Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/11CF1DAA865E94BF55A7973E9151246D838C3946.mft
File:                     11CF1DAA865E94BF55A7973E9151246D838C3946.mft (raw, json)
Hash identifier:          pxC4k6VTUFjr0PwEDZGsLj9x6A1Z48SMurViJEqSwaE=
Subject key identifier:   2A:39:83:F1:5F:A9:C2:09:92:C1:4A:2D:DD:55:4D:3E:0B:ED:26:05
Authority key identifier: 11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46
Certificate issuer:       /CN=11CF1DAA865E94BF55A7973E9151246D838C3946
Certificate serial:       2C174915A95129A4134087392D40EBF8EEC3CAAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CF1DAA865E94BF55A7973E9151246D838C3946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/11CF1DAA865E94BF55A7973E9151246D838C3946.mft
Manifest number:          0149
Signing time:             Tue 04 Apr 2023 08:37:43 +0000
Manifest this update:     Tue 04 Apr 2023 08:32:43 +0000
Manifest next update:     Wed 05 Apr 2023 08:57:43 +0000
Files and hashes:         1: 11CF1DAA865E94BF55A7973E9151246D838C3946.crl (hash: vsEFcCR3eFdHOrGRNHDsB82zQ+O6RJG6dIcjuA1iznE=)
                          2: 323830343a313831343a3a2f33322d3334203d3e20323633323633.roa (hash: j4XELxuBkmw+CWWaY1zkL7l49/Ms5wLijuDsw2IxXOA=)
                          3: 3137302e3234342e3232302e302f32322d3234203d3e20323633323633.roa (hash: p5Z8WpDD2EirGXcqsipo38+9VY4Jh7rI6BqQjd5adFM=)
                          4: 3230302e33332e3132382e302f32312d3234203d3e20323633323633.roa (hash: eVWTnI+d00bgqImI4UYuvQfXkYt2qm0zFhfehQICUj8=)
                          5: 3133382e3132322e37322e302f32322d3234203d3e20323633323633.roa (hash: uWlZz1YTstr2Yg/sbOa/M9gfjwRBeTeP1u9Tz2oQPfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:17:49:15:a9:51:29:a4:13:40:87:39:2d:40:eb:f8:ee:c3:ca:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CF1DAA865E94BF55A7973E9151246D838C3946
        Validity
            Not Before: Apr  4 08:32:43 2023 GMT
            Not After : Apr  5 08:57:43 2023 GMT
        Subject: CN=2A3983F15FA9C20992C14A2DDD554D3E0BED2605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:8c:0c:d9:52:0a:ba:6d:4b:0f:16:37:26:
                    1e:d7:34:2a:d5:cb:93:51:f1:4c:aa:9b:41:63:db:
                    b6:a4:bd:31:6b:f3:f3:90:ac:d0:4d:ee:c6:97:b6:
                    9b:43:b1:3f:82:ce:c1:66:6c:57:19:1f:96:10:f8:
                    7e:7f:74:0d:8c:c5:bb:e0:fa:e9:fa:2f:76:a3:68:
                    fb:c8:7f:00:73:ac:5c:99:b3:19:2d:33:c3:42:cb:
                    02:db:00:16:51:79:6d:4c:b3:6a:8d:ec:12:72:b5:
                    66:31:0d:a2:2b:db:7c:23:22:e9:97:2a:f9:fc:aa:
                    f3:ff:52:c3:6c:9b:ab:32:9b:37:c6:66:8d:46:74:
                    c0:29:86:92:c2:2c:f9:ac:15:b7:e3:db:7c:60:4b:
                    62:e1:9b:09:f7:1e:9b:01:1b:c7:16:ab:e3:0e:30:
                    23:11:d7:2d:63:c4:5a:1c:b9:03:b7:7b:67:7f:ef:
                    74:f1:ee:36:49:81:6c:25:3b:28:09:26:62:3b:25:
                    06:7e:38:a1:c6:5d:64:36:f4:6b:69:23:c5:59:e4:
                    6c:63:99:16:54:aa:ea:f7:d4:e3:25:c4:a8:04:5c:
                    f8:14:60:ac:bc:d4:e7:f9:4e:7d:8c:11:25:98:0e:
                    87:2e:96:e6:d9:24:55:44:6c:bc:23:36:43:68:68:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:83:F1:5F:A9:C2:09:92:C1:4A:2D:DD:55:4D:3E:0B:ED:26:05
            X509v3 Authority Key Identifier:
                keyid:11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/11CF1DAA865E94BF55A7973E9151246D838C3946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CF1DAA865E94BF55A7973E9151246D838C3946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/11CF1DAA865E94BF55A7973E9151246D838C3946.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d2:b4:de:42:5c:e3:e7:34:62:ad:6a:89:66:f8:71:23:da:
         ac:80:4b:7a:3f:71:65:6f:74:df:43:cf:7c:ba:ef:11:89:cb:
         25:5a:20:30:91:09:9f:cf:db:2b:6b:2f:13:d0:36:1e:6b:ed:
         7b:79:6b:45:ec:e5:83:36:68:64:3d:45:f8:1b:8f:4f:ae:1d:
         c5:ab:20:3b:8b:d1:1f:8f:e8:cc:e6:82:ee:7b:bc:d0:a7:01:
         17:b0:6d:27:a9:8e:3c:8f:85:71:98:db:f9:29:ba:99:f8:64:
         cc:63:ad:c4:cd:09:07:4b:11:9b:8b:35:3d:fe:80:25:44:15:
         c5:4a:29:19:6e:5f:d5:c3:3b:05:1a:ab:eb:e4:74:fc:85:2e:
         20:12:cc:8f:ec:f5:15:9d:0c:82:d5:71:62:10:5b:66:e9:a3:
         31:39:44:8f:c6:8a:36:d2:05:41:8f:5d:4b:0c:fd:a9:22:f5:
         79:12:82:8b:7e:0d:88:07:59:c0:08:29:ce:dd:37:25:9a:1c:
         af:f4:b8:51:9a:da:a5:51:6d:60:00:0c:a0:f4:01:4b:21:9f:
         8e:3b:06:b8:cf:2e:47:f8:81:30:c5:63:92:4e:79:a5:e4:04:
         9d:b8:1a:dc:90:c4:f5:31:b8:a3:e5:70:0e:4a:fc:ce:1e:57:
         c2:52:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----