Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.mft
File:                     FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.mft (raw, json)
Hash identifier:          A93MjPK4SbPnmm4lD+l9qJkstwcorVUP1hFPJODHDJQ=
Subject key identifier:   24:DD:C5:E5:B0:1B:F0:21:CF:A8:31:1D:C7:87:44:8A:25:E2:C0:D4
Authority key identifier: FD:A2:2E:3A:1C:94:7E:B3:47:3F:FE:FF:6E:B3:32:43:F0:E4:A8:70
Certificate issuer:       /CN=FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870
Certificate serial:       47173815B0CB86E3B0C8318616E6CE3178E9C731
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.mft
Manifest number:          65
Signing time:             Sun 23 Mar 2025 21:21:30 +0000
Manifest this update:     Sun 23 Mar 2025 21:16:30 +0000
Manifest next update:     Mon 24 Mar 2025 21:40:30 +0000
Files and hashes:         1: FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.crl (hash: RvcIO7dCRDqJywAhBX+RMNha+0zAbsiTvWoCT6ECFiQ=)
                          2: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: VDe8w8cTHGo7HoyW6esUM7Ox15HqicIThAIj/LfiZuY=)
                          3: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: JONQa+28eBLUQjhGoAb61CLJ5PJqB5C/ZTwkKG7zPJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:17:38:15:b0:cb:86:e3:b0:c8:31:86:16:e6:ce:31:78:e9:c7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870
        Validity
            Not Before: Mar 23 21:16:30 2025 GMT
            Not After : Mar 24 21:40:30 2025 GMT
        Subject: CN=24DDC5E5B01BF021CFA8311DC787448A25E2C0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:38:54:de:18:4b:71:5f:57:2c:95:64:48:
                    21:cf:f4:13:27:65:fd:7d:71:e9:d9:48:70:f9:20:
                    09:d5:75:c4:72:f7:93:93:67:88:b0:17:88:0c:07:
                    fc:14:1f:60:2f:59:c8:52:b9:ab:4b:34:44:79:ca:
                    dc:37:c3:b5:8a:a6:4b:d3:d7:94:fd:1d:5f:c0:f9:
                    2b:e3:6a:95:94:fd:bf:2a:ac:2b:8f:5c:1a:75:2f:
                    24:76:50:ba:04:03:b6:40:a3:85:27:9b:57:9d:17:
                    38:69:eb:a3:39:36:6d:9f:43:b5:29:3f:9a:96:60:
                    e2:b2:2e:1c:09:f9:93:fb:87:97:e1:d7:6c:33:2e:
                    2a:91:fb:16:a8:47:18:ef:7c:b1:b2:e8:9c:30:8c:
                    61:a6:da:f5:5c:29:b6:8c:b5:07:5f:fa:5e:1f:b1:
                    f5:d3:66:91:d7:af:6f:73:af:59:cd:a4:dd:ed:06:
                    aa:f1:12:e9:57:79:37:58:5d:7d:14:a8:dc:8b:68:
                    f2:65:66:82:c8:96:52:9c:d7:6e:1c:9b:21:69:17:
                    da:f4:a7:f7:ea:59:2d:32:3a:76:c0:4f:75:3b:b9:
                    7b:42:1e:77:2c:a5:fa:f8:ec:92:32:14:9f:13:59:
                    96:a1:19:ab:a2:cb:82:86:8c:31:9b:e2:3d:8f:73:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DD:C5:E5:B0:1B:F0:21:CF:A8:31:1D:C7:87:44:8A:25:E2:C0:D4
