Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/2F959A25F3A240E72E50647C8B05EE9AC5D7D554.mft
File:                     2F959A25F3A240E72E50647C8B05EE9AC5D7D554.mft (raw, json)
Hash identifier:          gI1oj5EcpyM5i/oHe2li8203sqga2n9qe1eUYHnRZXY=
Subject key identifier:   D7:89:CB:AD:AD:72:D8:41:A6:63:EF:0C:18:25:98:67:95:A0:18:39
Authority key identifier: 2F:95:9A:25:F3:A2:40:E7:2E:50:64:7C:8B:05:EE:9A:C5:D7:D5:54
Certificate issuer:       /CN=2F959A25F3A240E72E50647C8B05EE9AC5D7D554
Certificate serial:       136A274E572A6FAB093975BE4048D2C1D68FE557
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F959A25F3A240E72E50647C8B05EE9AC5D7D554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/2F959A25F3A240E72E50647C8B05EE9AC5D7D554.mft
Manifest number:          B3
Signing time:             Tue 13 Jun 2023 22:25:06 +0000
Manifest this update:     Tue 13 Jun 2023 22:20:06 +0000
Manifest next update:     Thu 15 Jun 2023 00:08:06 +0000
Files and hashes:         1: 323830343a3838633a3a2f33322d3333203d3e203532383732.roa (hash: FIW8ueaygv9glIYvwOh/8MtIY/2W9ptONwMMVlK0tjg=)
                          2: 2F959A25F3A240E72E50647C8B05EE9AC5D7D554.crl (hash: 9yFF+TzM4BcJS6aTEucYej4AVfgXT8mu7/AjDZyhI9Y=)
                          3: 323830343a3838633a3a2f33322d3332203d3e203532383732.roa (hash: 7MX90gc6+mUmupb946C8rzvk9CKC5Ni0WmlsASksiek=)
                          4: 3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa (hash: PdP8qYENtnObdA0vGYgdAfXHEaIf44AE6I1ClwcQVBM=)
                          5: 3136382e302e3233362e302f32322d3234203d3e203532383732.roa (hash: U8xCCyyeGgmBQD34yVXDRtTEpoIlUZjBFEu+g7+Cgaw=)
                          6: 3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa (hash: oKgvmfYu03DC2Q5PVLY1MUP7/6zZn8/fFoAihR2VKkg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6a:27:4e:57:2a:6f:ab:09:39:75:be:40:48:d2:c1:d6:8f:e5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F959A25F3A240E72E50647C8B05EE9AC5D7D554
        Validity
            Not Before: Jun 13 22:20:06 2023 GMT
            Not After : Jun 15 00:08:06 2023 GMT
        Subject: CN=D789CBADAD72D841A663EF0C1825986795A01839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:61:80:a3:ed:49:d9:91:f2:c5:7d:a3:35:
                    d9:2b:c9:f8:a9:83:19:53:32:31:fa:d0:a4:fb:1a:
                    20:60:bc:37:9e:a4:85:93:58:c9:36:1b:ec:00:aa:
                    a4:51:27:80:ad:8c:a6:ed:2c:bf:2d:83:ac:33:39:
                    b0:e2:83:67:1d:df:d0:7c:d3:c3:31:e2:56:80:8b:
                    f5:9d:1b:1a:35:b9:cb:99:ab:58:79:3a:57:4d:ad:
                    42:80:65:ea:7d:bf:30:24:2f:23:5a:67:28:46:f1:
                    d7:a4:d3:53:74:fc:9e:ce:9c:b9:ed:e4:5f:b5:d6:
                    42:f7:fa:c0:d6:c1:20:96:6a:10:b0:5a:0b:8a:bf:
                    81:df:28:98:73:0f:27:5d:cb:e6:e1:74:c6:c4:d3:
                    ad:b5:d9:47:2c:72:0b:cd:1a:75:20:f8:92:4a:19:
                    33:45:4d:48:d0:e8:24:32:5c:22:34:04:6e:3d:c1:
                    01:df:7a:29:e1:f3:58:7f:91:00:20:73:b0:51:ab:
                    ca:1d:23:3b:d4:de:de:2b:36:90:04:c3:53:68:bd:
                    d4:97:60:4a:88:4f:53:60:dc:06:0c:6d:89:3f:8c:
                    48:36:c3:af:3c:6a:7d:14:a3:55:bf:c9:f3:b5:c6:
                    44:d2:4f:d8:96:ba:4a:2b:b8:2f:0e:34:5f:27:c7:
                    9d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:89:CB:AD:AD:72:D8:41:A6:63:EF:0C:18:25:98:67:95:A0:18:39
            X509v3 Authority Key Identifier:
                keyid:2F:95:9A:25:F3:A2:40:E7:2E:50:64:7C:8B:05:EE:9A:C5:D7:D5:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/2F959A25F3A240E72E50647C8B05EE9AC5D7D554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F959A25F3A240E72E50647C8B05EE9AC5D7D554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/2F959A25F3A240E72E50647C8B05EE9AC5D7D554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:4d:4f:81:a8:b4:2b:df:cf:66:1f:24:1c:fd:35:eb:d5:
         27:3a:79:2b:1b:bc:8a:69:79:4d:4d:81:93:bc:21:88:36:f8:
         de:a8:f4:d6:d1:9f:4e:1b:88:ea:3e:ce:38:b4:58:55:ed:9a:
         32:93:6a:34:fd:fe:20:e2:3f:38:5f:de:ac:f9:da:3b:67:12:
         9d:73:e5:b3:e4:3d:5a:27:6f:fd:56:98:c2:30:18:4c:ae:e3:
         3f:92:27:b7:ca:78:4d:8b:6f:b4:75:f7:dc:cf:15:0c:12:6b:
         86:ab:b4:6e:e5:b1:1d:95:40:39:84:30:aa:4f:e0:2e:63:fb:
         e4:4a:25:17:0b:06:69:c5:ab:6e:61:33:9d:5b:48:a8:51:be:
         96:67:2c:26:86:d3:70:82:dc:e1:51:81:87:7e:52:eb:85:c7:
         66:e2:28:e3:27:0a:f2:50:3c:fd:39:69:54:bd:7b:3e:9b:c5:
         a8:22:5b:79:bd:93:9e:1c:ff:3f:4e:d0:4d:b9:b3:74:4c:26:
         9a:a4:cc:f6:0c:99:76:1d:e5:3b:19:54:90:93:64:ca:d5:b2:
         23:63:b3:16:19:c3:73:65:a4:cb:6d:0d:0e:0b:12:80:fb:a5:
         ea:a4:a8:fd:b0:a8:30:c6:d1:f6:81:bb:91:f2:f0:3f:7a:06:
         62:f5:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----