Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.mft
File:                     FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.mft (raw, json)
Hash identifier:          OWwvVButR94sk8qUG5as0kx5xhaQIng+0qxzPl/9Enc=
Subject key identifier:   23:75:2C:1F:AE:58:E2:3B:BD:1A:92:D2:6B:72:23:09:8E:5C:E7:09
Authority key identifier: FA:DB:D7:88:9A:78:AF:B3:29:5D:84:B6:C5:12:D9:8F:E7:FD:B7:E3
Certificate issuer:       /CN=FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3
Certificate serial:       252069DE8D062E31016E47D7E25449565F47B821
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.mft
Manifest number:          5B
Signing time:             Mon 15 Apr 2024 04:07:38 +0000
Manifest this update:     Mon 15 Apr 2024 04:02:38 +0000
Manifest next update:     Tue 16 Apr 2024 04:28:38 +0000
Files and hashes:         1: 323830343a383239343a3a2f33322d3438203d3e20323732353237.roa (hash: I2M6WuHPpa3OK/yipXF9nhxfVhJ4+DEolU8TkYs1Skc=)
                          2: FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.crl (hash: Xt1y++UcBsOIM6JwQm95Yg512U5tuPvl/5LKYcuVYco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:20:69:de:8d:06:2e:31:01:6e:47:d7:e2:54:49:56:5f:47:b8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3
        Validity
            Not Before: Apr 15 04:02:38 2024 GMT
            Not After : Apr 16 04:28:38 2024 GMT
        Subject: CN=23752C1FAE58E23BBD1A92D26B7223098E5CE709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:41:1b:2e:eb:bb:c7:fe:ae:8f:60:f7:d5:
                    72:cd:20:84:f5:2d:d5:ea:20:e1:56:75:5f:4c:f6:
                    a4:13:63:63:6c:cd:9f:93:40:85:00:b2:74:ad:ee:
                    d5:0a:75:77:2d:45:4b:c9:cb:84:ee:90:cc:66:14:
                    0c:42:a7:fe:e6:c3:2d:03:83:77:87:a2:01:a3:a3:
                    55:37:6a:f2:e2:2c:b5:d3:39:ec:62:cc:ee:df:c0:
                    37:53:89:84:a9:26:35:ad:f9:55:10:f7:da:ea:79:
                    fc:72:a1:22:48:b5:d1:1a:a5:26:87:56:e0:f6:a7:
                    74:e5:59:59:2d:b5:2c:58:31:e9:39:b3:68:6a:42:
                    26:87:7b:73:ab:b2:85:19:11:3e:ff:35:a6:8c:b6:
                    57:4e:56:33:4b:31:c3:1e:97:fe:57:ac:93:93:c7:
                    6c:c4:29:c8:4a:3a:b0:95:1d:d0:15:f4:31:ec:72:
                    b6:08:1c:43:7b:34:03:e3:18:f5:8d:38:ee:95:ba:
                    34:53:ea:84:50:77:a3:85:91:4b:8d:39:e9:27:8d:
                    84:9e:e5:a7:49:ec:18:0e:00:40:ac:c6:4c:85:eb:
                    19:84:fd:15:7c:b5:46:c2:d3:f5:ea:a1:fb:64:2c:
                    51:8f:9e:ce:80:1b:bd:b8:a5:ce:bc:07:e7:31:fc:
                    f9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:75:2C:1F:AE:58:E2:3B:BD:1A:92:D2:6B:72:23:09:8E:5C:E7:09
            X509v3 Authority Key Identifier:
                keyid:FA:DB:D7:88:9A:78:AF:B3:29:5D:84:B6:C5:12:D9:8F:E7:FD:B7:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:38:39:1f:d1:d4:1c:c2:84:4d:e1:15:8a:92:9e:c6:ad:bb:
         e4:47:c7:59:5b:69:03:41:78:49:7e:32:ae:c7:92:77:f4:a9:
         2c:69:0e:5f:a8:74:1f:f3:cb:dd:e7:8b:a0:a4:c4:40:93:54:
         f9:18:76:a4:e2:c8:15:9b:56:cb:be:91:25:72:87:80:ae:3c:
         d8:e9:80:28:4d:67:08:35:98:9d:88:48:1f:4d:4e:02:32:ca:
         07:9d:5c:58:bf:f3:73:17:ab:14:1c:4a:65:2c:35:55:36:e5:
         5d:ac:1b:82:1f:62:c1:ae:85:94:41:cf:b2:a6:d3:1e:e7:c5:
         f8:ea:4a:5c:99:48:ab:9a:93:67:8b:e7:d8:5f:90:2e:a8:ac:
         b8:21:54:13:db:da:18:97:b9:58:34:5e:d6:22:40:63:b3:e9:
         54:32:54:df:d8:1b:47:54:cb:d8:c8:80:fc:30:24:e6:08:ee:
         34:3c:91:3c:18:a4:2c:e5:4f:b4:71:0a:70:51:b2:6b:b4:a0:
         50:cc:64:f4:91:7f:44:1e:5c:b3:f1:79:0c:a7:28:08:2f:20:
         bf:a1:46:4b:cc:ed:4b:a5:db:61:2a:bf:27:7f:cd:7a:71:43:
         90:09:fd:79:30:49:e7:52:e1:e7:59:59:2c:84:05:9f:80:92:
         e6:b4:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----