Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/D425FCFFC1F547E7F4B70F894775E8A3E54F5533.mft
File:                     D425FCFFC1F547E7F4B70F894775E8A3E54F5533.mft (raw, json)
Hash identifier:          YfXj5ae1gg783Qy+OBUV4np2pRVt3IrpBXGqF2hPupU=
Subject key identifier:   1F:94:E9:A7:2A:CB:35:25:1C:47:0B:D7:E6:85:13:0E:4D:42:FF:F1
Authority key identifier: D4:25:FC:FF:C1:F5:47:E7:F4:B7:0F:89:47:75:E8:A3:E5:4F:55:33
Certificate issuer:       /CN=D425FCFFC1F547E7F4B70F894775E8A3E54F5533
Certificate serial:       124C652C1D60C48C60E31F9DDCE862CC0EEB72B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D425FCFFC1F547E7F4B70F894775E8A3E54F5533.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/D425FCFFC1F547E7F4B70F894775E8A3E54F5533.mft
Manifest number:          0109
Signing time:             Wed 15 Mar 2023 11:11:53 +0000
Manifest this update:     Wed 15 Mar 2023 11:06:53 +0000
Manifest next update:     Thu 16 Mar 2023 11:39:53 +0000
Files and hashes:         1: 34352e3138352e34342e302f32322d3234203d3e20323639333537.roa (hash: 9uoqNZuxeKTx9Jx2pJ8HOXY9H3saK5ooRukKiVQbcoE=)
                          2: D425FCFFC1F547E7F4B70F894775E8A3E54F5533.crl (hash: rVc383gh01uh4OLLdD+dmTtjjeQv+Obre1Ngbodyv+w=)
                          3: 323830343a363336303a3a2f33322d3438203d3e20323639333537.roa (hash: Tl49ATEDcHKFkL0+vnA/BfUqKM+UDYi7pzEpGm410Z0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4c:65:2c:1d:60:c4:8c:60:e3:1f:9d:dc:e8:62:cc:0e:eb:72:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D425FCFFC1F547E7F4B70F894775E8A3E54F5533
        Validity
            Not Before: Mar 15 11:06:53 2023 GMT
            Not After : Mar 16 11:39:53 2023 GMT
        Subject: CN=1F94E9A72ACB35251C470BD7E685130E4D42FFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:61:51:91:77:cc:99:13:54:62:4b:b1:6b:
                    14:7b:ba:81:10:61:53:ef:6c:98:d2:97:93:31:1d:
                    d6:5b:71:67:90:1d:95:fb:0f:ae:3d:1c:af:63:ad:
                    e9:34:79:20:bf:ab:a0:2f:ef:aa:45:fd:0a:73:21:
                    96:a5:5c:f2:71:4b:cb:c3:c8:f3:68:93:a3:2e:89:
                    20:a0:87:ba:9f:87:d2:a1:49:21:3d:4d:b2:80:91:
                    ed:2a:70:dc:26:76:59:05:4f:a2:64:2d:4e:9d:5f:
                    07:26:da:bd:4c:fc:e4:b1:66:f7:4a:6d:d5:3b:5f:
                    12:27:de:cd:3d:e2:b1:61:5e:a8:8a:65:ae:6b:e6:
                    30:2f:72:85:ea:1e:0b:be:e4:32:d1:c0:40:8d:6b:
                    e3:d0:0a:15:61:26:21:37:0e:35:cb:96:25:33:d7:
                    da:2b:2d:c1:b0:60:39:90:c7:57:b7:4a:74:40:02:
                    59:09:fa:13:e0:0d:cd:aa:81:7e:2c:d0:34:38:25:
                    3a:2b:a6:89:12:2a:3d:eb:6b:b0:1c:8f:cc:87:57:
                    d3:1f:a3:d4:ce:c3:8d:05:8c:8e:c8:df:74:9e:08:
                    ab:d9:30:a4:01:2f:b4:88:cc:66:17:fd:d4:9c:42:
                    12:51:74:01:72:e2:21:43:89:29:f7:e6:ad:e5:19:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:E9:A7:2A:CB:35:25:1C:47:0B:D7:E6:85:13:0E:4D:42:FF:F1
            X509v3 Authority Key Identifier:
                keyid:D4:25:FC:FF:C1:F5:47:E7:F4:B7:0F:89:47:75:E8:A3:E5:4F:55:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/D425FCFFC1F547E7F4B70F894775E8A3E54F5533.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D425FCFFC1F547E7F4B70F894775E8A3E54F5533.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/D425FCFFC1F547E7F4B70F894775E8A3E54F5533.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f9:16:d0:ea:4a:ad:de:d3:a0:aa:e7:40:b2:ef:6f:98:12:
         e1:fa:35:bb:99:79:13:76:5c:e0:25:94:4c:89:9d:f8:1a:71:
         f2:04:4e:49:00:c2:95:78:e6:5e:0b:6f:d7:7a:c5:c3:92:86:
         3f:5b:08:f5:8f:0a:08:37:81:14:3d:5d:5a:31:ba:3c:91:51:
         53:ed:13:f3:e1:8d:b8:29:83:f5:78:38:54:9d:7f:db:dc:39:
         3d:2b:dd:42:82:51:5c:fd:ca:2f:8b:fa:7b:f3:2a:e4:66:90:
         cd:27:79:b3:f7:6d:e6:31:f2:7a:24:85:b9:fb:74:94:b4:17:
         e1:e2:07:c4:62:93:ab:30:39:94:42:b1:ba:6a:70:ad:d3:4b:
         46:23:f9:b8:28:e9:d3:61:18:69:f1:41:5b:ba:8b:05:9c:3f:
         f6:e3:51:aa:d9:2a:63:33:e5:e0:77:b2:b4:99:18:02:e1:9c:
         b0:eb:57:b7:3a:e4:cc:ec:d6:7a:df:ed:a9:b6:d4:f5:b4:70:
         15:9f:f2:60:cc:46:75:c4:76:57:43:d5:86:3a:d8:d2:fa:7f:
         83:da:35:17:a4:d9:81:e4:ac:88:a6:38:58:2e:aa:09:22:56:
         8d:c0:8b:a7:26:b0:38:08:1b:95:7c:20:0c:6b:6d:4d:36:92:
         35:42:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----