Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.mft
File:                     25E432BB134D4E238BDA77694201D4BC41974E05.mft (raw, json)
Hash identifier:          bJIh6Jew4Qg4j6+n+GjrR/1zDnMqMGoIt5hLmTDa2d4=
Subject key identifier:   D0:20:67:99:3B:31:4C:B5:1F:89:41:ED:BA:E5:60:43:4E:2F:09:CA
Authority key identifier: 25:E4:32:BB:13:4D:4E:23:8B:DA:77:69:42:01:D4:BC:41:97:4E:05
Certificate issuer:       /CN=25E432BB134D4E238BDA77694201D4BC41974E05
Certificate serial:       3EDC40380A4B488484D783DC6E5F90FF7D797B2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E432BB134D4E238BDA77694201D4BC41974E05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.mft
Manifest number:          85
Signing time:             Thu 11 Jul 2024 10:11:48 +0000
Manifest this update:     Thu 11 Jul 2024 10:06:48 +0000
Manifest next update:     Fri 12 Jul 2024 10:32:48 +0000
Files and hashes:         1: 25E432BB134D4E238BDA77694201D4BC41974E05.crl (hash: KHoEGx24H7bslH2GnT9TKbFTo1LSKeL5zRscV+Jm7c0=)
                          2: 323830343a373464383a3a2f33322d313238203d3e20323731303037.roa (hash: /f7pZJfP8CFW2eLA3vgWaZp+8hN9x8wizgtPE6q6+eo=)
                          3: 3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa (hash: W9u+WVSMVBeRkR4jCyqMDk3VKdly7uSQiyeYFnxOlf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:dc:40:38:0a:4b:48:84:84:d7:83:dc:6e:5f:90:ff:7d:79:7b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E432BB134D4E238BDA77694201D4BC41974E05
        Validity
            Not Before: Jul 11 10:06:48 2024 GMT
            Not After : Jul 12 10:32:48 2024 GMT
        Subject: CN=D02067993B314CB51F8941EDBAE560434E2F09CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c9:5b:a2:ec:09:41:b9:87:8c:88:c4:e9:0d:
                    aa:aa:7a:3f:17:02:6d:3d:7d:4e:cd:52:1f:0f:5d:
                    46:9e:7b:80:c1:80:df:ea:61:12:34:ad:68:68:ca:
                    1b:35:0f:16:61:59:8a:d8:67:88:6a:27:4c:ea:b2:
                    5f:b4:06:ef:95:f7:b8:be:c6:8f:63:b4:2b:19:42:
                    61:95:2b:0c:5a:1f:63:52:42:3f:bb:a6:bb:a1:57:
                    d6:5e:db:a0:dd:5f:f6:4d:61:6d:96:30:71:04:b1:
                    33:c3:eb:18:f2:1e:b4:00:88:03:3b:89:fe:26:57:
                    74:79:c8:ee:10:9e:0f:80:71:c4:0c:e2:ec:0b:de:
                    ff:db:2a:38:72:76:4f:58:01:da:eb:dd:b5:2e:bd:
                    a9:aa:19:e2:d1:99:c4:5a:5a:51:84:98:da:51:54:
                    4b:cd:92:92:71:cd:da:b3:0d:4f:19:2b:fa:51:6f:
                    17:6a:48:40:76:df:a9:d9:1c:1b:71:62:2f:12:3d:
                    e6:71:4b:7c:70:b7:da:43:30:87:46:6e:ff:6b:66:
                    34:e3:a2:0a:4b:bc:a0:d1:7c:c1:0c:28:ad:f3:a4:
                    7e:e5:8c:e8:56:f3:be:a6:6b:ae:42:08:78:97:21:
                    3d:08:76:02:34:cf:46:cf:c8:01:69:0d:d1:ec:d4:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:20:67:99:3B:31:4C:B5:1F:89:41:ED:BA:E5:60:43:4E:2F:09:CA
            X509v3 Authority Key Identifier:
                keyid:25:E4:32:BB:13:4D:4E:23:8B:DA:77:69:42:01:D4:BC:41:97:4E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E432BB134D4E238BDA77694201D4BC41974E05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e9:99:0c:00:56:de:7a:90:ff:7e:27:1e:5b:8f:54:5a:c6:
         36:a0:75:b4:b6:51:96:41:0c:28:49:83:57:0b:21:db:ad:dc:
         71:97:49:e6:95:7b:36:2c:5a:ea:e4:1a:9c:f4:56:ed:4a:de:
         d2:7d:95:5b:f1:b9:0b:51:b1:a0:96:3c:52:3a:41:83:40:94:
         1f:94:fa:16:ca:66:8b:81:b1:09:68:b2:e2:f9:be:7e:4a:29:
         7f:a4:37:ae:75:10:48:1f:1a:6f:a4:65:b3:96:77:4b:db:fe:
         76:e7:8b:a0:fd:65:f3:8d:97:9e:be:ed:b7:56:9e:83:78:dc:
         dd:05:3b:a0:ed:4f:36:df:ac:2d:a3:ac:7b:fd:ec:5c:5a:04:
         ab:3e:0a:6d:d6:3d:f2:a9:6a:31:76:a5:f3:bb:5b:10:50:f2:
         43:39:9f:84:1a:31:bf:6a:bb:33:58:e8:91:83:8d:8b:09:14:
         21:1d:9f:f8:2e:2e:8f:1b:50:48:5d:68:8c:44:57:a4:70:e9:
         20:92:9e:16:be:71:b3:cd:7f:d4:5d:31:2a:26:3b:e3:ac:f6:
         20:4f:d5:07:2b:89:af:b8:8a:30:d5:aa:0f:d9:d7:5c:51:1f:
         db:72:fb:86:fa:1c:d1:33:b2:3a:f8:55:e6:f1:0f:83:38:26:
         b3:4c:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----