e:6d:2f:bf:f7:c1:d5:f3:82:
                    cf:54:4b:95:6f:3d:c8:b5:8f:50:a0:2d:8c:07:72:
                    24:ea:bf:b1:63:5b:81:1d:90:e0:63:85:71:8d:a0:
                    df:68:c0:fa:32:c6:ea:32:81:ee:83:5e:7c:a0:a6:
                    74:70:cc:1d:85:e2:6a:ca:3b:a8:94:8f:94:fb:bf:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B3:DD:98:A7:2C:B7:D1:A0:62:44:61:FA:35:38:B1:1F:C1:39:8C
            X509v3 Authority Key Identifier:
                keyid:FA:63:D2:BA:12:33:6D:A0:44:7E:0B:64:EC:51:1C:5C:4D:E5:42:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/FA63D2BA12336DA0447E0B64EC511C5C4DE5429A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA63D2BA12336DA0447E0B64EC511C5C4DE5429A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/FA63D2BA12336DA0447E0B64EC511C5C4DE5429A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:e7:07:3d:c7:9b:cd:40:43:fd:54:4c:7c:55:f0:b5:4e:58:
         1d:13:cd:06:27:aa:df:ca:c5:50:08:aa:1b:c8:66:9c:0d:80:
         ba:53:16:31:36:d3:2d:e3:1b:90:c1:65:13:ad:76:48:38:96:
         5e:ce:7d:5e:61:62:f5:f6:42:3d:da:8a:58:94:65:49:f0:ff:
         ca:b8:3e:0c:21:4d:36:6a:f4:31:ca:4f:b2:9e:fb:6c:42:15:
         7f:08:b9:90:2c:eb:93:70:7d:a9:63:1d:9d:c9:ad:72:76:37:
         c2:d0:0b:06:46:23:c4:7d:b4:d3:f6:01:02:0e:12:f4:15:bc:
         be:fa:d3:78:78:50:fd:18:2e:76:35:e9:b0:3a:f6:2d:c9:b5:
         fa:b3:63:8b:e9:58:c0:1f:1b:a2:0b:ed:ed:20:69:05:cb:7e:
         27:72:ff:1a:27:c8:a0:95:41:a6:aa:f0:fc:40:69:4c:22:4c:
         43:1f:ba:cd:14:3e:07:b5:66:d3:6a:7c:9b:db:52:ef:1d:fe:
         f9:d3:e6:93:61:c2:8a:a3:a7:93:6d:42:a5:fc:b1:9f:1d:11:
         74:58:3a:bb:25:ee:94:aa:91:07:1b:6f:bd:13:b5:dd:20:ae:
         c3:2f:b4:61:a2:06:10:91:82:cb:48:02:6c:b2:f5:c7:f9:95:
         dc:d6:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----