Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/0B25F573302FB26B506E7071178673626D2EA374.mft
File:                     0B25F573302FB26B506E7071178673626D2EA374.mft (raw, json)
Hash identifier:          0meHoUnEsF0jrbSY5fk5/TnhS8A51OGzSF4tKjhigVM=
Subject key identifier:   68:9D:74:CB:7F:C7:36:D5:BB:C9:91:FB:F5:84:0D:1F:02:95:7A:D5
Authority key identifier: 0B:25:F5:73:30:2F:B2:6B:50:6E:70:71:17:86:73:62:6D:2E:A3:74
Certificate issuer:       /CN=0B25F573302FB26B506E7071178673626D2EA374
Certificate serial:       691C4F031E5D3B70768E3DF5E1801CA7944BBB89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B25F573302FB26B506E7071178673626D2EA374.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/0B25F573302FB26B506E7071178673626D2EA374.mft
Manifest number:          0141
Signing time:             Tue 01 Aug 2023 14:50:55 +0000
Manifest this update:     Tue 01 Aug 2023 14:45:55 +0000
Manifest next update:     Wed 02 Aug 2023 17:53:55 +0000
Files and hashes:         1: 0B25F573302FB26B506E7071178673626D2EA374.crl (hash: pJOAIZa6escVNv0DZqZC38kFlBPtYwSPdENrW9LMJ40=)
                          2: 34352e372e3139322e302f32332d3234203d3e20323636363037.roa (hash: uVGZcHHkDCqGLOumYjNvvAczbj2CRgWoRCFLfLrHt3k=)
                          3: 34352e372e3139322e302f32322d3232203d3e20323636363037.roa (hash: CPY67sL1l6IvC3rihe1s95jwMQb6RIp8bR2a380VTP8=)
                          4: 323830343a336539343a3a2f33322d3438203d3e20323636363037.roa (hash: QaQpEMiSVQ+YEYLXaKzKR0z4WtV+GCZ0ebsc56mD7Jg=)
                          5: 34352e372e3139342e302f32332d3234203d3e20323636363037.roa (hash: rG/dRrBBO18goE0rEv3/0mdRYIv61AeDlh+XQXLFgIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1c:4f:03:1e:5d:3b:70:76:8e:3d:f5:e1:80:1c:a7:94:4b:bb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B25F573302FB26B506E7071178673626D2EA374
        Validity
            Not Before: Aug  1 14:45:55 2023 GMT
            Not After : Aug  2 17:53:55 2023 GMT
        Subject: CN=689D74CB7FC736D5BBC991FBF5840D1F02957AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:a5:68:67:03:1b:ba:d6:38:36:36:ea:dd:
                    03:07:74:d2:27:99:2e:6e:9c:c9:c0:9c:a6:48:fc:
                    2a:6f:fe:10:6a:22:90:a4:59:8a:cd:aa:83:e9:6e:
                    8e:67:4b:fc:0e:f6:3d:63:35:c0:41:0f:d7:05:73:
                    4a:c4:bf:cf:f4:fa:44:ea:89:68:be:87:35:fd:9a:
                    92:70:34:a6:1c:65:e8:7d:8a:d1:0b:71:7f:7e:73:
                    7d:c4:15:9b:22:68:19:5c:b9:05:54:fa:69:0f:fd:
                    fe:c3:3e:61:1f:c9:09:ce:6c:d9:28:92:41:fc:8c:
                    2f:15:ae:bf:d1:cc:13:59:40:0e:1b:88:f5:43:c6:
                    08:39:14:43:56:0c:28:1f:97:d3:36:da:91:c4:a4:
                    c6:47:d9:ae:42:0b:e0:70:96:40:40:48:cc:b8:01:
                    ed:55:d6:b0:35:72:1a:da:2d:d6:24:e6:74:f4:72:
                    6d:b7:7e:16:81:d5:83:ea:7f:c2:a0:59:49:08:12:
                    3e:04:76:b5:88:03:d6:66:0a:aa:df:f4:3a:d0:80:
                    d6:2f:e9:66:28:7f:47:70:3a:a1:8b:44:c6:67:ba:
                    f3:47:a3:b6:80:b0:91:ae:47:94:b2:9f:a6:e5:db:
                    b0:eb:b3:50:a8:89:cb:2a:69:c0:6c:27:62:ac:d5:
