Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/C925A8AA81E10E6B42BA51CFF9E7855A400DBB69.mft
File:                     C925A8AA81E10E6B42BA51CFF9E7855A400DBB69.mft (raw, json)
Hash identifier:          HXmRo8wNpldjxtz5FWEqgFUyZssePMJtRUIVo8PKqkc=
Subject key identifier:   25:AC:B0:47:25:3E:78:4F:91:09:79:89:1C:C3:7D:53:A4:11:6C:3F
Authority key identifier: C9:25:A8:AA:81:E1:0E:6B:42:BA:51:CF:F9:E7:85:5A:40:0D:BB:69
Certificate issuer:       /CN=C925A8AA81E10E6B42BA51CFF9E7855A400DBB69
Certificate serial:       5D708E78D8596C05BB7F6C06B46637CEBCC67494
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C925A8AA81E10E6B42BA51CFF9E7855A400DBB69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/C925A8AA81E10E6B42BA51CFF9E7855A400DBB69.mft
Manifest number:          0A
Signing time:             Wed 20 Jul 2022 19:15:04 +0000
Manifest this update:     Wed 20 Jul 2022 19:10:04 +0000
Manifest next update:     Thu 21 Jul 2022 21:01:04 +0000
Files and hashes:         1: C925A8AA81E10E6B42BA51CFF9E7855A400DBB69.crl (hash: 1w+2wBCrY8QXzp+nhUvsUG2cNCgnnEN2aSppI16yH2c=)
                          2: 3137302e3234342e3138302e302f32322d3232203d3e20323636353036.roa (hash: AHkN4t10HCwB2p5KWYhJqA46I9Nyvjb2VbqzN6b1Beo=)
                          3: 323830343a333864633a3a2f33322d3332203d3e20323636353036.roa (hash: MQ93zkFUsHUBDTvjZAkCIxR1pwk1hESOwAb3hQGFHLs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:70:8e:78:d8:59:6c:05:bb:7f:6c:06:b4:66:37:ce:bc:c6:74:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C925A8AA81E10E6B42BA51CFF9E7855A400DBB69
        Validity
            Not Before: Jul 20 19:10:04 2022 GMT
            Not After : Jul 21 21:01:04 2022 GMT
        Subject: CN=25ACB047253E784F910979891CC37D53A4116C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:86:a1:de:47:cb:db:6b:09:a1:7e:0b:01:
                    17:e6:7a:34:74:12:0c:de:57:81:9a:4b:85:fe:10:
                    8c:71:30:a4:00:6e:47:a9:be:2a:81:bd:1c:16:cd:
                    92:bc:a2:26:9b:9a:54:d5:4d:90:09:c0:ee:8b:c5:
                    f7:e5:13:43:fa:c3:11:8a:81:07:64:db:e6:32:de:
                    7d:ec:9a:19:2e:d3:f1:10:30:79:ac:ef:d6:ea:de:
                    db:54:06:5e:cf:2c:1b:a3:aa:0e:68:e7:c6:7e:6d:
                    7d:3c:4c:9f:6a:c0:cb:63:d0:b9:75:d9:a1:0e:3b:
                    25:8f:0d:8e:4b:a1:be:86:13:bf:1d:08:2c:5d:ad:
                    89:07:f1:44:fd:a1:64:c7:07:fd:ec:64:42:8a:7a:
                    a8:2b:7f:61:a2:7a:a2:48:c1:d4:7a:87:d4:55:0c:
                    05:06:99:db:8f:d4:40:d1:ee:0d:74:31:8c:47:5f:
                    ba:f4:3a:ae:db:08:7f:5e:53:6b:11:12:ca:c8:f1:
                    98:76:d7:49:3b:10:db:86:9c:f2:cd:1a:e8:e3:77:
                    3d:7f:57:2b:89:74:db:d5:d6:fe:85:1e:7c:fa:6f:
                    12:76:a1:7d:c3:1c:9f:96:4a:a8:6b:2a:1b:3d:89:
                    8f:45:41:7c:fa:a2:00:76:39:95:1b:33:d7:6b:f5:
                    f8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AC:B0:47:25:3E:78:4F:91:09:79:89:1C:C3:7D:53:A4:11:6C:3F
            X509v3 Authority Key Identifier:
                keyid:C9:25:A8:AA:81:E1:0E:6B:42:BA:51:CF:F9:E7:85:5A:40:0D:BB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/C925A8AA81E10E6B42BA51CFF9E7855A400DBB69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C925A8AA81E10E6B42BA51CFF9E7855A400DBB69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/C925A8AA81E10E6B42BA51CFF9E7855A400DBB69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:14:8e:f7:41:3a:82:45:e8:c7:04:21:bd:fc:85:5c:4f:29:
         8a:0c:73:ce:26:31:06:36:c2:d3:7c:41:01:e3:ab:cf:7b:4c:
         56:9c:7b:f6:70:50:6a:1f:1e:da:ea:4d:8a:3c:0a:59:61:cf:
         de:4f:f5:85:f1:25:e6:23:9f:f8:30:b0:a0:22:37:0b:e9:d3:
         0c:8a:7c:36:68:b2:00:2f:42:26:93:51:8a:3d:07:8e:98:60:
         f8:2c:ea:da:f2:6d:23:c9:28:5f:9b:fa:0e:1d:49:0d:7d:e2:
         ea:88:fb:34:9d:a3:fe:30:27:15:8d:ab:f0:63:b3:67:3f:50:
         82:f2:7b:ab:7a:9d:f4:68:20:89:7e:b3:42:61:4f:7d:04:7b:
         3e:2e:72:be:d7:18:3b:da:a1:3e:6d:ae:2b:71:4c:a9:bb:74:
         cb:11:0c:8d:b0:84:36:a6:a1:93:5c:78:9f:52:1a:4d:44:cc:
         2d:bb:51:0d:47:41:09:12:6e:be:63:47:6c:2d:f9:d7:f1:29:
         56:26:d2:a0:71:e0:66:3f:21:e0:64:8a:80:f4:1b:96:7b:7b:
         90:57:4e:0e:c8:49:3a:9b:75:d8:95:7b:67:b4:6d:1b:45:42:
         69:0d:50:c0:ae:20:13:0b:96:ba:23:72:fb:59:f4:f7:55:e6:
         0e:9a:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----