Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/C53DAE0DDA163BF4DBECE527E48DBD3078818811.mft
File:                     C53DAE0DDA163BF4DBECE527E48DBD3078818811.mft (raw, json)
Hash identifier:          0fWeSn5EHQnzchq4riA7ig5woaKmSyC7PFc08FKKwik=
Subject key identifier:   A8:C0:2E:F3:8F:57:DF:D0:2B:7D:B1:30:F3:BE:E9:97:BF:15:93:7E
Authority key identifier: C5:3D:AE:0D:DA:16:3B:F4:DB:EC:E5:27:E4:8D:BD:30:78:81:88:11
Certificate issuer:       /CN=C53DAE0DDA163BF4DBECE527E48DBD3078818811
Certificate serial:       553A698E53F8DB19A45238BBFD8A0C8A7C55820B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C53DAE0DDA163BF4DBECE527E48DBD3078818811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/C53DAE0DDA163BF4DBECE527E48DBD3078818811.mft
Manifest number:          47
Signing time:             Wed 09 Nov 2022 17:37:52 +0000
Manifest this update:     Wed 09 Nov 2022 17:32:52 +0000
Manifest next update:     Thu 10 Nov 2022 21:36:52 +0000
Files and hashes:         1: 3138392e3132362e3132382e302f32322d3234203d3e20323732323238.roa (hash: b2TI6Qyy5CKDjJmIXFtZbWc+FwCnIl9gasaTSi8N1pw=)
                          2: 323830343a383365383a3a2f33322d3334203d3e20323732323238.roa (hash: J4Ygm7S4hQN+1P6Iu9XUchtSC2H2+rwd2r1UE1pGK0A=)
                          3: C53DAE0DDA163BF4DBECE527E48DBD3078818811.crl (hash: AVAccF8THRmjHAui1dj/PL9lJMU0d6tLslgcpID49bs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3a:69:8e:53:f8:db:19:a4:52:38:bb:fd:8a:0c:8a:7c:55:82:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53DAE0DDA163BF4DBECE527E48DBD3078818811
        Validity
            Not Before: Nov  9 17:32:52 2022 GMT
            Not After : Nov 10 21:36:52 2022 GMT
        Subject: CN=A8C02EF38F57DFD02B7DB130F3BEE997BF15937E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:b0:c6:b8:05:ec:55:1f:1c:d1:12:e2:e2:
                    40:6d:d0:4d:17:ec:28:cf:0e:36:64:27:ea:c7:65:
                    0a:de:5f:b7:19:73:f9:44:2d:66:64:dd:a7:29:01:
                    1b:9f:2e:2c:fb:29:f4:da:88:55:c3:b3:b6:7b:a3:
                    53:b2:ed:2e:64:46:bb:4b:21:73:6c:e3:9f:aa:a4:
                    5a:69:d6:0b:ee:34:83:47:1d:93:cc:0b:92:2b:0d:
                    15:73:08:a3:26:b7:b8:96:9c:65:a7:3e:87:db:59:
                    2d:52:34:55:d6:3a:f2:aa:fe:7a:49:dc:cf:23:84:
                    bb:ab:e1:6e:69:35:f6:62:62:3f:b1:1d:8b:2b:46:
                    36:de:b7:1d:f0:3d:39:16:fb:10:48:ed:5b:0e:a8:
                    75:e2:f9:a1:17:07:85:f5:d9:b0:da:22:91:72:da:
                    36:81:c2:e0:6d:b4:34:d4:de:e4:f0:af:b7:63:fa:
                    02:8d:f4:a9:f1:f7:9e:e0:63:68:41:39:49:6f:2e:
                    4a:fe:98:93:a7:69:f8:ac:d8:e6:39:9a:60:26:9d:
                    9f:0f:9b:8d:46:99:dc:e7:75:df:7c:1b:c1:64:a8:
                    60:22:50:50:44:6c:ba:d2:3f:ee:68:73:a2:c5:65:
                    77:55:b5:53:34:52:06:d2:dc:bc:2f:8d:6e:3c:fa:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C0:2E:F3:8F:57:DF:D0:2B:7D:B1:30:F3:BE:E9:97:BF:15:93:7E
            X509v3 Authority Key Identifier:
                keyid:C5:3D:AE:0D:DA:16:3B:F4:DB:EC:E5:27:E4:8D:BD:30:78:81:88:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/C53DAE0DDA163BF4DBECE527E48DBD3078818811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C53DAE0DDA163BF4DBECE527E48DBD3078818811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/C53DAE0DDA163BF4DBECE527E48DBD3078818811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e4:fa:da:8a:eb:17:74:9c:6e:10:49:99:09:08:80:ac:81:
         fa:22:5c:df:e7:4c:8e:d9:5e:db:d3:e4:c8:19:87:31:90:9e:
         d9:75:10:34:4a:25:2c:b6:b9:dc:98:86:7b:c9:13:07:26:0b:
         26:91:02:dd:02:db:2c:b0:f8:e3:74:25:12:51:12:47:b4:35:
         e7:5d:a2:56:2b:bc:8f:12:e2:62:04:d0:9b:f3:14:e0:4d:50:
         3c:0a:ca:86:e5:5b:22:44:43:72:e6:40:f4:22:62:3a:3c:74:
         36:f5:d6:e6:cf:9f:9e:7e:5d:5d:5d:db:9e:a7:92:c5:88:7e:
         7b:57:c6:3e:33:52:2d:f8:2a:2c:1c:1f:fa:a9:90:73:3d:b8:
         b8:f7:6f:48:f9:ae:b4:29:a3:4c:54:e2:01:e4:e2:52:74:73:
         82:a4:b5:67:00:4e:6a:7a:51:fb:2b:35:3a:a5:00:60:c9:a3:
         ec:9a:4f:1b:03:36:c5:97:2e:75:25:42:28:11:7f:46:85:0f:
         23:5f:c7:3f:eb:8f:c5:d4:9d:97:cf:a1:ee:d3:b9:02:67:69:
         78:27:33:53:cd:a2:5b:21:b2:fe:33:05:86:8e:6c:d7:da:e5:
         ea:29:37:2b:9a:00:76:d0:99:16:4c:56:47:cd:86:fe:7d:4b:
         84:98:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----