Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/7A5B191EC64C068EDEFF8775F9943E05EC3BC29F.mft
File:                     7A5B191EC64C068EDEFF8775F9943E05EC3BC29F.mft (raw, json)
Hash identifier:          Umzm1PU5O8lQQsZOG2BK2bx4aa1GNuUqpgGip05vsUg=
Subject key identifier:   78:88:D5:EB:22:A1:F7:F8:14:F1:B3:DD:4F:5E:93:88:76:40:9C:57
Authority key identifier: 7A:5B:19:1E:C6:4C:06:8E:DE:FF:87:75:F9:94:3E:05:EC:3B:C2:9F
Certificate issuer:       /CN=7A5B191EC64C068EDEFF8775F9943E05EC3BC29F
Certificate serial:       1D0047E71E7F9DDD2DB7EF21192F5EEE3EE106AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A5B191EC64C068EDEFF8775F9943E05EC3BC29F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/7A5B191EC64C068EDEFF8775F9943E05EC3BC29F.mft
Manifest number:          02
Signing time:             Sat 20 Apr 2024 01:55:08 +0000
Manifest this update:     Sat 20 Apr 2024 01:50:08 +0000
Manifest next update:     Sun 21 Apr 2024 03:25:08 +0000
Files and hashes:         1: 3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa (hash: TzCEPDKrjgUeN5PQ82jSjPM+4K1rovkjJIgIwwS/X/w=)
                          2: 323830343a313034383a3a2f33322d3438203d3e20323633363238.roa (hash: CRzXWRvquVLxCht+ifI+COEyR+55dJ63I2JZfVo7pSg=)
                          3: 7A5B191EC64C068EDEFF8775F9943E05EC3BC29F.crl (hash: c35gKFkqWenOQy0ch2x9Jwc4DABDNqGVX/M3j+xctSo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:00:47:e7:1e:7f:9d:dd:2d:b7:ef:21:19:2f:5e:ee:3e:e1:06:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A5B191EC64C068EDEFF8775F9943E05EC3BC29F
        Validity
            Not Before: Apr 20 01:50:08 2024 GMT
            Not After : Apr 21 03:25:08 2024 GMT
        Subject: CN=7888D5EB22A1F7F814F1B3DD4F5E938876409C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:09:b0:8a:64:df:42:e2:4d:b7:e2:15:d7:
                    e4:1a:28:50:7a:09:9e:e5:af:98:a6:69:37:02:68:
                    c7:b4:3a:e7:f6:52:b2:97:5f:b0:4f:25:52:e3:fe:
                    61:93:61:31:84:0f:ea:0b:67:fe:20:74:e3:5d:d8:
                    e0:36:a3:42:0d:9c:1f:5d:d8:21:df:fd:b3:0d:3f:
                    17:17:5d:82:89:e6:29:ac:db:e3:67:3a:2c:28:4d:
                    12:e0:8a:52:69:fe:d2:8e:77:48:9f:f2:61:f3:9c:
                    e7:36:5c:28:6d:c7:0b:d4:40:f4:e5:f9:3b:91:ce:
                    6a:25:4d:19:8e:07:a9:44:86:ab:c4:b5:43:2c:1b:
                    0c:92:c1:40:45:89:18:c8:c7:73:8c:2c:c6:06:df:
                    7b:7c:c5:91:b8:3d:1e:af:d3:ad:15:d0:f7:e9:16:
                    ca:d5:eb:d0:75:71:18:b8:e8:00:cd:14:ef:be:ab:
                    d7:f4:5c:9b:78:ca:a9:1f:b7:e5:8c:2d:f0:d6:5f:
                    6d:66:85:00:f0:ea:50:2c:bc:52:c6:b4:48:6c:e6:
                    5e:b7:c0:75:9e:10:b2:84:02:44:3f:51:b1:47:e9:
                    5b:8c:ef:d0:21:af:d0:a0:61:7d:36:06:b2:d6:a8:
                    14:e1:65:08:45:b9:44:27:57:d5:6b:bf:1f:2b:2e:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:88:D5:EB:22:A1:F7:F8:14:F1:B3:DD:4F:5E:93:88:76:40:9C:57
            X509v3 Authority Key Identifier:
                keyid:7A:5B:19:1E:C6:4C:06:8E:DE:FF:87:75:F9:94:3E:05:EC:3B:C2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/7A5B191EC64C068EDEFF8775F9943E05EC3BC29F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A5B191EC64C068EDEFF8775F9943E05EC3BC29F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/7A5B191EC64C068EDEFF8775F9943E05EC3BC29F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:92:9d:ba:e3:5d:cd:a2:b2:61:57:ce:52:8c:40:b4:a4:bc:
         f3:a8:9e:28:b6:40:31:80:57:9a:f8:1f:20:46:64:7b:37:91:
         1a:70:82:8e:b0:0d:3a:11:a2:e5:97:aa:c4:4d:33:de:be:ae:
         ec:f3:bf:09:33:84:34:29:02:25:a0:9c:c4:df:df:e6:a6:8d:
         04:6d:82:01:44:69:a2:b7:84:e1:ca:88:92:30:60:5d:bf:59:
         a5:10:93:f0:36:36:ec:89:1d:bd:db:b8:86:05:0f:a4:51:4b:
         e8:c0:03:ac:a2:45:79:63:fd:e1:35:06:5c:d8:5e:03:ff:d0:
         20:09:af:1e:75:c5:3c:03:5d:6a:cc:e7:b2:9c:93:df:a1:15:
         95:c4:b4:c1:9b:a2:b0:c0:13:b7:d8:a3:b1:8b:e0:6f:fe:28:
         ec:7a:b3:ed:8b:d6:75:d2:b9:a6:8f:ab:a4:3a:31:3d:b1:81:
         23:9c:a4:dc:85:34:76:6b:0e:a8:df:c5:83:14:19:9f:dc:b9:
         27:25:f5:d9:a7:95:65:e0:4a:94:76:1a:c0:93:ff:e2:cd:df:
         b7:5a:81:e9:60:f0:a1:f6:4c:91:c0:13:0c:70:fa:68:86:d4:
         c6:a1:30:6e:46:11:60:98:23:c7:13:84:17:1e:1d:9b:e0:50:
         ac:9d:d0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----