Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
File:                     7A509BA48E79904F69690722D65AADB9AD3A47AB.mft (raw, json)
Hash identifier:          1jOKMBsDPNI+yjqBnrMM7uHnQySamauNO1ZZMLRktJ0=
Subject key identifier:   A2:3B:AD:D0:D1:EC:90:4C:23:E8:13:5D:82:F5:FB:F3:60:01:2F:A9
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Certificate issuer:       /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial:       1348F000FE83FB6F399DFAD94486DA944E400DC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 06:00:00 +0000
Manifest this update:     Fri 31 Jan 2025 05:55:00 +0000
Manifest next update:     Sat 01 Feb 2025 06:44:00 +0000
Files and hashes:         1: 323830343a323633343a3a2f33322d3438203d3e20323634333332.roa (hash: X/r9fA7qLa6jWZjNZ57TJvVAsg3Vc61uAvfzhhNxvkU=)
                          2: 7A509BA48E79904F69690722D65AADB9AD3A47AB.crl (hash: jAahxuaAFyiLTFoNq6FX/nZd3kbsat1vNXCj1eP57n8=)
                          3: 3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa (hash: UC7wasZeeJNMImRpg1cf9O4KX5x2jg+CR7e8RBWNzAc=)
                          4: 3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa (hash: Tn4WZxP7vRIVY0/1PLnSoPJWIErqaHS10q0zQg8LLko=)
                          5: 3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa (hash: FIa67vKnvpNF9SxTFpMBjQ1tDHvz6cJ2aJMwEnX7/GU=)
                          6: 3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa (hash: KwHfyHJGA2jfy/fGYWVNQXbOsqG9lWTfGeE+1YFPGMg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:48:f0:00:fe:83:fb:6f:39:9d:fa:d9:44:86:da:94:4e:40:0d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
        Validity
            Not Before: Jan 31 05:55:00 2025 GMT
            Not After : Feb  1 06:44:00 2025 GMT
        Subject: CN=A23BADD0D1EC904C23E8135D82F5FBF360012FA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:20:32:e2:66:3b:22:2d:d2:fa:5f:b3:e6:16:
                    56:b4:4b:a4:f2:fb:13:c8:66:14:28:61:53:e6:6a:
                    6e:51:a1:0b:3f:09:c3:52:0b:f0:f8:e7:ec:4c:fd:
                    b5:6f:03:04:29:53:5a:3f:92:b3:10:c9:75:c6:a4:
                    fd:db:6f:9e:01:bd:4f:a2:e3:d0:99:32:1f:80:66:
                    84:ec:f1:5f:2b:19:c0:77:57:c6:91:42:9e:5d:22:
                    99:53:11:32:7a:fa:42:7a:95:47:85:e7:e3:58:b0:
                    31:b1:44:1f:c7:8a:79:05:83:18:76:3f:34:de:14:
                    8d:fb:7f:39:60:1e:85:b8:3c:b0:2f:02:99:7f:98:
                    45:42:80:0d:d6:c1:8e:82:49:63:04:ef:cc:b0:08:
                    b7:56:90:24:9f:1c:f8:c0:55:1a:10:ee:43:f7:59:
                    7e:87:4f:48:c7:48:39:75:92:61:c1:40:f6:2f:88:
                    bf:27:10:01:34:96:e0:0a:58:11:8a:59:04:2a:03:
                    79:1e:6d:f5:cc:25:4c:c3:b8:c4:47:70:e0:65:f5:
                    16:59:f9:f2:1a:44:f0:f5:d4:43:0c:d5:4c:65:26:
                    46:67:75:9c:bd:b0:91:90:09:0e:c4:c8:fe:fb:ee:
                    d2:2a:7b:66:c5:4d:80:0c:63:80:f9:ed:1d:23:97:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3B:AD:D0:D1:EC:90:4C:23:E8:13:5D:82:F5:FB:F3:60:01:2F:A9
            X509v3 Authority Key Identifier:
                keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:2c:b7:b9:4c:b2:38:fd:28:f2:2b:02:b2:20:56:46:a5:
         fe:e2:e6:3f:50:7c:18:e5:9c:78:65:a1:93:7f:b5:c5:71:52:
         4e:b5:5c:e4:bd:55:b1:9a:b0:de:65:40:e4:c4:79:eb:43:fe:
         0a:f4:1d:ed:6e:61:7a:fd:a4:43:b0:9d:08:6c:ec:5d:32:f7:
         22:f8:01:2a:d2:f0:69:b4:35:81:49:42:cb:55:50:e6:b7:94:
         3a:60:c2:8f:53:72:dc:e8:e0:a9:dd:e6:d7:bb:75:f3:70:c6:
         7c:40:31:dd:e7:3e:f8:ed:de:a3:c3:4d:7d:e4:d4:ce:5c:b9:
         0c:42:8e:fa:4e:09:3f:10:41:8e:8e:19:38:b4:d3:75:ee:e8:
         5d:f6:96:32:9e:9a:78:b1:c3:d3:28:46:6a:d8:bf:cc:97:41:
         17:5b:84:c7:f6:1e:71:93:33:f5:b7:e5:37:1b:c9:5e:a9:47:
         7f:29:dd:45:5a:51:9c:4f:b7:92:0e:6c:ed:9d:20:b4:69:eb:
         f2:76:95:86:ba:f8:92:db:a3:a3:b5:56:e4:06:0b:f8:3b:c5:
         8c:13:09:5b:b0:65:a4:ac:b2:0a:f6:e7:a3:97:a0:b3:dd:c5:
         8d:51:31:ac:77:55:a6:d6:11:5c:18:c8:7d:de:3a:f9:47:02:
         db:e9:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----