Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.mft
File:                     25B1765BE1196A916D606610E67447F8241DF008.mft (raw, json)
Hash identifier:          n5OgwuY7ITDLHP1u4GKlllxTI0q8K9tvm2enXcWP104=
Subject key identifier:   42:19:6D:FE:4B:E0:4A:8D:F4:D8:CD:4B:7D:F3:57:FB:62:43:1E:A5
Authority key identifier: 25:B1:76:5B:E1:19:6A:91:6D:60:66:10:E6:74:47:F8:24:1D:F0:08
Certificate issuer:       /CN=25B1765BE1196A916D606610E67447F8241DF008
Certificate serial:       05C652872B73C14A77B4DD8C5283BF3CF6DD9CE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B1765BE1196A916D606610E67447F8241DF008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.mft
Manifest number:          0522
Signing time:             Mon 15 Apr 2024 12:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 11:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 12:00:00 +0000
Files and hashes:         1: 25B1765BE1196A916D606610E67447F8241DF008.crl (hash: IrMscgoCtuThE/7XGSuM+uSi+7dyP5LvI+EWbitlwEw=)
                          2: 323830343a383437383a3a2f33322d3332203d3e20323732323632.roa (hash: YsqSGMd9O9R5yrZ0xUPQergCZgeRsTGZ82P9lLa88Fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c6:52:87:2b:73:c1:4a:77:b4:dd:8c:52:83:bf:3c:f6:dd:9c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B1765BE1196A916D606610E67447F8241DF008
        Validity
            Not Before: Apr 15 11:55:00 2024 GMT
            Not After : Apr 16 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:0c:aa:7d:7f:2c:c0:51:43:1b:03:3f:06:
                    61:07:57:ed:27:e6:39:47:42:1f:ff:9a:eb:d8:31:
                    1b:5e:79:eb:9d:ca:58:f8:23:75:e8:7f:9b:08:20:
                    fa:f6:a1:56:d4:de:58:f2:2c:45:93:a2:56:94:65:
                    1f:c5:75:f4:54:dc:70:12:a3:37:40:96:81:f5:18:
                    0a:ad:66:13:40:94:90:1b:45:9b:89:6c:84:45:5e:
                    0f:2a:76:2d:8a:f1:2f:b8:27:6e:1f:76:bf:aa:21:
                    db:90:d2:49:2a:4a:13:69:4c:39:bb:cb:38:5c:d1:
                    14:1a:b4:cf:da:92:11:99:76:53:67:b2:f9:d4:f2:
                    d3:bd:fd:e7:61:02:af:2f:dc:5e:bc:9f:87:a0:d3:
                    cc:55:31:e5:65:dd:de:25:a5:db:88:b3:6e:64:8f:
                    70:cb:93:f8:90:ea:7d:95:1b:a3:d6:a5:57:0c:c6:
                    f8:e0:bd:de:4d:ad:de:c4:ea:be:79:1f:53:82:8b:
                    11:84:c2:e7:36:96:27:5a:f1:6c:95:51:c2:17:1a:
                    ad:be:60:87:e8:2d:f2:b0:d9:eb:47:ab:5c:17:e8:
                    f3:37:ef:d5:91:a1:8a:2c:d7:8d:17:0f:7a:b1:fb:
                    45:42:25:55:3b:e8:8f:94:8d:7f:f4:5a:e3:9e:81:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:19:6D:FE:4B:E0:4A:8D:F4:D8:CD:4B:7D:F3:57:FB:62:43:1E:A5
            X509v3 Authority Key Identifier:
                keyid:25:B1:76:5B:E1:19:6A:91:6D:60:66:10:E6:74:47:F8:24:1D:F0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B1765BE1196A916D606610E67447F8241DF008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:4c:35:7a:37:59:38:05:1a:c6:fb:88:69:e6:a3:94:03:
         a1:89:14:8e:bb:34:98:7d:21:f1:6e:24:5a:39:7e:33:30:11:
         be:a2:4c:5c:3a:ee:21:74:84:ae:1c:79:2b:6a:ca:07:23:fe:
         19:56:48:f7:13:72:65:bc:b0:24:af:97:2f:0c:78:7d:f3:43:
         2d:f3:bb:02:ae:ad:e9:67:90:05:cc:2b:33:c9:b2:04:42:4a:
         df:f0:6d:58:71:0d:c1:b1:0b:c0:94:70:03:eb:e3:7f:10:0f:
         98:17:b6:75:09:c8:ed:1a:16:2a:8d:50:ac:84:6a:e5:54:a7:
         41:08:5f:7a:6d:39:1e:97:8a:ba:25:a4:70:45:be:1b:13:88:
         dc:dc:fb:78:79:61:cf:0d:28:53:2e:42:d8:d8:9f:99:58:d1:
         26:80:37:7c:0b:27:0b:04:ec:97:9e:0b:ba:e5:f6:f0:cc:ba:
         76:27:75:20:21:df:0e:2b:43:0b:16:4d:f3:e3:5a:05:4c:6a:
         36:e0:00:61:0e:4a:91:a1:02:d9:2c:d8:21:fa:b5:14:6b:5f:
         b9:d2:36:c1:36:f8:a3:9e:4a:6e:73:69:ca:45:0a:30:2c:8c:
         8a:ef:23:1c:8a:b3:6f:c3:5a:fa:47:7e:45:50:8c:27:e1:9b:
         c9:0c:ba:6e
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUBcZShytzwUp3tN2MUoO/PPbdnOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVCMTc2NUJFMTE5NkE5MTZENjA2NjEwRTY3NDQ3Rjgy
NDFERjAwODAeFw0yNDA0MTUxMTU1MDBaFw0yNDA0MTYxMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjgxNTBDQUE3RDdGMkNDMDUx
NDMxQjAzM0YwNjYxMDc1N0VEMjdFNjM5NDc0MjFGRkY5QUVCRDgzMTFCNUU3OUVC
OURDQTU4RjgyMzc1RTg3RjlCMDgyMEZBRjZBMTU2RDRERTU4RjIyQzQ1OTNBMjU2
OTQ2NTFGQzU3NUY0NTREQzcwMTJBMzM3NDA5NjgxRjUxODBBQUQ2NjEzNDA5NDkw
MUI0NTlCODk2Qzg0NDU1RTBGMkE3NjJEOEFGMTJGQjgyNzZFMUY3NkJGQUEyMURC
OTBEMjQ5MkE0QTEzNjk0QzM5QkJDQjM4NUNEMTE0MUFCNENGREE5MjExOTk3NjUz
NjdCMkY5RDRGMkQzQkRGREU3NjEwMkFGMkZEQzVFQkM5Rjg3QTBEM0NDNTUzMUU1
NjVERERFMjVBNURCODhCMzZFNjQ4RjcwQ0I5M0Y4OTBFQTdEOTUxQkEzRDZBNTU3
MENDNkY4RTBCRERFNERBRERFQzRFQUJFNzkxRjUzODI4QjExODRDMkU3MzY5NjI3
NUFGMTZDOTU1MUMyMTcxQUFEQkU2MDg3RTgyREYyQjBEOUVCNDdBQjVDMTdFOEYz
MzdFRkQ1OTFBMThBMkNENzhEMTcwRjdBQjFGQjQ1NDIyNTU1M0JFODhGOTQ4RDdG
RjQ1QUUzOUU4MTExM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuBUMqn1/LMBRQxsDPwZhB1ftJ+Y5R0If/5rr2DEbXnnrncpY+CN1
6H+bCCD69qFW1N5Y8ixFk6JWlGUfxXX0VNxwEqM3QJaB9RgKrWYTQJSQG0WbiWyE
RV4PKnYtivEvuCduH3a/qiHbkNJJKkoTaUw5u8s4XNEUGrTP2pIRmXZTZ7L51PLT
vf3nYQKvL9xevJ+HoNPMVTHlZd3eJaXbiLNuZI9wy5P4kOp9lRuj1qVXDMb44L3e
Ta3exOq+eR9TgosRhMLnNpYnWvFslVHCFxqtvmCH6C3ysNnrR6tcF+jzN+/VkaGK
LNeNFw96sftFQiVVO+iPlI1/9FrjnoERPwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FEIZbf5L4EqN9NjNS33zV/tiQx6lMB8GA1UdIwQYMBaAFCWxdlvhGWqRbWBmEOZ0
R/gkHfAIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6bkFMZ1JxZzRqdVFk
R3hYWjhFRWdKU21hSGRxc0tZZ2NkQXR6ZXpTcEZ4LzAvMjVCMTc2NUJFMTE5NkE5
MTZENjA2NjEwRTY3NDQ3RjgyNDFERjAwOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yNUIxNzY1QkUxMTk2QTkxNkQ2MDY2MTBFNjc0NDdGODI0MURG
MDA4LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6bkFMZ1JxZzRqdVFkR3hYWjhF
RWdKU21hSGRxc0tZZ2NkQXR6ZXpTcEZ4LzAvMjVCMTc2NUJFMTE5NkE5MTZENjA2
NjEwRTY3NDQ3RjgyNDFERjAwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAroTDV6N1k4BRrG+4hp5qOU
A6GJFI67NJh9IfFuJFo5fjMwEb6iTFw67iF0hK4ceStqygcj/hlWSPcTcmW8sCSv
ly8MeH3zQy3zuwKurelnkAXMKzPJsgRCSt/wbVhxDcGxC8CUcAPr438QD5gXtnUJ
yO0aFiqNUKyEauVUp0EIX3ptOR6XirolpHBFvhsTiNzc+3h5Yc8NKFMuQtjYn5lY
0SaAN3wLJwsE7JeeC7rl9vDMunYndSAh3w4rQwsWTfPjWgVMajbgAGEOSpGhAtks
2CH6tRRrX7nSNsE2+KOeSm5zacpFCjAsjIrvIxyKs2/DWvpHfkVQjCfhm8kMum4=
-----END CERTIFICATE-----