Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A7F272B68911A94F576D8ADD2AD8E3504FE33DBA.mft
File:                     A7F272B68911A94F576D8ADD2AD8E3504FE33DBA.mft (raw, json)
Hash identifier:          s1nFg5W+mL4zNijqzLBDFU9iNq/cqQnoF2oH3aWJ7qo=
Subject key identifier:   4F:DE:6E:0E:E7:69:93:7A:2A:FE:68:DF:9E:54:27:04:C9:EB:ED:C2
Authority key identifier: A7:F2:72:B6:89:11:A9:4F:57:6D:8A:DD:2A:D8:E3:50:4F:E3:3D:BA
Certificate issuer:       /CN=A7F272B68911A94F576D8ADD2AD8E3504FE33DBA
Certificate serial:       699766846C2FDFB162BFEF80822D30152659BEDE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7F272B68911A94F576D8ADD2AD8E3504FE33DBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A7F272B68911A94F576D8ADD2AD8E3504FE33DBA.mft
Manifest number:          58
Signing time:             Mon 27 Feb 2023 16:13:47 +0000
Manifest this update:     Mon 27 Feb 2023 16:08:47 +0000
Manifest next update:     Tue 28 Feb 2023 19:13:47 +0000
Files and hashes:         1: 34352e3136372e3133362e302f32322d3234203d3e20323638303637.roa (hash: tssVasG4Pf17cGvuC8X/r79vYA+VKoDZ4u/xpaasc6o=)
                          2: 323830343a353737383a3a2f33322d3334203d3e20323638303637.roa (hash: 2o1PgiDKk4Nm/NnrVlUnNUhvW6glsW4LcliUd5OpCts=)
                          3: A7F272B68911A94F576D8ADD2AD8E3504FE33DBA.crl (hash: hsCOG9TzEUvCB3JZmkSxrkEuF30N1PKS7r7MzsmVeb0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:97:66:84:6c:2f:df:b1:62:bf:ef:80:82:2d:30:15:26:59:be:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7F272B68911A94F576D8ADD2AD8E3504FE33DBA
        Validity
            Not Before: Feb 27 16:08:47 2023 GMT
            Not After : Feb 28 19:13:47 2023 GMT
        Subject: CN=4FDE6E0EE769937A2AFE68DF9E542704C9EBEDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:88:18:2f:c0:64:c4:48:18:8a:d7:1d:21:
                    ac:3f:80:0c:da:87:d2:8e:3b:b6:4b:ce:f8:ff:7c:
                    43:86:f1:c9:b3:49:dc:e4:6a:31:03:08:2d:db:c7:
                    18:d0:95:51:0e:e4:e0:bb:6c:37:d6:96:4c:68:36:
                    6d:b0:8b:c7:43:eb:7d:73:5d:68:0c:1c:40:71:a2:
                    d8:00:cc:93:4e:c2:85:8e:f6:da:d9:d3:2a:71:5e:
                    ca:0b:b9:26:a3:67:33:ec:a6:14:69:21:09:56:4d:
                    2d:68:92:6e:29:32:d9:09:04:c9:0f:ba:61:ba:0d:
                    89:b2:1e:ee:aa:fe:52:ca:1b:c1:d7:c7:09:a3:f9:
                    d0:ac:66:03:bd:06:ed:62:a8:61:09:81:1d:b1:48:
                    60:31:18:d1:8c:94:2d:cc:4d:89:c9:a8:95:30:a5:
                    cf:8e:d3:07:08:65:8e:c9:fa:16:db:57:74:40:ed:
                    c2:67:24:67:59:40:cf:a3:df:69:ff:fd:af:8a:b2:
                    86:13:17:b7:e6:f2:c8:ce:f9:d4:99:65:68:d0:1f:
                    a9:f6:91:03:78:57:40:b6:8c:39:8a:11:e5:75:85:
                    7c:10:2c:a6:b6:f3:64:a8:5b:d0:e7:f7:52:45:89:
                    85:ce:5c:20:c9:c1:7f:ed:d9:4b:2f:0e:01:2f:d3:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DE:6E:0E:E7:69:93:7A:2A:FE:68:DF:9E:54:27:04:C9:EB:ED:C2
            X509v3 Authority Key Identifier:
                keyid:A7:F2:72:B6:89:11:A9:4F:57:6D:8A:DD:2A:D8:E3:50:4F:E3:3D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A7F272B68911A94F576D8ADD2AD8E3504FE33DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7F272B68911A94F576D8ADD2AD8E3504FE33DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A7F272B68911A94F576D8ADD2AD8E3504FE33DBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:6c:c9:d3:75:33:6b:ae:1d:8f:5f:28:f8:c4:c9:aa:4a:
         5b:80:f5:d8:df:ca:fe:24:83:93:35:b6:b3:df:23:22:e6:73:
         da:15:0f:e1:00:a8:1f:8b:4b:a0:60:10:1f:52:76:5e:4b:21:
         29:db:62:23:70:b1:a7:6e:81:39:7b:8b:d1:83:fc:20:6c:8a:
         c8:1f:63:2f:24:05:7b:33:66:6c:ea:91:26:70:4b:3a:51:53:
         1f:0d:a1:d0:94:d5:c2:a0:2e:b7:3b:ba:d4:92:eb:e8:65:ec:
         6a:6c:f6:68:de:74:9f:db:2e:2d:82:21:24:3f:79:e6:9b:56:
         91:38:87:ff:c1:f5:cf:b9:29:16:18:3f:f5:2a:41:42:2f:2e:
         5a:87:4e:9c:1a:b6:ce:00:3b:9a:16:5f:69:11:fd:34:7e:c9:
         b9:15:b9:27:cd:06:62:47:d3:cf:04:d4:8d:22:d0:67:9c:3f:
         64:bd:cb:2b:2d:81:6f:4e:12:1c:70:48:36:00:38:4e:0b:84:
         e7:6c:57:93:c8:27:a9:51:29:f7:7c:a3:e1:2d:33:21:af:7d:
         00:cd:25:40:ae:01:87:11:be:fe:6a:45:d5:15:96:86:7b:b5:
         e1:c8:99:52:63:17:d4:9d:93:28:b5:56:15:24:78:99:83:1d:
         9b:85:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----