Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft
File:                     9A72AC165710D3D2240950F90FF41932E5992CFB.mft (raw, json)
Hash identifier:          xVTJ0HWMVRAbOljb/PYGY7mGIhoCU+Cc8AtDa5u6mpc=
Subject key identifier:   FD:DC:CB:69:93:66:61:8A:87:2E:73:57:1D:58:53:DA:94:C6:4B:8E
Authority key identifier: 9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
Certificate issuer:       /CN=9A72AC165710D3D2240950F90FF41932E5992CFB
Certificate serial:       2C9076178516B05CED21BF78EBE0418873656360
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft
Manifest number:          01D6
Signing time:             Tue 25 Mar 2025 15:27:59 +0000
Manifest this update:     Tue 25 Mar 2025 15:22:59 +0000
Manifest next update:     Wed 26 Mar 2025 17:22:59 +0000
Files and hashes:         1: 34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa (hash: BXgfdjjdsvSBvPisOb3IBWIHKxwzMbdVqBUzam6rKwc=)
                          2: 34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa (hash: sN+L0fk9hs+s1l4KInwWvKk3onpWnPwGxsglATwUwAc=)
                          3: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: Qt33qV10N44+APpHEkH8aWmJAgjVL+uY0MMsgU65/Wk=)
                          4: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: +47aSCoXRc3WCT32JxTWVorLGc+bztpSS0TeMO+//fU=)
                          5: 9A72AC165710D3D2240950F90FF41932E5992CFB.crl (hash: oOhoeYzhPcEjfftZ+9zgg5SpTAYv9Eve8CmDR/QW5mQ=)
                          6: 34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa (hash: i9dXGEv/H4CxygHxqgtrRo7opp/AEwjEsFzPsea+wck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:90:76:17:85:16:b0:5c:ed:21:bf:78:eb:e0:41:88:73:65:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A72AC165710D3D2240950F90FF41932E5992CFB
        Validity
            Not Before: Mar 25 15:22:59 2025 GMT
            Not After : Mar 26 17:22:59 2025 GMT
        Subject: CN=FDDCCB699366618A872E73571D5853DA94C64B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:75:b8:78:02:f5:f1:d7:d8:d7:04:24:92:
                    da:1a:c7:99:43:26:f1:4b:49:f2:87:d3:36:4d:44:
                    ec:7b:36:9a:0a:cc:86:e7:86:d2:e9:77:bf:f0:02:
                    67:25:e8:11:b6:82:db:67:f6:3f:ad:0f:38:d0:bd:
                    61:46:12:ab:72:12:98:f3:05:68:ed:16:78:d1:bc:
                    da:07:ce:d3:29:05:c9:af:c5:3b:3f:2e:bf:b1:23:
                    ba:7e:3d:71:12:db:e9:83:7e:43:7a:5f:ad:20:8e:
                    68:d1:78:a6:7d:66:d9:fe:ba:e0:82:a5:21:b5:bf:
                    ff:db:55:58:25:71:12:2c:5e:2e:da:6d:9c:2c:12:
                    52:a6:e8:b4:f7:2c:2c:fe:48:bb:b5:53:cb:b3:c1:
                    c5:dc:ea:ed:47:f6:5d:dc:89:50:b4:18:de:88:ba:
                    ff:8a:6a:6f:aa:fe:20:8b:dd:47:39:15:4f:3f:b9:
                    a3:b2:2c:a7:79:58:55:1e:22:57:18:3a:e5:25:7d:
                    b0:39:ec:d2:cc:06:7d:2b:63:9e:0c:da:73:1b:ac:
                    73:46:45:79:6b:96:83:6f:6c:df:5f:b7:b2:e4:09:
                    0e:10:2f:11:c6:b4:2b:21:47:a0:40:fe:c7:92:81:
                    d8:53:03:96:4f:aa:cf:08:21:e6:22:ce:cf:59:6f:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DC:CB:69:93:66:61:8A:87:2E:73:57:1D:58:53:DA:94:C6:4B:8E
            X509v3 Authority Key Identifier:
                keyid:9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:78:86:6f:32:d6:46:a7:06:96:11:77:98:6a:93:23:46:32:
         47:71:58:66:63:7e:e7:62:91:39:f9:ff:2b:58:00:cd:1e:d5:
         0e:a3:b3:0b:80:60:f1:54:e4:dc:42:4a:60:f9:f5:e0:6d:a0:
         90:a4:92:f0:c3:c1:3e:62:22:4c:2b:ed:63:95:37:7f:4e:02:
         14:63:64:68:95:75:0d:5b:e3:f8:ea:71:73:7d:9e:90:0e:4c:
         46:35:a4:c9:fe:ab:57:df:d2:ae:e9:bb:7a:8b:83:e9:29:9b:
         c2:ff:98:6e:a4:83:a3:8a:cf:7a:8a:ff:0d:3f:83:fe:76:7f:
         7c:77:9e:6e:60:31:6d:fd:f6:f3:b2:0e:84:46:fa:6e:a4:e3:
         c0:e7:66:8f:96:d4:79:9e:c6:7f:3d:87:9e:2d:19:72:62:b3:
         c4:c3:7a:19:ac:c6:ed:37:99:4b:cc:2a:65:c7:2f:19:35:d8:
         89:25:00:37:6a:76:4d:12:bc:15:e1:bc:46:80:5f:ae:00:fa:
         90:ba:21:c7:ab:41:37:79:b1:fd:7c:da:7a:e7:42:bd:ed:20:
         c8:52:73:3e:6b:fc:d5:7b:90:df:df:4c:61:5c:fb:66:31:7c:
         ea:3f:a7:21:26:ae:77:a2:a9:e7:21:ee:1e:32:76:7b:31:39:
         c3:ac:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----