Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/25C3BCCAA0E5970DE8B188CF8292302196C30F1D.mft
File:                     25C3BCCAA0E5970DE8B188CF8292302196C30F1D.mft (raw, json)
Hash identifier:          rkhUX+1/zZNYMmmRLvNcoq1KK58wkyfWeJ/CeFDYg5U=
Subject key identifier:   8B:05:23:1C:CA:BF:5F:20:A9:3E:F0:8F:66:CE:7E:D6:3F:54:EA:BF
Authority key identifier: 25:C3:BC:CA:A0:E5:97:0D:E8:B1:88:CF:82:92:30:21:96:C3:0F:1D
Certificate issuer:       /CN=25C3BCCAA0E5970DE8B188CF8292302196C30F1D
Certificate serial:       7BE18CEA502C813018EC62D468AD02A8819D5C98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C3BCCAA0E5970DE8B188CF8292302196C30F1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/25C3BCCAA0E5970DE8B188CF8292302196C30F1D.mft
Manifest number:          13
Signing time:             Wed 19 Jul 2023 08:08:01 +0000
Manifest this update:     Wed 19 Jul 2023 08:03:01 +0000
Manifest next update:     Thu 20 Jul 2023 11:27:01 +0000
Files and hashes:         1: 3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa (hash: ya7kbjLvmQUxlWzK7VBacAUt+JDRBMIu3+Bdsnzkhik=)
                          2: 25C3BCCAA0E5970DE8B188CF8292302196C30F1D.crl (hash: 8cH6tAqubXjmajYs/5jl6obuISJ7JEYczJr0GW61KSk=)
                          3: 323830343a333838383a3a2f33322d3332203d3e20323636343834.roa (hash: 9JUNa2hNj6A2QzVgCKzhYtQPEXizXDHfzLLqrQOezw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e1:8c:ea:50:2c:81:30:18:ec:62:d4:68:ad:02:a8:81:9d:5c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C3BCCAA0E5970DE8B188CF8292302196C30F1D
        Validity
            Not Before: Jul 19 08:03:01 2023 GMT
            Not After : Jul 20 11:27:01 2023 GMT
        Subject: CN=8B05231CCABF5F20A93EF08F66CE7ED63F54EABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:35:b2:8f:8c:d2:ba:0d:6f:45:91:7c:0e:65:
                    c0:3f:31:f3:f5:03:f6:d3:98:da:c0:e9:1e:77:dc:
                    bd:44:39:cf:85:46:46:17:67:70:1e:54:de:28:50:
                    18:f3:82:ff:5b:75:0a:e8:e4:bd:5f:ad:25:ef:12:
                    a3:6c:da:04:3a:eb:5e:ec:13:1d:16:07:df:56:56:
                    89:d8:33:0f:39:93:d6:27:d2:e6:c1:ad:74:73:98:
                    ee:4f:02:3e:9d:8f:33:32:10:17:1b:ad:da:cd:09:
                    a1:55:55:4b:4e:f2:d1:9a:3c:9f:fa:e8:9a:46:2f:
                    bc:63:21:db:4c:e8:4a:05:ca:19:cf:c3:d4:ba:32:
                    4b:cd:cc:10:ec:19:9a:4f:f8:28:8e:3f:1a:df:7a:
                    b8:5f:3a:fa:69:00:77:07:bf:46:c8:eb:f3:54:7b:
                    9b:24:1d:84:f8:55:11:df:58:59:37:0d:39:e3:1a:
                    c3:2d:84:48:3c:fd:c0:ca:9d:4d:a6:11:5f:ce:68:
                    be:c2:82:cf:05:13:0b:4a:b2:53:45:d5:cd:66:ce:
                    03:ce:57:00:55:16:70:ff:b9:87:ca:2a:da:5c:09:
                    bf:e5:01:43:0d:28:7b:0d:b3:04:3b:34:e5:4e:0f:
                    80:86:e6:b0:ae:65:c0:97:8b:ad:c0:61:31:62:69:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:05:23:1C:CA:BF:5F:20:A9:3E:F0:8F:66:CE:7E:D6:3F:54:EA:BF
            X509v3 Authority Key Identifier:
                keyid:25:C3:BC:CA:A0:E5:97:0D:E8:B1:88:CF:82:92:30:21:96:C3:0F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/25C3BCCAA0E5970DE8B188CF8292302196C30F1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C3BCCAA0E5970DE8B188CF8292302196C30F1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/25C3BCCAA0E5970DE8B188CF8292302196C30F1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c9:0c:84:3c:2f:42:b6:b5:bf:e3:fa:23:7d:ef:27:0d:e3:
         d7:2f:64:44:40:07:60:7e:9a:51:80:41:65:96:eb:ba:54:71:
         bc:d2:b2:cb:2b:b2:ff:1c:71:b2:77:21:e3:c5:4f:de:6a:54:
         44:3d:9a:be:3d:38:e7:45:b4:1e:57:48:e3:5c:54:96:61:1f:
         e6:ed:39:a1:1b:d6:a6:e1:1d:c4:82:a6:5b:7c:d9:58:46:25:
         1f:a1:af:69:d4:f5:1a:00:af:b6:ba:c1:1d:30:e7:96:72:a9:
         52:e4:f8:34:df:a1:18:41:61:87:a6:ba:6d:ad:7d:7a:12:e1:
         22:b8:fa:d9:6a:04:1c:cf:64:b2:4f:da:03:42:db:c1:0c:35:
         d8:32:8e:26:41:7f:a4:44:f9:d5:49:d2:6d:35:73:80:f7:e1:
         3a:dc:51:6b:e1:44:fb:d5:7b:7c:4b:c3:b4:97:c5:7a:3f:f6:
         e3:88:57:f4:aa:53:9c:59:57:58:9b:93:15:50:bb:60:57:d3:
         cc:4a:25:1b:46:37:d0:94:37:c8:45:8d:5e:1c:58:60:60:d3:
         32:1c:e9:97:a5:92:68:fa:20:bd:c2:4f:ae:cc:e9:29:ad:37:
         7c:08:47:31:7d:2f:31:29:51:09:bb:72:9d:6c:a5:76:59:e6:
         42:58:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----