Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA.mft
File:                     7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA.mft (raw, json)
Hash identifier:          h75Z5UHlfWEXf+bnv1A+vTuByZ6t4NenG/kuSwAJ528=
Subject key identifier:   7E:F1:4E:B3:39:7B:9C:63:ED:EE:D4:FE:FE:74:E5:0B:82:20:87:07
Authority key identifier: 7B:55:7A:10:33:14:2B:1F:EA:2F:C9:DB:D1:B5:8C:C3:82:E2:B6:CA
Certificate issuer:       /CN=7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA
Certificate serial:       4E75E11A179687F683EE80C3F7BC3AE0EF88DE19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA.mft
Manifest number:          02B5
Signing time:             Wed 24 May 2023 10:56:25 +0000
Manifest this update:     Wed 24 May 2023 10:51:25 +0000
Manifest next update:     Thu 25 May 2023 13:48:25 +0000
Files and hashes:         1: 3138312e3139312e3130342e302f32322d3234203d3e20323636303039.roa (hash: bDwGZKYe3AUjrysGqXncM9Jy6GotkD54vNFyRFwp0Ks=)
                          2: 7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA.crl (hash: 3fqBU3YyVrE+TtXSBJURr+99swplgwdfCmcr3gyVR+I=)
                          3: 323830343a343133303a3a2f33322d3438203d3e20323636303039.roa (hash: IdFDo+TBKvX+wR0yDhrdDN0rXf5nkmmPHYZYKEeV8mM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:75:e1:1a:17:96:87:f6:83:ee:80:c3:f7:bc:3a:e0:ef:88:de:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA
        Validity
            Not Before: May 24 10:51:25 2023 GMT
            Not After : May 25 13:48:25 2023 GMT
        Subject: CN=7EF14EB3397B9C63EDEED4FEFE74E50B82208707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:7e:9c:bd:c1:9f:33:20:c4:2c:46:4c:f2:
                    26:9a:b4:04:a5:81:b7:2d:b9:96:75:9a:73:b3:d8:
                    f9:11:a3:f8:ac:a2:f1:79:4a:2f:70:57:1d:c8:ec:
                    07:4d:dd:fe:66:a1:8a:4f:c6:66:a7:36:c6:3d:bf:
                    24:17:bd:6f:ed:e5:a8:87:d0:14:64:e9:8f:fb:23:
                    e2:0f:88:a5:53:98:c9:1a:0e:cf:14:14:72:45:64:
                    3b:11:65:05:b5:37:b5:8a:8d:7c:c2:3d:52:c0:a8:
                    4b:bc:10:59:06:d9:77:67:b1:93:00:3f:bb:3c:96:
                    9d:5c:6c:5f:2a:5e:eb:2d:e6:5c:f9:48:cf:68:b1:
                    4b:73:e5:88:c8:af:03:2e:d0:eb:76:32:fd:0e:cd:
                    57:3d:fa:e7:1f:32:b2:48:2f:56:e9:c4:bd:fe:c0:
                    9c:59:92:2a:3b:e4:93:8a:bb:f6:c6:cd:fe:13:69:
                    4a:a2:63:71:e7:f9:9e:54:a8:9b:98:b3:1c:84:7e:
                    5a:e1:7d:df:9f:a7:79:eb:6a:aa:2d:af:6b:a9:ec:
                    4d:85:7b:28:69:ba:3c:a4:a7:de:c1:26:5b:cf:4e:
                    99:cc:03:66:c0:f7:57:f6:42:6c:a9:48:b6:b9:c0:
                    62:ca:e4:c7:d4:74:42:86:ba:f3:6c:50:d8:56:45:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F1:4E:B3:39:7B:9C:63:ED:EE:D4:FE:FE:74:E5:0B:82:20:87:07
            X509v3 Authority Key Identifier:
                keyid:7B:55:7A:10:33:14:2B:1F:EA:2F:C9:DB:D1:B5:8C:C3:82:E2:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7B557A1033142B1FEA2FC9DBD1B58CC382E2B6CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:63:12:63:97:a6:93:f6:31:fe:12:ec:64:a1:43:9f:a1:47:
         ee:e0:97:a6:16:1d:8e:95:61:cd:7c:41:47:d1:be:a5:27:39:
         7a:9e:41:ff:7b:95:b3:35:76:12:bf:bd:d2:ff:64:6e:e3:25:
         7d:75:16:1e:05:3f:d8:f8:7a:ef:67:8d:93:40:a5:2a:ac:72:
         d3:f8:bd:ca:14:30:6a:ac:4a:df:7b:cd:d9:b2:0e:98:e2:eb:
         a2:41:09:92:0d:f4:b8:c0:7f:a2:ba:fd:bd:2b:18:e6:47:c1:
         79:31:39:fd:4e:0d:53:68:a2:1f:ca:79:22:3d:ae:d0:06:bd:
         49:be:1a:85:b0:4b:28:3d:fc:04:df:89:12:c1:e7:92:1f:4a:
         41:46:6a:85:68:f3:72:76:7a:52:34:5e:ad:84:54:bd:d0:db:
         22:54:e8:a9:df:99:e9:28:27:01:ad:2c:8d:10:0f:14:c5:4d:
         e7:06:83:54:a2:6f:11:75:35:c3:36:2a:44:f3:9e:0e:c9:a7:
         1d:97:2a:dc:48:71:1f:f2:20:27:26:4d:81:78:b9:3e:d8:23:
         23:ee:a6:b4:f2:5f:b1:ed:4a:71:a0:78:82:5c:8b:e6:7c:4e:
         4e:f7:2c:d2:c0:5d:b0:15:3e:31:aa:87:72:6f:f3:b1:10:75:
         93:25:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----