Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.mft
File:                     7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.mft (raw, json)
Hash identifier:          ec0dXuB6cb9DohHR0Yd3Djy0YnFavAU/Jzln1T/Afls=
Subject key identifier:   21:0A:D1:32:17:DF:61:51:31:26:B1:0B:58:B2:DA:96:60:F1:74:2F
Authority key identifier: 7E:D0:27:3E:AD:90:11:C0:FE:82:E6:D1:AA:57:B0:DD:2D:35:57:E4
Certificate issuer:       /CN=7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4
Certificate serial:       2A5EB669E3B3A536E37A1C7FC067FDD3BBE974FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.mft
Manifest number:          6D
Signing time:             Mon 29 May 2023 17:19:15 +0000
Manifest this update:     Mon 29 May 2023 17:14:15 +0000
Manifest next update:     Tue 30 May 2023 18:46:15 +0000
Files and hashes:         1: 7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.crl (hash: YxftGlCrBZv5Y2KJn0kIVER2GbDS+9B3gS3L7a6kPZo=)
                          2: 323830343a356265383a3a2f33322d313238203d3e20323638383736.roa (hash: 505OlOABBZIp+rKn1u+T0DcAuByZUv1h5UIU6VCGwy4=)
                          3: 34352e3137312e3132322e302f32332d3332203d3e20323638383736.roa (hash: 1untjrn+dfrygIOE4Qlx8gsYEIgMyaOOwVGCH7SfhhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5e:b6:69:e3:b3:a5:36:e3:7a:1c:7f:c0:67:fd:d3:bb:e9:74:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4
        Validity
            Not Before: May 29 17:14:15 2023 GMT
            Not After : May 30 18:46:15 2023 GMT
        Subject: CN=210AD13217DF61513126B10B58B2DA9660F1742F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9b:7d:3c:d9:88:ff:6e:57:28:4b:ef:53:7f:
                    0b:06:c7:61:e4:5d:19:9a:17:cd:a1:d2:a5:2a:11:
                    ff:0c:dd:ca:9d:9a:4f:74:c0:75:12:8d:26:69:03:
                    7a:44:b9:bd:96:f7:4b:8e:72:df:8a:bb:33:8e:57:
                    67:d3:d6:f0:e1:b2:e7:d0:e8:cc:4c:99:61:f9:36:
                    ab:21:74:e1:97:fb:1f:47:45:17:93:11:e3:36:91:
                    82:e9:19:ca:06:5f:49:d2:bb:3a:da:1d:47:9e:53:
                    35:fd:46:70:b9:0d:cb:4c:3d:de:0e:b4:f8:19:cd:
                    dc:74:67:f8:9a:d0:45:7c:ed:7f:c5:84:55:bc:d7:
                    62:2a:47:ad:08:f4:31:e5:de:bc:89:cd:3b:cc:c7:
                    64:b5:03:1b:11:92:74:4a:43:92:82:42:73:02:70:
                    76:ae:97:63:45:b1:34:9b:62:e0:b9:ae:2c:c4:1f:
                    dc:a1:bb:a3:2d:dd:fc:54:fa:dd:a4:21:79:84:26:
                    c0:df:2e:28:c9:a5:95:8b:80:45:f7:73:8c:a9:23:
                    46:f9:81:af:a6:f6:ef:d7:c4:21:cb:58:1a:30:c5:
                    3c:76:ce:c1:a4:bb:75:84:72:6f:ec:40:94:cc:54:
                    22:38:dd:ff:41:61:dc:50:3d:31:c3:08:60:67:1e:
                    eb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0A:D1:32:17:DF:61:51:31:26:B1:0B:58:B2:DA:96:60:F1:74:2F
            X509v3 Authority Key Identifier:
                keyid:7E:D0:27:3E:AD:90:11:C0:FE:82:E6:D1:AA:57:B0:DD:2D:35:57:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/7ED0273EAD9011C0FE82E6D1AA57B0DD2D3557E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:8b:9a:59:e6:ce:24:1f:dc:6e:04:53:53:6e:e3:dd:ac:
         69:fe:29:20:a3:11:70:da:28:fc:d9:fb:6f:1c:b2:f3:66:74:
         c4:0f:79:a8:f0:6b:af:d6:33:05:b5:62:8a:eb:08:f4:f4:2c:
         f6:8f:5f:34:b3:32:85:8d:c8:8c:ca:90:9c:a2:f7:b0:61:c5:
         2b:45:fb:02:b9:e6:75:b3:91:3d:ef:af:ab:40:1d:91:29:95:
         27:cb:4a:54:56:29:ce:0b:7d:a8:d0:1f:01:12:4e:b2:6f:63:
         2a:a9:e3:b0:de:d5:61:c0:09:30:94:c4:46:c5:08:fc:a8:48:
         9d:15:47:e0:49:b2:77:b2:30:dc:9c:cf:92:a4:24:e4:2c:72:
         7b:95:86:04:0f:d7:41:ff:7c:7e:f5:19:bd:8f:79:70:ef:28:
         b0:2e:eb:b1:7b:61:79:82:e9:d5:b3:4d:72:06:41:cc:ab:1b:
         e7:52:4e:ef:e5:70:16:30:21:d4:29:9d:e8:72:bc:96:d8:34:
         69:96:0a:4f:ab:e5:34:09:b6:9e:17:6f:63:4e:57:22:c2:cf:
         ed:16:d2:99:5c:07:a7:7c:cd:89:0d:ce:a2:16:cf:b1:42:50:
         43:24:50:67:a9:a4:e4:03:90:35:63:ff:0a:fd:1d:c8:41:4a:
         02:04:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----