Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7.mft
File:                     7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7.mft (raw, json)
Hash identifier:          tuVpUJdq32b7QOCVyDW5657UoxMGumphRemsmHGU0BQ=
Subject key identifier:   93:4A:DA:F0:C5:7C:2C:57:76:AF:70:75:65:27:08:E7:2D:C6:7E:23
Authority key identifier: 7E:58:AD:3B:C1:8F:17:A3:66:EA:05:A6:0A:B9:C2:A9:F7:AB:8A:A7
Certificate issuer:       /CN=7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7
Certificate serial:       6F12591BDF16DB54A5156F522D29321622C398FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7.mft
Manifest number:          0A
Signing time:             Wed 11 Jan 2023 15:22:53 +0000
Manifest this update:     Wed 11 Jan 2023 15:17:53 +0000
Manifest next update:     Thu 12 Jan 2023 16:37:53 +0000
Files and hashes:         1: 323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa (hash: MgE+6zkxze70MVC5FU0tPhdV5yLcSK1fykbrpVG+6Z4=)
                          2: 3137302e3234352e3133342e302f32332d3234203d3e203532373536.roa (hash: oqMvgC0hwnYpkzn0xCswgeHBNrDxYjY1GFZgs9c/PAo=)
                          3: 3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa (hash: aLYrKgWzLnCZGU4U3Wvxn3B5Z5efTQW8YPxkiKBC4Vk=)
                          4: 7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7.crl (hash: vgqNY16JstUq9+7lYoeq8gENCG1B1KrHrWqZs3PzAcM=)
                          5: 3137372e31312e3235322e302f32342d3234203d3e203532373536.roa (hash: gQ5c43bzndRC/C5oj6EqKDq4RBnVP3A3VCoUtEr9eXQ=)
                          6: 3137302e3234352e3133352e302f32342d3234203d3e203532373536.roa (hash: hbR0EC0zCpbJ4oqUeOyM2F+mK9q3pvhBsQ+VbYCSVBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:12:59:1b:df:16:db:54:a5:15:6f:52:2d:29:32:16:22:c3:98:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7
        Validity
            Not Before: Jan 11 15:17:53 2023 GMT
            Not After : Jan 12 16:37:53 2023 GMT
        Subject: CN=934ADAF0C57C2C5776AF7075652708E72DC67E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:23:8e:72:e4:f7:88:18:11:a0:d0:88:fb:
                    31:6f:4d:5d:9a:b8:a3:83:45:c7:7e:af:06:7a:db:
                    30:37:29:07:81:34:21:a0:c2:40:ac:ac:81:c9:c2:
                    25:c8:cd:f8:25:bf:65:29:bd:33:04:43:69:1d:28:
                    b7:f2:15:eb:35:8e:79:29:65:c1:0c:66:4c:d2:f2:
                    46:d6:5e:fa:05:3f:26:5d:92:5d:0e:65:25:24:be:
                    bd:45:ab:49:ae:59:93:56:67:7c:83:d8:37:68:ec:
                    1b:de:6d:ab:dd:be:51:0b:23:2d:8b:78:ef:56:0d:
                    e7:3e:d2:b0:59:05:bf:d5:8b:ba:c5:92:dc:cc:99:
                    3d:ef:a4:f3:8f:33:50:d1:83:01:5b:b8:e4:5e:d7:
                    66:a1:b7:1c:b6:d2:fd:0e:0f:8a:00:cb:f4:fe:68:
                    f8:2e:e7:d6:5d:68:6b:1d:ec:ad:d0:20:ce:b5:a7:
                    6a:ac:5e:33:9b:d2:e8:7f:94:ee:48:7a:fd:79:e7:
                    a3:25:f3:9a:99:0a:16:67:a3:6b:5b:1b:61:e7:d9:
                    12:cf:a1:9c:0a:70:99:52:e7:6d:11:56:e6:29:a1:
                    1d:56:a6:4c:4a:19:04:97:e5:e6:92:ae:52:4d:c2:
                    35:ba:d5:9c:82:8d:f6:c8:6f:64:19:ae:7a:7c:40:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4A:DA:F0:C5:7C:2C:57:76:AF:70:75:65:27:08:E7:2D:C6:7E:23
            X509v3 Authority Key Identifier:
                keyid:7E:58:AD:3B:C1:8F:17:A3:66:EA:05:A6:0A:B9:C2:A9:F7:AB:8A:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/7E58AD3BC18F17A366EA05A60AB9C2A9F7AB8AA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:92:7e:7f:ba:d4:59:50:9b:bd:10:70:26:08:0a:db:53:71:
         3d:4c:db:d0:c2:b4:46:14:e8:78:52:de:26:59:d0:95:a0:ac:
         91:1c:00:53:8a:2d:0f:78:17:76:08:68:ca:f2:32:6f:67:ba:
         e8:46:22:6e:74:d0:0b:8c:22:1a:9a:5d:a0:13:62:0f:e3:aa:
         75:f0:a1:1a:0d:b0:c5:2e:12:35:41:7d:70:bd:aa:d5:59:08:
         24:16:cb:e7:83:a2:db:03:c2:08:d6:1e:e7:23:8c:cc:13:aa:
         ce:4a:93:43:ff:64:10:c9:3f:2a:c8:b3:2c:0e:13:68:6c:ab:
         ab:77:e8:d5:86:10:21:8e:43:54:4c:74:3a:0e:78:6b:6f:7f:
         12:1c:0a:ac:34:5d:9d:e1:5f:04:c6:d2:c7:bf:42:f5:81:11:
         df:7f:c5:67:24:5a:ca:99:49:3a:11:c4:a0:9b:87:4e:a5:03:
         b8:18:43:da:be:89:0a:a2:31:f9:88:c0:8e:0a:a0:86:3a:19:
         73:28:ca:ab:de:a4:b7:59:bc:63:a9:83:b7:42:71:e8:33:2f:
         f5:af:7f:a2:d1:ff:9c:f1:d8:6c:0b:a0:a5:79:8e:8c:d9:2d:
         bc:fa:fe:99:68:3d:0e:71:d2:ac:bf:18:fe:af:ca:20:bc:e8:
         b0:f5:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----