Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.mft
File:                     7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.mft (raw, json)
Hash identifier:          0ARYDU6quEp6ouazPQjKYZhYnkTyFkehfTXJNw+7ekk=
Subject key identifier:   A5:56:EF:C3:56:9B:BB:1D:E0:A8:A9:87:FC:ED:78:97:B1:7E:31:BF
Authority key identifier: 7F:3F:A5:26:B9:5F:2A:4C:20:81:E3:EA:3E:A5:FE:A9:39:92:DA:F8
Certificate issuer:       /CN=7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8
Certificate serial:       5058D9534DD522F5EA018BB7285377240AA81D38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.mft
Manifest number:          0147
Signing time:             Sat 01 Feb 2025 01:08:17 +0000
Manifest this update:     Sat 01 Feb 2025 01:03:17 +0000
Manifest next update:     Sun 02 Feb 2025 02:19:17 +0000
Files and hashes:         1: 3138372e3130392e3132312e302f32342d3234203d3e20323733373938.roa (hash: d34jtzR4hKJO3Lu+TtP1JrLN8/z9rYDbI5g+B70N6K8=)
                          2: 323830343a386335633a3a2f33322d3438203d3e20323733373938.roa (hash: C5qNJvNsEQDo+TpjMkV4rWLs0MMnAVggMdwLgJxWBP4=)
                          3: 7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.crl (hash: Nqu9GOfkAY7ubbsg1FjU5KjWyc4YNzi/ks75xma8+kQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:d9:53:4d:d5:22:f5:ea:01:8b:b7:28:53:77:24:0a:a8:1d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8
        Validity
            Not Before: Feb  1 01:03:17 2025 GMT
            Not After : Feb  2 02:19:17 2025 GMT
        Subject: CN=A556EFC3569BBB1DE0A8A987FCED7897B17E31BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:65:ab:11:5b:ce:f7:7f:e9:56:09:b8:20:
                    37:d1:78:90:a8:8b:13:b0:bf:80:db:30:b3:69:0f:
                    5b:df:e9:7e:ed:ca:4f:1d:94:f6:80:aa:33:11:ee:
                    52:b2:bc:0f:6e:2d:67:2f:5c:af:ec:28:97:00:fc:
                    ee:f0:c3:0e:07:2f:72:ce:80:85:ba:6b:da:00:ca:
                    2f:70:91:b6:2b:30:fb:ee:5f:f0:5b:f7:87:62:8c:
                    9b:29:8d:0f:27:2c:dd:39:4b:fa:3c:a1:85:04:80:
                    13:95:6d:22:22:3a:81:3a:c9:ec:74:6d:12:60:33:
                    54:e7:81:a6:06:22:dc:c1:dd:bd:0f:d9:8c:46:f1:
                    d2:de:b3:94:21:e3:40:e0:9e:77:22:9c:40:a6:88:
                    4c:4c:b7:2a:cf:8d:de:be:4a:f0:23:26:74:bd:cf:
                    d1:65:7e:3d:05:71:e9:5f:b8:1d:72:65:a3:80:5e:
                    d3:c4:ac:86:7f:2b:3a:3c:ca:75:8f:aa:f4:f4:56:
                    25:65:72:3d:0f:d6:42:a9:cc:cb:ac:1e:c1:a3:4a:
                    0b:2d:34:f1:f5:88:0f:f7:55:41:34:60:ee:a1:0a:
                    84:09:49:ce:28:0b:7c:a8:df:f9:37:5e:4c:7d:6a:
                    af:07:cc:27:77:ec:5c:36:32:88:55:f0:19:3c:2c:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:56:EF:C3:56:9B:BB:1D:E0:A8:A9:87:FC:ED:78:97:B1:7E:31:BF
            X509v3 Authority Key Identifier:
                keyid:7F:3F:A5:26:B9:5F:2A:4C:20:81:E3:EA:3E:A5:FE:A9:39:92:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:f3:f0:42:87:f1:20:3b:0d:b6:ec:48:ba:3d:15:17:bf:
         4e:0b:04:34:97:9d:bb:af:52:d4:ac:93:2f:51:ce:48:e4:81:
         d9:97:ff:8f:af:ce:a5:b7:60:ef:32:47:e9:61:0e:26:a4:30:
         dd:a3:b0:25:c8:6e:3d:33:91:80:2b:83:c2:54:97:6c:84:70:
         2b:ae:6d:e5:47:8f:71:4e:16:db:b4:96:53:1e:d9:5b:1f:ba:
         b5:b2:91:0b:36:41:48:85:da:27:88:2e:71:76:e3:59:ff:15:
         30:32:c0:bd:44:a8:b5:07:ee:6c:20:73:79:ce:fd:79:55:73:
         24:1d:5f:74:9c:9c:2e:91:16:80:ad:bb:e8:a0:6b:d8:b9:ba:
         3f:e9:4d:72:b0:e2:5a:83:a5:44:28:c5:6d:df:6e:39:5c:c3:
         e4:e2:2c:9f:9f:09:e2:ec:4f:a1:b1:7c:90:2e:60:36:0d:fc:
         f8:cd:be:25:c6:b7:34:3a:ff:d3:f4:7d:72:b5:6c:59:bf:e2:
         bb:9c:9c:45:fa:8f:6a:e1:70:6a:4d:15:1c:d4:54:06:95:12:
         79:8a:04:43:62:8f:f0:48:c9:45:79:3d:3e:4d:dd:93:50:6b:
         4a:57:0b:e7:54:b2:f6:e8:77:60:12:e1:0f:a2:92:18:f1:0f:
         0b:fd:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----