Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D.mft
File:                     7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D.mft (raw, json)
Hash identifier:          Vr4UgeVsrXrMcl2u7IeOo3WaJMFSTzAj2qpDz8qbFYM=
Subject key identifier:   68:0F:EF:F2:85:2E:ED:89:9D:CC:BF:90:1D:03:8F:61:53:C8:5F:14
Authority key identifier: 7E:26:B1:B8:F4:C6:E5:D8:8E:BD:12:04:9B:FC:18:A6:97:2D:85:2D
Certificate issuer:       /CN=7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D
Certificate serial:       2F5848FBC3B1A8630CFF2D1998914C2879F6A54B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D.mft
Manifest number:          19
Signing time:             Mon 23 Jan 2023 22:28:41 +0000
Manifest this update:     Mon 23 Jan 2023 22:23:41 +0000
Manifest next update:     Tue 24 Jan 2023 23:03:41 +0000
Files and hashes:         1: 7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D.crl (hash: om50l7pHTVJj/9m/oguri4bPFgvdZk7W16Pspr3rw8g=)
                          2: 34352e3233322e3232342e302f32322d3332203d3e20323637323738.roa (hash: mXSIF3wksbjOSQKwYs1f3+DrJrFk95D9LYqmRConI8o=)
                          3: 323830343a346230343a3a2f33322d313238203d3e20323637323738.roa (hash: phdmhc+o1Nfqm7yiwNCyydnxwdPwJkmhU60dZJUiCms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:58:48:fb:c3:b1:a8:63:0c:ff:2d:19:98:91:4c:28:79:f6:a5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D
        Validity
            Not Before: Jan 23 22:23:41 2023 GMT
            Not After : Jan 24 23:03:41 2023 GMT
        Subject: CN=680FEFF2852EED899DCCBF901D038F6153C85F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:7d:73:08:4f:73:43:64:d4:4d:47:7e:bd:
                    b5:df:63:e9:0d:72:1a:89:f2:e7:d6:84:1c:b7:ea:
                    f3:97:a6:88:c2:9d:b4:fa:62:79:00:c3:8f:7f:73:
                    e2:c1:52:05:b2:7f:a2:62:ce:45:93:09:aa:b7:c3:
                    30:51:6b:17:2a:d5:35:69:63:60:23:25:8e:8d:5c:
                    63:c3:bc:42:0f:f9:6d:1f:0a:26:76:bf:39:4c:e6:
                    ff:d2:d0:e2:b6:7f:b9:17:db:e9:f5:28:a7:85:34:
                    c3:21:18:7b:26:38:7f:91:b9:af:45:8f:9e:d0:7c:
                    df:7c:cb:2b:c4:33:7f:12:14:82:c1:7b:1f:a8:01:
                    cc:10:70:ed:d2:35:8a:f3:2a:48:fb:3d:79:42:c4:
                    17:48:7b:1e:3a:f5:a7:c5:e2:ce:13:1e:77:a9:6c:
                    84:20:3d:d7:ad:67:e5:99:3b:21:a5:b4:44:00:73:
                    7e:15:e7:22:d4:24:9d:2c:c2:de:46:ad:64:1e:5f:
                    ba:57:3a:28:39:4e:4c:ca:b5:51:c0:03:2e:d1:77:
                    58:b1:89:ca:1e:3c:95:2c:a1:88:d3:2b:e7:4b:d0:
                    c7:bb:42:03:87:c2:f4:fb:a9:c5:02:50:df:86:95:
                    ed:a0:64:9f:ab:fa:aa:b4:5b:1d:66:18:fc:4b:fd:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0F:EF:F2:85:2E:ED:89:9D:CC:BF:90:1D:03:8F:61:53:C8:5F:14
            X509v3 Authority Key Identifier:
                keyid:7E:26:B1:B8:F4:C6:E5:D8:8E:BD:12:04:9B:FC:18:A6:97:2D:85:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/7E26B1B8F4C6E5D88EBD12049BFC18A6972D852D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:53:4e:c1:8f:8c:1e:07:ed:12:4b:1b:df:79:85:b1:cb:64:
         ef:8e:fc:a7:18:b1:c4:af:d8:8f:17:df:e8:92:d6:1b:bf:57:
         01:03:a5:70:1b:42:49:6e:fc:3d:e1:5b:40:9e:d8:42:1e:a3:
         04:5a:cc:a1:00:42:3c:3d:bc:f3:46:75:17:3c:5e:46:62:83:
         27:d9:d9:66:8c:60:a4:89:c1:d3:45:18:55:ac:7c:c5:d9:9a:
         4d:56:30:83:14:74:dd:fe:a0:0e:fc:b1:59:d8:a9:e4:cc:58:
         00:45:8f:b7:c0:fd:20:08:4d:f7:40:f4:a6:16:00:ca:88:f8:
         9f:1e:bc:1c:5d:22:e1:0d:95:0f:21:80:7b:a6:45:2d:d6:cb:
         11:af:63:fc:a2:87:af:9f:65:b8:be:23:8a:2b:91:bc:d6:24:
         37:78:48:20:5f:ae:92:43:d0:de:6d:09:2f:09:ab:2e:6a:c2:
         d3:c1:33:64:20:c8:f1:e4:d2:db:94:ac:0a:41:fe:dc:10:aa:
         b5:94:c6:2c:e3:d5:ec:0a:85:50:36:a3:1f:37:03:51:40:5b:
         e3:5d:e1:1c:67:ec:e5:08:93:30:9c:93:0f:d7:0b:fa:cb:fd:
         92:fb:98:a9:a6:29:1c:0f:a5:08:71:c0:73:35:ff:12:ba:b6:
         c2:9e:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----