Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.mft
File:                     25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.mft (raw, json)
Hash identifier:          1XiNMiaScQhBphpe8hnLCQoM9dbuNWcfaTNhdEE/IKM=
Subject key identifier:   B5:02:18:87:1D:7E:FF:5B:04:9C:3E:B0:C6:D1:27:82:46:29:2F:F1
Authority key identifier: 25:E5:31:17:06:B1:D0:0E:D4:AC:F3:15:CA:FE:90:56:8A:BC:9A:AD
Certificate issuer:       /CN=25E5311706B1D00ED4ACF315CAFE90568ABC9AAD
Certificate serial:       40F8D7D8334E41C21B8C4518A82B6E31B60D4E6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.mft
Manifest number:          E2
Signing time:             Fri 10 Mar 2023 07:11:44 +0000
Manifest this update:     Fri 10 Mar 2023 07:06:44 +0000
Manifest next update:     Sat 11 Mar 2023 10:56:44 +0000
Files and hashes:         1: 323830343a383565383a3a2f33322d3438203d3e20323632373032.roa (hash: vwjSkJTCKhbXkSGE5zKMAYuvLKsssejrAks639CDMNg=)
                          2: 25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.crl (hash: L5pcVk4oolgU492DobN2MUSYxNpBC0JDOyR3JnOliAM=)
                          3: 3138372e3130332e38302e302f32302d3234203d3e20323632373032.roa (hash: LoeZho7WaCxK6R6yvubarDsj/aqbCyFTPLsFCCw/G5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f8:d7:d8:33:4e:41:c2:1b:8c:45:18:a8:2b:6e:31:b6:0d:4e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E5311706B1D00ED4ACF315CAFE90568ABC9AAD
        Validity
            Not Before: Mar 10 07:06:44 2023 GMT
            Not After : Mar 11 10:56:44 2023 GMT
        Subject: CN=B50218871D7EFF5B049C3EB0C6D1278246292FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:10:0f:14:74:15:c7:41:bd:95:0e:cf:55:
                    42:21:25:82:4b:e6:fa:9c:ee:62:2b:ce:a3:97:4c:
                    f9:d4:ce:90:ce:5f:c1:d1:c7:1e:be:86:ae:3b:dc:
                    e1:9d:95:e7:94:3b:4b:33:9b:6a:a5:31:dc:02:27:
                    6f:6b:78:c9:6a:8a:b3:31:98:8f:91:81:4c:a8:18:
                    0a:35:ed:a6:86:58:71:de:29:ec:c9:aa:07:15:18:
                    89:52:88:0d:cf:c8:c2:f5:a1:36:de:82:30:af:f6:
                    8c:79:01:70:91:e9:a7:1d:da:af:a5:37:a3:f7:51:
                    0d:4f:80:e4:e1:b3:e3:4f:76:5c:07:0c:e6:73:f0:
                    32:7d:ae:e8:b1:17:d7:25:82:8f:12:09:6c:92:4f:
                    04:01:48:a0:ff:58:47:0b:e3:51:1d:3f:35:47:54:
                    19:de:b4:92:77:d4:32:33:b4:8e:8d:f0:39:fd:a1:
                    13:b8:09:1f:66:28:69:14:83:a2:80:d3:65:16:8f:
                    df:a0:1f:a3:bd:6c:b8:ad:7c:cc:24:58:f5:3c:04:
                    ae:c6:13:2e:08:61:63:1b:a2:11:9f:51:45:dd:c6:
                    d9:4d:24:dd:18:cf:b1:b5:a4:99:c0:36:7f:28:29:
                    7b:93:26:3e:b6:a0:5d:e4:9b:8e:da:b7:2d:c1:c6:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:02:18:87:1D:7E:FF:5B:04:9C:3E:B0:C6:D1:27:82:46:29:2F:F1
            X509v3 Authority Key Identifier:
                keyid:25:E5:31:17:06:B1:D0:0E:D4:AC:F3:15:CA:FE:90:56:8A:BC:9A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:52:8b:9d:89:57:e6:99:65:6e:55:2c:03:63:7d:16:d8:
         a0:84:f4:d3:ca:30:38:dc:0d:46:6d:68:35:86:58:90:56:47:
         d0:64:a2:8f:88:36:2e:2c:67:ff:d4:23:37:6a:49:a6:a7:da:
         3c:d7:5e:61:ce:75:88:d9:67:4f:57:68:d1:1c:54:8d:37:10:
         ce:f7:5e:94:b6:d2:7f:d7:e3:bd:cc:3e:03:cf:c7:5a:20:be:
         a8:80:55:23:35:66:e0:64:d4:e0:87:1f:ab:f6:5c:89:e8:f0:
         29:94:4a:65:03:2b:84:ec:6c:43:95:3e:e3:46:77:0c:cc:9e:
         3e:41:dc:ea:09:08:3b:f6:7c:c8:61:01:cd:3a:ec:68:d9:3a:
         3c:3a:c2:82:5c:75:64:56:56:e6:76:ef:9b:68:b9:81:c4:fb:
         89:bc:1f:ff:35:23:e2:f2:ae:0b:c4:de:48:b1:a6:54:1a:f9:
         ba:4f:ad:94:18:f5:fb:15:08:cf:7c:b8:56:fd:1b:f3:1f:ca:
         1a:3f:e8:a6:df:7b:03:cb:96:93:af:fb:04:e0:99:e7:af:87:
         05:94:a9:43:05:da:92:c0:b8:bd:9d:40:db:2c:06:a2:29:31:
         d0:b2:cf:89:a1:82:e7:db:38:2f:c1:c5:cf:6c:c8:4b:c0:51:
         59:eb:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----