Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.mft
File:                     7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.mft (raw, json)
Hash identifier:          1zy2xsqzWG0zsxMNeq0NsvN0I0HeEilJEuPrSjGTddk=
Subject key identifier:   B2:C7:A5:B0:4B:68:9F:9C:56:09:E9:8E:20:D6:33:74:89:E8:84:EC
Authority key identifier: 7D:E5:44:0D:73:B8:90:D8:BF:20:B5:10:E2:FD:C7:EA:01:52:B9:7A
Certificate issuer:       /CN=7DE5440D73B890D8BF20B510E2FDC7EA0152B97A
Certificate serial:       7A658CFD7326932B1C190511829B8DBE65F18465
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.mft
Manifest number:          8A
Signing time:             Wed 17 Jan 2024 18:25:02 +0000
Manifest this update:     Wed 17 Jan 2024 18:20:02 +0000
Manifest next update:     Thu 18 Jan 2024 20:15:02 +0000
Files and hashes:         1: 323830343a383832343a3a2f33322d3438203d3e20323732373533.roa (hash: ajz1ADDk57ueUw3EgtOnn03V3HEHEQX4m8AXHI3+u9w=)
                          2: 3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (hash: QEnlJFkLVg4PI03AjTvXI8iBDsPMivdcYmwPtYlhJPc=)
                          3: 7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.crl (hash: 49qnMIEFXIQI35NMhCRO6iFj0WucJzApQaeMkh29Hlg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:65:8c:fd:73:26:93:2b:1c:19:05:11:82:9b:8d:be:65:f1:84:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE5440D73B890D8BF20B510E2FDC7EA0152B97A
        Validity
            Not Before: Jan 17 18:20:02 2024 GMT
            Not After : Jan 18 20:15:02 2024 GMT
        Subject: CN=B2C7A5B04B689F9C5609E98E20D6337489E884EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:5c:bd:bb:c3:7a:00:34:93:f9:30:d7:d3:
                    e9:d5:4c:af:1f:00:44:56:89:ff:6a:d6:72:e7:da:
                    e4:82:4a:05:e1:ad:10:e2:19:2a:c7:aa:52:e4:ba:
                    5d:31:69:63:84:f6:28:bd:0a:e3:be:e8:56:75:02:
                    da:be:11:81:f0:92:8f:68:5f:5b:2e:2d:1f:b8:02:
                    8f:f8:aa:f2:86:35:fe:52:7a:0f:dd:d1:92:57:e8:
                    d0:50:fd:27:7c:8a:74:c6:85:19:60:48:66:bd:7b:
                    be:52:01:dc:54:a7:f0:6e:b9:e3:0b:3c:8c:1b:8d:
                    24:dd:4f:bd:04:9e:21:df:43:6a:b5:67:6b:4b:9b:
                    42:a6:be:bb:cc:80:4a:70:b0:08:9b:3b:d2:7e:bf:
                    cc:76:f0:57:31:c0:db:de:f3:0f:16:0c:a2:67:72:
                    16:5b:de:35:92:5e:d2:8e:f6:bb:1c:6e:1a:d5:64:
                    70:3e:48:6c:87:57:ff:64:2c:c8:bd:1c:e3:ec:fb:
                    5c:bb:87:fa:05:6b:cb:4a:68:e7:07:5c:2d:46:78:
                    0a:c4:78:57:4d:13:1e:cd:ae:77:26:b9:8d:c1:f0:
                    74:23:5b:ab:17:a0:09:f5:02:e5:b9:66:ad:55:6a:
                    45:1c:64:ff:75:d1:52:2d:90:43:af:ef:6c:47:c7:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C7:A5:B0:4B:68:9F:9C:56:09:E9:8E:20:D6:33:74:89:E8:84:EC
            X509v3 Authority Key Identifier:
                keyid:7D:E5:44:0D:73:B8:90:D8:BF:20:B5:10:E2:FD:C7:EA:01:52:B9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:57:15:aa:9e:2f:84:78:1d:83:46:a5:90:8c:a7:ba:82:5e:
         b0:83:7d:bb:ff:f1:1a:7c:9d:2c:02:a4:d7:a1:13:24:7a:30:
         85:29:24:1b:b1:4b:67:84:13:89:4a:eb:c8:d3:db:63:6c:5b:
         2a:6a:52:0c:ba:3c:29:9e:35:09:24:f6:af:9a:0d:9f:2b:f9:
         f1:a2:cf:b5:4c:9e:ad:31:f0:af:db:44:42:62:78:90:86:58:
         e5:cf:81:04:7f:3b:a2:15:ee:59:e7:76:ee:0d:c0:5b:bf:f7:
         2a:b9:22:ff:e6:c6:29:31:4d:7d:02:e0:de:01:ad:35:05:77:
         66:e5:7e:93:73:86:43:43:e0:c7:d8:73:ed:e6:e7:33:1d:3b:
         ed:35:57:59:c7:65:90:e7:27:0e:01:2c:22:e8:55:11:1a:ae:
         9b:13:5e:c2:44:1d:fc:1d:68:4e:3f:df:b2:d0:27:93:6f:88:
         d2:7a:3d:5e:59:05:c5:ec:f5:c1:b7:aa:15:22:e9:0d:ef:59:
         92:ba:f1:49:ad:c5:94:9c:1a:f2:29:55:a1:e5:e8:cc:7f:50:
         6e:be:d1:06:26:d2:49:77:c4:e1:16:24:06:8e:a2:a6:9e:91:
         50:8d:39:37:4c:28:51:1d:29:94:54:32:7c:2b:d0:1b:78:94:
         2a:61:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----