            X509v3 Authority Key Identifier:
                keyid:FD:A2:2E:3A:1C:94:7E:B3:47:3F:FE:FF:6E:B3:32:43:F0:E4:A8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:23:a4:c5:22:2e:67:b7:bf:7d:0f:54:fc:28:dc:9f:56:a0:
         d8:a4:d7:95:58:56:60:b8:0f:30:5e:21:30:75:20:f1:c7:0a:
         a4:87:b4:67:00:f6:db:a9:48:f3:2e:9c:56:e1:c4:af:0d:c0:
         78:c9:54:62:4b:00:46:06:85:ac:d6:06:20:1a:56:0f:f4:cd:
         e4:48:2a:1b:7e:5d:db:67:48:e2:6b:ae:f6:6a:fd:76:e1:10:
         b4:88:98:3a:4d:69:b2:9e:cf:c0:eb:dd:96:a2:df:13:8a:96:
         2a:e3:ba:d4:d6:8c:8f:13:ee:f2:0d:a7:f7:eb:a7:bb:75:24:
         37:09:72:28:04:0b:67:6e:9b:0c:f2:8e:1b:ee:95:de:60:a1:
         69:4b:14:e7:0e:16:06:0e:bd:29:d3:1e:e9:81:0b:5c:b0:7a:
         6f:f0:8a:db:d4:cc:84:8c:56:b1:7c:5a:1f:93:62:81:17:1f:
         ac:18:9c:5e:61:c6:53:ea:a8:29:2a:5b:be:d1:cc:1d:7a:fb:
         6b:bc:9c:00:55:b0:bd:86:f9:c1:76:c9:a5:9c:0a:10:46:6d:
         b1:0d:b0:ff:fc:39:88:15:16:09:14:a8:d1:db:ab:d9:2b:1b:
         92:a4:0b:89:83:65:7f:52:fe:96:ae:4d:a6:26:08:a1:a1:63:
         54:c5:d5:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURxc4FbDLhuOwyDGGFubOMXjpxzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRBMjJFM0ExQzk0N0VCMzQ3M0ZGRUZGNkVCMzMyNDNG
MEU0QTg3MDAeFw0yNTAzMjMyMTE2MzBaFw0yNTAzMjQyMTQwMzBaMDMxMTAvBgNV
BAMTKDI0RERDNUU1QjAxQkYwMjFDRkE4MzExREM3ODc0NDhBMjVFMkMwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3DhU3hhLcV9XLJVkSCHP9BMn
Zf19cenZSHD5IAnVdcRy95OTZ4iwF4gMB/wUH2AvWchSuatLNER5ytw3w7WKpkvT
15T9HV/A+SvjapWU/b8qrCuPXBp1LyR2ULoEA7ZAo4Unm1edFzhp66M5Nm2fQ7Up
P5qWYOKyLhwJ+ZP7h5fh12wzLiqR+xaoRxjvfLGy6JwwjGGm2vVcKbaMtQdf+l4f
sfXTZpHXr29zr1nNpN3tBqrxEulXeTdYXX0UqNyLaPJlZoLIllKc124cmyFpF9r0
p/fqWS0yOnbAT3U7uXtCHncspfr47JIyFJ8TWZahGauiy4KGjDGb4j2Pc3TNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJN3F5bAb8CHPqDEdx4dEiiXiwNQwHwYDVR0j
BBgwFoAU/aIuOhyUfrNHP/7/brMyQ/DkqHAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlD
TFkvMC9GREEyMkUzQTFDOTQ3RUIzNDczRkZFRkY2RUIzMzI0M0YwRTRBODcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEQTIyRTNBMUM5NDdFQjM0
NzNGRkVGRjZFQjMzMjQzRjBFNEE4NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlDTFkvMC9G
REEyMkUzQTFDOTQ3RUIzNDczRkZFRkY2RUIzMzI0M0YwRTRBODcwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMSOkxSIuZ7e/fQ9U/Cjcn1ag2KTXlVhWYLgPMF4hMHUg8ccKpIe0ZwD226lI
8y6cVuHErw3AeMlUYksARgaFrNYGIBpWD/TN5EgqG35d22dI4muu9mr9duEQtIiY
Ok1psp7PwOvdlqLfE4qWKuO61NaMjxPu8g2n9+unu3UkNwlyKAQLZ26bDPKOG+6V
3mChaUsU5w4WBg69KdMe6YELXLB6b/CK29TMhIxWsXxaH5NigRcfrBicXmHGU+qo
KSpbvtHMHXr7a7ycAFWwvYb5wXbJpZwKEEZtsQ2w//w5iBUWCRSo0dur2SsbkqQL
iYNlf1L+lq5NpiYIoaFjVMXVqw==
-----END CERTIFICATE-----