Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/FBC1A9C405876592C762DCB2B44CE34D9371EB1C.mft
File:                     FBC1A9C405876592C762DCB2B44CE34D9371EB1C.mft (raw, json)
Hash identifier:          x+Sbqw2A3E64Xqz13MS/WWZX5bmwi0W8iAxZ0aptVns=
Subject key identifier:   E9:FE:8C:46:64:9E:45:93:B2:28:22:42:FF:25:FD:75:F7:C3:E7:86
Authority key identifier: FB:C1:A9:C4:05:87:65:92:C7:62:DC:B2:B4:4C:E3:4D:93:71:EB:1C
Certificate issuer:       /CN=FBC1A9C405876592C762DCB2B44CE34D9371EB1C
Certificate serial:       646E19FC31EC998D44CBBBD8B01507282A236F3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBC1A9C405876592C762DCB2B44CE34D9371EB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/FBC1A9C405876592C762DCB2B44CE34D9371EB1C.mft
Manifest number:          01D4
Signing time:             Fri 02 Dec 2022 10:24:09 +0000
Manifest this update:     Fri 02 Dec 2022 10:19:09 +0000
Manifest next update:     Sat 03 Dec 2022 14:08:09 +0000
Files and hashes:         1: 323830343a376139343a313130303a3a2f34302d3430203d3e20323731333830.roa (hash: VaG4wbyq9Jp25cmBASe/UXgP7LqWjpjE+xg2efug1E0=)
                          2: 3138312e3138392e382e302f32322d3234203d3e20323731333830.roa (hash: RVPKvX3Gqhjm1pu+kTXKOC/vLoEZ//3arIlDG6ryjPo=)
                          3: 323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa (hash: wy1s3UjzHe1HPIvKcZEnEHS9/AJugp7ypi28HP4/wBw=)
                          4: 323830343a376139343a313030303a3a2f34302d3430203d3e20323731333830.roa (hash: KeAEFr4DWBUgJPvkdY0DbqzGTLYn9XE9ye3xkpk4P8g=)
                          5: 323830343a376139343a313230303a3a2f34302d3430203d3e20323731333830.roa (hash: /ZPk+ivke8YGfmAlJulZpBITSF43BYJwMB7f+qOTFEk=)
                          6: 323830343a376139343a3a2f33322d3332203d3e20323731333830.roa (hash: /QSwM+1nsmajXgtpXsloj8L7R9hwbOG0Nx+gDyhD0YU=)
                          7: FBC1A9C405876592C762DCB2B44CE34D9371EB1C.crl (hash: tZTG2CDsNNkBWGuf5HAFFdxczACg+QS7dbkXNH3j1O4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6e:19:fc:31:ec:99:8d:44:cb:bb:d8:b0:15:07:28:2a:23:6f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC1A9C405876592C762DCB2B44CE34D9371EB1C
        Validity
            Not Before: Dec  2 10:19:09 2022 GMT
            Not After : Dec  3 14:08:09 2022 GMT
        Subject: CN=E9FE8C46649E4593B2282242FF25FD75F7C3E786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:39:d3:53:c7:bb:88:42:8c:49:fe:85:b5:
                    ee:36:bd:c1:41:bb:43:c6:b4:28:2b:80:af:aa:9a:
                    ec:e6:48:18:3b:28:0d:db:1c:9b:06:79:7e:5d:bc:
                    34:c4:40:39:ac:cb:05:ac:80:f4:81:5c:08:af:b7:
                    84:39:2a:29:ce:35:ed:3d:03:45:93:13:01:4a:38:
                    29:d5:95:ae:41:c5:1c:6e:af:8b:52:0b:fa:b1:90:
                    90:d4:51:5d:f3:6c:a2:57:66:eb:1b:8d:23:bd:7d:
                    d2:71:2b:ab:1e:01:a2:a0:d6:81:85:c8:5f:7a:12:
                    92:6c:8f:fc:ca:11:2b:d0:6a:9a:ba:e0:cd:51:db:
                    49:63:90:c6:f3:7d:80:2f:29:58:08:60:99:74:ae:
                    95:af:1c:d3:7f:49:ac:4d:06:5c:c3:4d:d9:57:80:
                    72:62:44:94:63:48:fa:6c:67:10:c9:62:94:37:91:
                    89:85:cb:4d:bf:e0:36:3f:40:a4:97:01:7d:e9:5e:
                    c1:36:89:1c:67:3f:98:36:8e:27:9f:de:db:d8:9a:
                    e2:2e:af:32:61:81:3d:3a:0e:24:f1:94:23:33:95:
                    fa:28:f9:bf:1b:de:32:0b:85:e4:ad:ef:d4:dd:c2:
                    12:0c:d7:7a:3b:69:29:a1:04:d4:fd:f2:e1:99:78:
                    4b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:8C:46:64:9E:45:93:B2:28:22:42:FF:25:FD:75:F7:C3:E7:86
            X509v3 Authority Key Identifier:
                keyid:FB:C1:A9:C4:05:87:65:92:C7:62:DC:B2:B4:4C:E3:4D:93:71:EB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/FBC1A9C405876592C762DCB2B44CE34D9371EB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBC1A9C405876592C762DCB2B44CE34D9371EB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/FBC1A9C405876592C762DCB2B44CE34D9371EB1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e8:35:8a:61:e1:11:f8:15:07:fc:fa:06:14:38:bc:e9:4c:
         ec:a5:b8:77:a0:4a:e7:33:7f:48:f8:46:54:13:9c:17:ee:80:
         2c:de:02:7f:08:30:b6:1d:a1:20:4a:a4:7c:87:81:aa:a6:73:
         72:7e:05:ed:85:5b:6a:e3:cb:88:3d:cd:da:92:a3:ec:7c:d3:
         3c:8e:df:0c:88:f4:63:7d:c1:7f:4a:e1:e3:9f:a4:ff:e9:8c:
         59:4a:b6:30:42:d7:7a:4b:67:ac:38:cc:83:58:5e:f1:53:df:
         e4:3a:43:db:ff:11:57:04:e8:1f:bd:9b:db:a7:1c:d9:be:7e:
         ef:b3:03:45:87:3f:e0:d6:4c:f1:15:89:f0:d9:81:17:37:0d:
         32:94:1f:bd:b3:37:08:13:58:2d:b6:9d:2b:ef:b0:a5:17:c9:
         99:17:b8:01:66:9f:38:52:6a:36:69:9f:f2:f9:ea:0c:de:bd:
         79:b7:41:6e:48:3d:06:08:15:c5:af:0a:48:6f:c0:53:cf:c6:
         d6:a8:32:a8:a2:bc:58:f5:3e:b4:4b:5c:d3:12:a1:5c:cf:96:
         c7:eb:24:ed:bf:30:98:05:92:96:91:b6:46:a7:1d:25:4a:7e:
         fe:e7:79:a4:04:47:9a:92:e6:71:58:6d:5c:49:1e:58:4f:52:
         ea:92:c7:ec
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUZG4Z/DHsmY1Ey7vYsBUHKCojbz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJDMUE5QzQwNTg3NjU5MkM3NjJEQ0IyQjQ0Q0UzNEQ5
MzcxRUIxQzAeFw0yMjEyMDIxMDE5MDlaFw0yMjEyMDMxNDA4MDlaMDMxMTAvBgNV
BAMTKEU5RkU4QzQ2NjQ5RTQ1OTNCMjI4MjI0MkZGMjVGRDc1RjdDM0U3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZFDnTU8e7iEKMSf6Fte42vcFB
u0PGtCgrgK+qmuzmSBg7KA3bHJsGeX5dvDTEQDmsywWsgPSBXAivt4Q5KinONe09
A0WTEwFKOCnVla5BxRxur4tSC/qxkJDUUV3zbKJXZusbjSO9fdJxK6seAaKg1oGF
yF96EpJsj/zKESvQapq64M1R20ljkMbzfYAvKVgIYJl0rpWvHNN/SaxNBlzDTdlX
gHJiRJRjSPpsZxDJYpQ3kYmFy02/4DY/QKSXAX3pXsE2iRxnP5g2jief3tvYmuIu
rzJhgT06DiTxlCMzlfoo+b8b3jILheSt79TdwhIM13o7aSmhBNT98uGZeEvpAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU6f6MRmSeRZOyKCJC/yX9dffD54YwHwYDVR0j
BBgwFoAU+8GpxAWHZZLHYtyytEzjTZNx6xwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9wb3ZRbkpSbTRwc3dveFVVQmZkSG91VU01elFNV0dWbTNlSFBKVHNwb1Fy
LzAvRkJDMUE5QzQwNTg3NjU5MkM3NjJEQ0IyQjQ0Q0UzNEQ5MzcxRUIxQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9GQkMxQTlDNDA1ODc2NTkyQzc2
MkRDQjJCNDRDRTM0RDkzNzFFQjFDLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3Bv
dlFuSlJtNHBzd294VVVCZmRIb3VVTTV6UU1XR1ZtM2VIUEpUc3BvUXIvMC9GQkMx
QTlDNDA1ODc2NTkyQzc2MkRDQjJCNDRDRTM0RDkzNzFFQjFDLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
F+g1imHhEfgVB/z6BhQ4vOlM7KW4d6BK5zN/SPhGVBOcF+6ALN4Cfwgwth2hIEqk
fIeBqqZzcn4F7YVbauPLiD3N2pKj7HzTPI7fDIj0Y33Bf0rh45+k/+mMWUq2MELX
ektnrDjMg1he8VPf5DpD2/8RVwToH72b26cc2b5+77MDRYc/4NZM8RWJ8NmBFzcN
MpQfvbM3CBNYLbadK++wpRfJmRe4AWafOFJqNmmf8vnqDN69ebdBbkg9BggVxa8K
SG/AU8/G1qgyqKK8WPU+tEtc0xKhXM+Wx+sk7b8wmAWSlpG2RqcdJUp+/ud5pARH
mpLmcVhtXEkeWE9S6pLH7A==
-----END CERTIFICATE-----