                    ab:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9D:74:CB:7F:C7:36:D5:BB:C9:91:FB:F5:84:0D:1F:02:95:7A:D5
            X509v3 Authority Key Identifier:
                keyid:0B:25:F5:73:30:2F:B2:6B:50:6E:70:71:17:86:73:62:6D:2E:A3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/0B25F573302FB26B506E7071178673626D2EA374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B25F573302FB26B506E7071178673626D2EA374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/0B25F573302FB26B506E7071178673626D2EA374.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2f:fb:b6:c3:e1:3a:49:ed:ee:2f:2d:03:21:13:27:f0:14:
         46:8f:00:29:81:9f:72:e7:e5:52:d6:40:17:a1:3a:3a:55:73:
         e3:cf:67:b6:c6:f4:da:91:95:b8:be:54:03:f2:e9:0e:17:b9:
         48:25:b9:a3:12:2b:85:cd:08:d4:fa:b4:68:2e:d1:04:90:63:
         10:72:97:c2:da:3a:94:92:6e:74:8c:98:fa:f1:d7:85:56:f9:
         6d:33:94:16:31:24:02:3f:7b:c1:48:14:4a:1d:7c:13:d5:2e:
         85:06:8d:23:bd:55:cb:51:ca:66:b8:8b:5c:ea:52:33:36:40:
         2d:05:06:a2:2f:50:46:9f:b7:09:b3:9c:d7:ab:93:fc:33:63:
         fc:04:6b:b9:9a:3e:51:d3:e4:01:ef:3e:23:08:39:21:bc:b9:
         56:85:79:7c:55:a8:65:f8:33:7a:86:b6:93:3c:ff:77:5a:3b:
         cb:a8:e4:4f:78:0e:65:0d:17:df:79:97:d7:93:70:89:f4:89:
         65:da:eb:ff:77:e9:6a:39:be:5a:8f:97:e7:63:0a:05:71:b3:
         5b:35:21:94:77:de:dd:d2:4a:5e:57:70:14:aa:bd:8a:61:48:
         26:16:8d:82:e5:3b:05:07:4e:24:90:aa:13:d4:dc:26:77:8d:
         b2:91:36:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaRxPAx5dO3B2jj314YAcp5RLu4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIyNUY1NzMzMDJGQjI2QjUwNkU3MDcxMTc4NjczNjI2
RDJFQTM3NDAeFw0yMzA4MDExNDQ1NTVaFw0yMzA4MDIxNzUzNTVaMDMxMTAvBgNV
BAMTKDY4OUQ3NENCN0ZDNzM2RDVCQkM5OTFGQkY1ODQwRDFGMDI5NTdBRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH96VoZwMbutY4Njbq3QMHdNIn
mS5unMnAnKZI/Cpv/hBqIpCkWYrNqoPpbo5nS/wO9j1jNcBBD9cFc0rEv8/0+kTq
iWi+hzX9mpJwNKYcZeh9itELcX9+c33EFZsiaBlcuQVU+mkP/f7DPmEfyQnObNko
kkH8jC8Vrr/RzBNZQA4biPVDxgg5FENWDCgfl9M22pHEpMZH2a5CC+BwlkBASMy4
Ae1V1rA1chraLdYk5nT0cm23fhaB1YPqf8KgWUkIEj4EdrWIA9ZmCqrf9DrQgNYv
6WYof0dwOqGLRMZnuvNHo7aAsJGuR5Syn6bl27Drs1CoicsqacBsJ2Ks1auXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaJ10y3/HNtW7yZH79YQNHwKVetUwHwYDVR0j
BBgwFoAUCyX1czAvsmtQbnBxF4ZzYm0uo3QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXc0RmQydjRzUTN4d210VkNWS2RpWnpzcHJWb2tmVGtLWERKOUpCWmVU
aHAvMC8wQjI1RjU3MzMwMkZCMjZCNTA2RTcwNzExNzg2NzM2MjZEMkVBMzc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBCMjVGNTczMzAyRkIyNkI1
MDZFNzA3MTE3ODY3MzYyNkQyRUEzNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXc0RmQydjRzUTN4d210VkNWS2RpWnpzcHJWb2tmVGtLWERKOUpCWmVUaHAvMC8w
QjI1RjU3MzMwMkZCMjZCNTA2RTcwNzExNzg2NzM2MjZEMkVBMzc0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfy/7tsPhOknt7i8tAyETJ/AURo8AKYGfcuflUtZAF6E6OlVz489ntsb02pGV
uL5UA/LpDhe5SCW5oxIrhc0I1Pq0aC7RBJBjEHKXwto6lJJudIyY+vHXhVb5bTOU
FjEkAj97wUgUSh18E9UuhQaNI71Vy1HKZriLXOpSMzZALQUGoi9QRp+3CbOc16uT
/DNj/ARruZo+UdPkAe8+Iwg5Iby5VoV5fFWoZfgzeoa2kzz/d1o7y6jkT3gOZQ0X
33mX15NwifSJZdrr/3fpajm+Wo+X52MKBXGzWzUhlHfe3dJKXldwFKq9imFIJhaN
guU7BQdOJJCqE9TcJneNspE2Bw==
-----END CERTIFICATE-----