Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/FB4C852B14DC3BD44A7B3FA4146413C37EA62930.mft
File:                     FB4C852B14DC3BD44A7B3FA4146413C37EA62930.mft (raw, json)
Hash identifier:          3u5wY+9pJIN5dK87A4GKpNBxjC8f6HB/fwbj7utaq1I=
Subject key identifier:   4D:A6:AC:D9:8C:65:2B:95:99:3A:7E:43:93:77:03:98:B9:8F:D8:70
Authority key identifier: FB:4C:85:2B:14:DC:3B:D4:4A:7B:3F:A4:14:64:13:C3:7E:A6:29:30
Certificate issuer:       /CN=FB4C852B14DC3BD44A7B3FA4146413C37EA62930
Certificate serial:       59F4F3D86F5CC89F46EE71041BE3232648BA5AEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4C852B14DC3BD44A7B3FA4146413C37EA62930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/FB4C852B14DC3BD44A7B3FA4146413C37EA62930.mft
Manifest number:          5A
Signing time:             Sun 26 Nov 2023 13:10:21 +0000
Manifest this update:     Sun 26 Nov 2023 13:05:21 +0000
Manifest next update:     Mon 27 Nov 2023 15:26:21 +0000
Files and hashes:         1: 34352e3136312e39362e302f32332d3233203d3e20323638343633.roa (hash: HZKjkij2E1bFruB9JJ4eC8Xes11A+XCGbHUGIwCv6R4=)
                          2: 323830343a353139343a3a2f33322d3332203d3e20323638343633.roa (hash: 5T1+kSgw2+Dzb6rpz7JP8XFo+QL7ujUCdYsljcbdfm0=)
                          3: 34352e3136312e39362e302f32322d3232203d3e20323638343633.roa (hash: vsTyRvgX6b0aLKFE+MMnFvbkuPGMbIoVr1Sn+ZnzMyI=)
                          4: FB4C852B14DC3BD44A7B3FA4146413C37EA62930.crl (hash: fTDAcdEJZXDC0/MdGeXnkZILGLssUpxh/rswKK8jQQc=)
                          5: 34352e3136312e39382e302f32332d3233203d3e20323638343633.roa (hash: fYj+nBNwsmtA/CiHyaaN9ELR2ia26FHLJpQOxHR9bd0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f4:f3:d8:6f:5c:c8:9f:46:ee:71:04:1b:e3:23:26:48:ba:5a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4C852B14DC3BD44A7B3FA4146413C37EA62930
        Validity
            Not Before: Nov 26 13:05:21 2023 GMT
            Not After : Nov 27 15:26:21 2023 GMT
        Subject: CN=4DA6ACD98C652B95993A7E4393770398B98FD870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:a2:3d:a9:68:23:53:ba:78:35:6c:35:f7:
                    3f:6b:f9:dc:11:a1:08:6a:f6:89:e5:5f:dd:0e:ee:
                    58:76:51:d4:59:61:7a:83:80:8f:94:7d:74:ba:74:
                    2c:3f:18:e4:82:33:2e:49:b2:27:51:6f:72:71:db:
                    ea:f9:f7:85:a4:00:fd:63:f8:bb:39:35:a9:85:0f:
                    21:89:2f:f5:58:d7:0c:11:3d:6f:d2:cd:b4:ad:3e:
                    fc:55:7d:11:33:da:f6:56:a8:b5:7c:ca:1b:ad:19:
                    03:19:75:b8:70:6b:02:ba:e2:36:78:5d:0c:ad:c9:
                    00:b7:45:5c:44:71:a4:9e:9e:f8:c7:d5:e7:ff:44:
                    75:cd:16:57:38:81:62:37:dc:d9:78:77:b6:4b:e7:
                    9d:8e:a4:f1:23:b2:d9:ae:96:28:c8:6f:fb:6f:a3:
                    e9:6b:bc:19:37:bb:0e:a0:5f:cf:d9:ff:53:8c:42:
                    2f:d8:a6:73:86:e0:d1:fc:83:9a:79:9d:6f:77:ca:
                    84:65:6d:b2:56:30:ec:f2:ad:87:56:c4:44:ae:82:
                    ee:6c:f8:16:51:06:34:7e:f9:d1:c4:cb:3a:9a:1b:
                    53:91:08:a3:03:87:b7:08:03:ce:20:00:a6:3f:81:
                    91:5f:4a:80:d0:b7:02:15:f1:12:1d:5c:2b:a9:b8:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A6:AC:D9:8C:65:2B:95:99:3A:7E:43:93:77:03:98:B9:8F:D8:70
            X509v3 Authority Key Identifier:
                keyid:FB:4C:85:2B:14:DC:3B:D4:4A:7B:3F:A4:14:64:13:C3:7E:A6:29:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/FB4C852B14DC3BD44A7B3FA4146413C37EA62930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4C852B14DC3BD44A7B3FA4146413C37EA62930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/FB4C852B14DC3BD44A7B3FA4146413C37EA62930.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:8a:bc:56:f4:f1:a4:5b:94:aa:1d:dd:c3:8c:95:06:91:fa:
         78:5d:87:4d:85:56:5b:47:cc:3a:a6:4a:7e:91:94:a5:0e:89:
         bb:cc:82:ca:d0:2f:23:6a:fd:9e:d3:f2:bc:b9:65:f4:93:34:
         58:9a:cc:09:0d:dc:9e:ac:42:7e:00:c6:41:4f:63:f6:ea:39:
         42:5b:ff:b7:ea:2d:3e:b6:58:91:2f:ba:be:dd:cb:5c:a3:e7:
         d7:42:79:cc:f7:90:30:c2:7a:86:8d:14:60:50:af:05:30:b8:
         6e:ae:c3:d2:6e:88:55:04:9d:cf:16:26:3d:0a:5a:6e:20:98:
         3c:d2:e5:58:ca:73:8c:39:cd:17:bd:c1:d4:85:7b:be:bb:19:
         00:fe:34:b8:85:c7:9e:62:b8:f7:5d:29:2a:16:7f:94:0a:27:
         63:b8:76:6c:6b:af:4e:13:ce:1c:84:23:f6:cc:82:77:b0:87:
         7b:58:d0:64:dd:09:0f:38:44:f3:1a:b2:b4:47:f4:34:04:0f:
         d4:9c:0f:4c:65:66:34:ba:da:8a:54:aa:39:c8:1f:2b:25:46:
         e0:7f:44:16:a9:e8:52:7e:70:4d:4e:0f:d7:55:77:6b:a8:07:
         1b:42:88:da:5d:ec:53:ee:7f:57:8d:b5:1e:a2:81:4b:a5:03:
         1a:c1:4c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----