Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8W9qBKDYvfx7gRUp98XPwmMEwCkqUQsou1Jyeb5Jx8pa/0/1925F472A8D6761396C3C6EEC4E105789F4FD893.mft
File:                     1925F472A8D6761396C3C6EEC4E105789F4FD893.mft (raw, json)
Hash identifier:          NX1I6b3Vowab82L1Uls1K/LYkjJIJcL/QntsO81e0J0=
Subject key identifier:   FD:8C:FF:22:49:BB:A7:BD:6F:D4:36:A8:F5:41:C6:59:ED:6F:31:98
Authority key identifier: 19:25:F4:72:A8:D6:76:13:96:C3:C6:EE:C4:E1:05:78:9F:4F:D8:93
Certificate issuer:       /CN=1925F472A8D6761396C3C6EEC4E105789F4FD893
Certificate serial:       7A3F9685ED9C7EC2765475BA0FC4B70BAFA6CB1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1925F472A8D6761396C3C6EEC4E105789F4FD893.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8W9qBKDYvfx7gRUp98XPwmMEwCkqUQsou1Jyeb5Jx8pa/0/1925F472A8D6761396C3C6EEC4E105789F4FD893.mft
Manifest number:          03B3
Signing time:             Thu 16 Jun 2022 23:23:17 +0000
Manifest this update:     Thu 16 Jun 2022 23:18:17 +0000
Manifest next update:     Sat 18 Jun 2022 00:29:17 +0000
Files and hashes:         1: 1925F472A8D6761396C3C6EEC4E105789F4FD893.crl (hash: vwOkffFBbOFWWqsKc2ucOkCXovrL2f69z1BjK5A6YJo=)
                          2: 323830343a326338303a3a2f33322d3334203d3e20323635323233.roa (hash: GV8YNaxlCw+67UUhENREbqvf7GULqmZdOxYeoow4bHI=)
                          3: 3136382e302e34382e302f32322d3234203d3e20323635323233.roa (hash: 7IH9SiZJtkqKvjVqIHu76bwqhTbGOJGnbE+JzvG/w7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3f:96:85:ed:9c:7e:c2:76:54:75:ba:0f:c4:b7:0b:af:a6:cb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1925F472A8D6761396C3C6EEC4E105789F4FD893
        Validity
            Not Before: Jun 16 23:18:17 2022 GMT
            Not After : Jun 18 00:29:17 2022 GMT
        Subject: CN=FD8CFF2249BBA7BD6FD436A8F541C659ED6F3198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:38:93:62:8d:eb:52:60:3b:3c:55:48:c5:
                    a5:d5:5c:dc:ce:79:80:ef:75:ef:6e:cf:6f:5c:82:
                    ad:6b:c8:05:ed:18:fa:c8:83:df:72:48:b8:cb:d4:
                    30:dc:b0:86:11:6c:79:70:ba:42:0b:5e:24:ac:ef:
                    63:3b:7f:a5:eb:93:d4:22:ae:c8:21:6e:7e:ea:69:
                    78:3a:46:bc:68:75:a9:28:fa:55:0d:f8:e4:c2:62:
                    0c:0e:cd:92:08:3a:75:73:b8:94:87:53:78:0e:2d:
                    4d:99:bf:e9:64:f5:86:0a:f4:f7:bf:a3:cf:42:06:
                    aa:b3:b4:6f:cd:80:69:c7:2d:db:66:ea:14:72:9c:
                    fa:75:19:e1:c7:8c:d9:e1:e2:7b:8c:fa:cb:62:33:
                    8d:2c:59:c8:06:79:7c:88:7a:91:31:95:f5:52:cb:
                    22:3d:9e:b9:65:e1:7e:e2:b4:20:09:46:92:bd:3e:
                    cf:dc:84:bf:fd:7d:c7:14:84:81:1b:87:7c:eb:c4:
                    8f:c1:cf:c5:c9:45:54:a6:e0:94:03:01:76:0b:40:
                    39:07:92:69:00:86:c2:20:57:74:19:73:47:a1:f5:
                    5b:41:b7:08:7b:94:62:79:8c:66:a6:2f:34:39:f8:
                    8f:c5:33:ff:ab:1a:dd:79:9c:2c:ba:86:a8:3f:47:
                    47:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8C:FF:22:49:BB:A7:BD:6F:D4:36:A8:F5:41:C6:59:ED:6F:31:98
            X509v3 Authority Key Identifier:
                keyid:19:25:F4:72:A8:D6:76:13:96:C3:C6:EE:C4:E1:05:78:9F:4F:D8:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8W9qBKDYvfx7gRUp98XPwmMEwCkqUQsou1Jyeb5Jx8pa/0/1925F472A8D6761396C3C6EEC4E105789F4FD893.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1925F472A8D6761396C3C6EEC4E105789F4FD893.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8W9qBKDYvfx7gRUp98XPwmMEwCkqUQsou1Jyeb5Jx8pa/0/1925F472A8D6761396C3C6EEC4E105789F4FD893.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:28:92:d1:60:58:0c:96:62:aa:e9:97:2e:fd:a3:42:9b:9d:
         0a:51:bb:a5:5e:db:1a:25:c6:bc:56:b1:6e:f0:17:47:6e:47:
         d1:22:d1:91:0c:ff:2c:49:20:49:d7:c2:60:32:cd:29:d3:be:
         f8:2b:0d:81:92:96:c5:be:aa:4b:ca:46:52:ba:60:df:85:81:
         0a:db:c6:87:92:e1:f0:71:ff:c9:5e:cd:1a:c6:dd:bc:20:7a:
         3b:bb:ed:d7:f7:1d:ca:57:7b:2a:c6:5b:59:b9:30:a6:e7:9f:
         84:24:2e:11:16:72:58:4b:9c:bb:45:be:ce:e4:47:1c:8c:19:
         88:5c:55:a1:cd:3d:d0:66:0c:b5:7e:2f:e6:ad:e4:17:68:8c:
         6e:d8:87:86:fd:ef:fa:fe:ec:b4:ef:b1:f5:9d:e1:a8:40:e5:
         87:63:1d:dd:93:37:b7:88:c6:15:36:e8:e3:ae:e0:35:58:aa:
         52:ae:34:4a:ea:3c:7c:31:25:e2:c1:a8:20:6d:5e:e0:e2:b8:
         18:3e:4c:0a:a6:ff:de:f9:99:d3:d2:05:bb:a9:fb:40:0f:48:
         1f:6f:68:57:75:4d:8b:3b:41:b9:68:fd:41:86:81:a8:85:b2:
         05:6d:e9:25:cc:b7:8b:50:58:e0:6f:49:c0:8f:95:6f:f6:d6:
         96:2e:73:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----