Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7iFqeRMzPefBahXfWnqko5N9Gr5LELXmvi4LTRb2MyhT/0/D270D6EAC728619AE752DA97142E34A504E817AD.mft
File:                     D270D6EAC728619AE752DA97142E34A504E817AD.mft (raw, json)
Hash identifier:          JxAEWIxhkMkB6t552+oT8OAcgV4waaNr1qYbLcwrK7g=
Subject key identifier:   E5:45:60:AD:E0:29:E0:79:3C:19:8B:7B:C5:89:1C:53:31:78:70:C7
Authority key identifier: D2:70:D6:EA:C7:28:61:9A:E7:52:DA:97:14:2E:34:A5:04:E8:17:AD
Certificate issuer:       /CN=D270D6EAC728619AE752DA97142E34A504E817AD
Certificate serial:       7B5819004B7C9D578D4A1B14FFD86EFCE5E743EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D270D6EAC728619AE752DA97142E34A504E817AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iFqeRMzPefBahXfWnqko5N9Gr5LELXmvi4LTRb2MyhT/0/D270D6EAC728619AE752DA97142E34A504E817AD.mft
Manifest number:          0174
Signing time:             Fri 14 Jul 2023 05:14:43 +0000
Manifest this update:     Fri 14 Jul 2023 05:09:43 +0000
Manifest next update:     Sat 15 Jul 2023 06:16:43 +0000
Files and hashes:         1: 34352e3137302e38302e302f32322d3234203d3e20323638373139.roa (hash: KbqAI39/JNquNMxIHwJ5dJaGLqx46ItB8J2PifCa2N0=)
                          2: D270D6EAC728619AE752DA97142E34A504E817AD.crl (hash: gup9ttgNxfE9/wNux+dwS+Pu+0Y4Zc6SC0QWi6Sl0G8=)
                          3: 323830343a353962303a3a2f33322d3438203d3e20323638373139.roa (hash: kznCb6TlmTZlxD/AabgHD6knrpjo2hL/mhy5Vh3zm3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:58:19:00:4b:7c:9d:57:8d:4a:1b:14:ff:d8:6e:fc:e5:e7:43:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D270D6EAC728619AE752DA97142E34A504E817AD
        Validity
            Not Before: Jul 14 05:09:43 2023 GMT
            Not After : Jul 15 06:16:43 2023 GMT
        Subject: CN=E54560ADE029E0793C198B7BC5891C53317870C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:4b:62:6b:dc:48:84:56:0c:c5:30:04:0e:
                    14:c9:9b:9f:b9:b5:a0:a8:41:7a:b6:88:ca:62:ab:
                    7a:24:43:5b:54:24:24:14:f2:e1:e8:03:07:6e:c1:
                    81:f9:ea:52:cf:15:01:e0:11:11:90:18:44:56:d3:
                    1b:17:03:31:ec:0a:d0:e5:1f:2f:ed:0e:d4:4b:a5:
                    a2:64:e4:7f:e6:3e:34:f1:5f:81:3e:cb:b3:f8:9a:
                    e7:8e:f0:97:9f:59:f4:79:ed:0c:30:88:11:e9:01:
                    52:56:53:b3:a4:88:b0:e4:51:c6:b8:0c:75:9f:6d:
                    80:c7:70:e6:66:85:5a:44:8c:5d:36:64:b3:9d:3f:
                    fe:ef:7f:aa:cb:c8:9f:9c:9c:4a:66:22:e5:bf:b6:
                    ec:96:1e:ba:53:6a:a0:9f:05:e4:f2:35:7d:1a:1e:
                    12:2c:37:77:24:93:e4:76:b1:69:1f:a4:a3:78:23:
                    ed:d4:32:ee:67:52:db:36:53:79:bf:13:7c:ba:42:
                    5a:20:4a:4a:02:d0:61:26:98:d1:ec:20:76:23:2e:
                    d2:9e:51:50:52:25:b7:30:44:79:f6:2a:b9:c2:bc:
                    ee:00:a9:9a:a4:a3:9c:dd:18:c6:88:1f:ca:09:32:
                    c2:8a:2f:fe:c0:83:f3:7a:62:48:b3:18:05:a8:27:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:45:60:AD:E0:29:E0:79:3C:19:8B:7B:C5:89:1C:53:31:78:70:C7
            X509v3 Authority Key Identifier:
                keyid:D2:70:D6:EA:C7:28:61:9A:E7:52:DA:97:14:2E:34:A5:04:E8:17:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iFqeRMzPefBahXfWnqko5N9Gr5LELXmvi4LTRb2MyhT/0/D270D6EAC728619AE752DA97142E34A504E817AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D270D6EAC728619AE752DA97142E34A504E817AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iFqeRMzPefBahXfWnqko5N9Gr5LELXmvi4LTRb2MyhT/0/D270D6EAC728619AE752DA97142E34A504E817AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:30:7f:be:7d:8c:77:28:31:42:ab:5b:24:9d:dc:4c:f4:81:
         e7:7a:f7:2a:a2:b1:47:4e:71:fe:88:ba:ac:3e:01:a4:74:e0:
         bb:c2:c4:a0:29:3f:60:11:70:62:e5:74:94:79:ec:e9:45:76:
         08:30:f3:58:5d:8b:39:5c:d8:24:1a:d5:59:2c:0b:8b:12:16:
         f2:93:60:59:cc:43:d6:a4:c2:ed:8d:80:64:60:6a:c0:ff:67:
         e2:56:5f:e0:6b:93:d4:80:b1:8b:c9:98:a1:49:09:fa:e5:1d:
         e1:67:0f:93:6b:26:41:bf:6c:bd:ea:a6:58:60:0e:21:e4:ac:
         8a:80:23:de:d0:a6:af:fc:a8:06:69:a8:19:31:c8:18:f0:46:
         eb:54:4a:9e:37:f4:0c:ae:05:89:a4:73:61:3f:50:de:db:22:
         f7:88:61:67:58:2f:1a:55:31:94:8d:7e:6e:22:5f:5f:98:08:
         ca:72:47:68:fa:c3:db:e7:4f:c5:93:35:84:e5:dd:ed:c6:52:
         65:74:d2:de:97:5e:8d:11:54:9f:98:ac:2e:f3:d3:15:05:79:
         18:ce:36:f3:f2:4a:c1:97:3b:eb:d1:ad:dd:da:02:2c:3b:ce:
         81:77:02:a1:bd:83:52:3e:e0:e0:8e:3e:e4:f3:42:1f:0c:92:
         a1:76:34:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----