Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.mft
File:                     25C2D875F5CBA31070CD57D8D61496748E38F2FE.mft (raw, json)
Hash identifier:          9bey03A5doTCZImVKoewM2SKdF6I+JRi258Dnp3n1t0=
Subject key identifier:   F2:76:64:9C:F0:1A:F5:82:22:E9:6C:D5:48:C9:A7:5B:F3:CA:B9:4B
Authority key identifier: 25:C2:D8:75:F5:CB:A3:10:70:CD:57:D8:D6:14:96:74:8E:38:F2:FE
Certificate issuer:       /CN=25C2D875F5CBA31070CD57D8D61496748E38F2FE
Certificate serial:       67781C70C030E5923AB1862CD648F59A52F1E94A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.mft
Manifest number:          F7
Signing time:             Sun 30 Jul 2023 20:06:06 +0000
Manifest this update:     Sun 30 Jul 2023 20:01:06 +0000
Manifest next update:     Mon 31 Jul 2023 22:42:06 +0000
Files and hashes:         1: 323830343a333433343a3a2f33322d3334203d3e20323635343432.roa (hash: Z0K+Kw9gva1jeILyCaxXupyXyKAbWUnJvC5e65qvJEM=)
                          2: 25C2D875F5CBA31070CD57D8D61496748E38F2FE.crl (hash: bIHmwLaf0ylkJGkOb6+DH8fzNtC7mU2S4fLVlH1FC+w=)
                          3: 3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa (hash: y/PW19G/fDIvHPULFOy/skO2Y2EkSIEkng+Xx1r0nvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:78:1c:70:c0:30:e5:92:3a:b1:86:2c:d6:48:f5:9a:52:f1:e9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C2D875F5CBA31070CD57D8D61496748E38F2FE
        Validity
            Not Before: Jul 30 20:01:06 2023 GMT
            Not After : Jul 31 22:42:06 2023 GMT
        Subject: CN=F276649CF01AF58222E96CD548C9A75BF3CAB94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:9e:12:2b:0f:7d:2d:ca:e0:d3:fb:a4:ea:
                    ee:98:b4:89:cb:8c:7e:87:6e:84:bc:99:b0:f3:9f:
                    28:b8:5e:4d:9f:74:f3:9c:96:d8:f2:69:33:aa:58:
                    4b:44:81:2d:42:c7:c5:25:2d:03:60:27:c6:25:ab:
                    e2:43:d6:20:30:62:14:a8:a8:65:4b:85:81:06:fb:
                    79:62:0c:70:50:fc:3b:c9:77:1d:a4:7b:1a:b8:49:
                    0c:ac:8d:51:13:06:0d:3c:50:49:41:24:51:46:9c:
                    91:c8:94:02:31:3b:74:91:0b:79:b3:bd:88:00:6b:
                    60:40:cb:49:db:6a:33:4e:2f:60:7b:19:f4:0a:fc:
                    f1:18:52:f0:37:8b:06:be:a0:1f:d6:87:8d:32:12:
                    be:6f:73:75:56:f3:9e:0e:d1:78:e4:f3:96:6e:37:
                    6b:56:34:34:6c:8d:38:66:d0:e4:21:1e:12:b7:02:
                    d0:53:7e:2b:19:2e:8d:b0:4d:c2:1a:f0:9a:b6:2f:
                    84:81:30:fd:f5:ff:11:6f:ee:38:da:bf:5d:4f:2e:
                    e6:fc:3b:9f:f0:eb:60:cd:f2:af:02:b2:0f:17:b5:
                    f5:bc:f4:2f:6e:dc:6f:5a:9e:18:77:79:61:ac:1e:
                    77:54:75:3e:b2:1a:0d:07:89:ca:ac:6e:38:9d:02:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:76:64:9C:F0:1A:F5:82:22:E9:6C:D5:48:C9:A7:5B:F3:CA:B9:4B
            X509v3 Authority Key Identifier:
                keyid:25:C2:D8:75:F5:CB:A3:10:70:CD:57:D8:D6:14:96:74:8E:38:F2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:17:23:e9:a1:de:53:ff:aa:1a:7e:ca:d3:6f:a0:44:0b:
         56:c7:2a:5d:df:11:80:6d:66:32:74:d8:43:b4:eb:16:80:67:
         d5:77:1d:ae:4e:d1:ba:1d:0e:98:8c:20:84:8d:7f:d0:fc:b1:
         ba:68:ff:c9:83:d0:29:79:20:83:06:6a:8f:b4:37:48:e6:5f:
         23:5d:52:fc:3b:7d:8c:33:80:62:31:43:c3:92:1d:1a:fb:9a:
         2d:7b:b6:08:66:77:d6:b4:51:3c:07:e5:a8:63:cf:b3:60:1d:
         a4:29:56:36:a3:7b:77:0f:4b:f5:92:15:20:2d:17:eb:d8:6e:
         b6:e0:14:01:61:e3:23:6e:7c:48:bd:69:f9:1c:b8:a2:5a:f3:
         69:a6:b6:4d:41:de:9e:f3:9d:7a:7f:c6:7c:ec:4c:56:52:3c:
         6f:93:be:d7:09:d9:bd:01:9a:a5:55:50:8b:a7:09:20:c5:37:
         c1:8b:8f:96:9d:85:d6:9e:3e:8e:c2:98:e3:95:38:3b:b6:1a:
         f7:40:8d:7f:b6:b3:0e:48:d9:24:8e:9d:7e:b8:08:01:cf:53:
         d3:cc:58:e6:3f:3e:be:94:29:e3:b8:c0:45:ca:d1:3d:ea:65:
         81:5f:33:e2:8a:a9:61:9a:e7:05:37:a6:e5:74:98:ea:c0:79:
         06:8e:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----