Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/1/FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.mft
File:                     FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.mft (raw, json)
Hash identifier:          yzBAdhe2MeIsCmQM/KM1pPmzBN8B/rjVC7MHBZ4ml6s=
Subject key identifier:   BF:D4:F5:BC:34:5B:CD:73:EE:63:21:03:4B:8F:DF:5F:D7:B5:D1:2B
Authority key identifier: FD:5C:0C:99:42:60:A7:4D:E0:FE:7E:FA:84:DB:66:CA:7F:8E:BF:6F
Certificate issuer:       /CN=FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F
Certificate serial:       65ABD4CF76952F96CF5E4D71F9DAFFC7CB765C2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/1/FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.mft
Manifest number:          FB
Signing time:             Tue 17 Sep 2024 10:50:00 +0000
Manifest this update:     Tue 17 Sep 2024 10:45:00 +0000
Manifest next update:     Wed 18 Sep 2024 10:50:00 +0000
Files and hashes:         1: FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.crl (hash: dtgsPJKgaYwa7oP/Ybt/otJkPOBlpMNuvf8UnlhHKt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ab:d4:cf:76:95:2f:96:cf:5e:4d:71:f9:da:ff:c7:cb:76:5c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F
        Validity
            Not Before: Sep 17 10:45:00 2024 GMT
            Not After : Sep 24 10:50:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:99:e8:19:b4:a8:5f:53:d3:b3:aa:72:0b:
                    23:52:a7:ef:5a:ff:55:70:60:61:47:8a:31:dc:a1:
                    89:c8:1b:e9:7f:0b:d8:6f:dc:37:f3:0c:dc:f4:3f:
                    f6:d5:f0:c1:c1:fe:92:4f:26:70:07:df:27:58:47:
                    8e:b1:61:b5:3d:77:dc:a0:31:3c:50:74:e3:8f:38:
                    79:6d:ea:af:0f:6c:a0:44:a0:54:7b:df:c2:87:58:
                    be:a6:dd:6d:5c:d1:0c:71:e5:f3:7a:52:ab:38:26:
                    38:ca:7c:7c:c5:56:29:9f:c7:bf:ae:70:61:a3:97:
                    86:6a:f2:d3:7b:8b:d0:23:36:07:93:61:d7:db:cc:
                    60:47:fe:ef:80:da:1d:ed:02:ea:b0:e1:7e:80:22:
                    ae:bd:16:7a:dd:81:ec:59:6f:0f:a0:e7:90:57:e6:
                    0e:09:45:25:f0:30:84:ea:20:f5:a2:3b:e6:4a:93:
                    c2:27:56:cf:a9:15:0d:34:53:0b:7f:5a:42:cf:6b:
                    18:e7:ff:12:66:ba:a0:17:04:6b:1b:a9:dd:3e:27:
                    b2:a6:35:b2:70:a5:98:cd:43:9c:15:d3:59:4c:b2:
                    e7:e6:84:54:41:20:01:95:6a:81:1c:8f:76:25:73:
                    d5:bc:f0:a2:f5:c3:22:4f:a3:2e:52:04:3c:f2:2b:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D4:F5:BC:34:5B:CD:73:EE:63:21:03:4B:8F:DF:5F:D7:B5:D1:2B
            X509v3 Authority Key Identifier:
                keyid:FD:5C:0C:99:42:60:A7:4D:E0:FE:7E:FA:84:DB:66:CA:7F:8E:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/1/FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/1/FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:d2:c4:be:da:b2:ce:46:84:62:bb:22:7e:cd:d2:26:c9:
         1c:1f:e5:7c:3e:e4:0c:b1:56:3b:c7:a0:fd:3d:53:80:5f:a9:
         d9:0d:c0:af:5e:8c:8a:ce:89:04:ed:5b:0d:ed:49:76:06:1c:
         62:36:de:08:06:4f:6d:0e:01:b6:cc:70:2a:e3:5e:f4:a0:e1:
         65:35:6b:9e:ed:fe:4f:91:12:64:5d:8c:62:21:a0:d4:5e:7f:
         07:2c:21:36:62:3a:2d:51:ed:e4:cd:02:90:9a:26:b2:b8:69:
         b3:44:69:ac:ee:8c:c2:bc:55:05:b1:de:aa:57:3d:3c:04:fa:
         5f:bc:51:9e:85:23:9f:c2:53:73:45:d7:5c:85:8a:1f:9f:7c:
         cb:36:cd:a2:cc:2c:4d:fe:26:e5:cd:7f:cf:f2:48:36:d2:a2:
         a1:69:e2:9f:f0:ed:26:b6:82:57:21:17:c9:ac:25:ea:08:77:
         30:a6:66:67:e2:42:3e:a5:3c:ed:52:da:23:ee:72:41:04:0b:
         39:d6:36:df:3c:fe:d7:78:a4:f4:af:93:9b:c7:22:e8:ea:0f:
         47:7c:e5:12:9a:a8:59:a5:9e:73:45:c3:0d:a2:89:3f:6c:aa:
         93:a5:ab:f6:75:08:16:e7:16:c2:1d:f2:88:69:68:26:1e:fd:
         cd:b7:b5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----