Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/11011CC8EDF8300F25FD6897A34101AC3CFDFB17.mft
File:                     11011CC8EDF8300F25FD6897A34101AC3CFDFB17.mft (raw, json)
Hash identifier:          xQ/HPlRv5VTC0JTNgx8Q3X7D/W8RU2m1d1gkfIWn1QY=
Subject key identifier:   44:00:59:D4:DD:35:5A:03:30:F9:69:22:A3:4C:8E:08:49:6E:6A:87
Authority key identifier: 11:01:1C:C8:ED:F8:30:0F:25:FD:68:97:A3:41:01:AC:3C:FD:FB:17
Certificate issuer:       /CN=11011CC8EDF8300F25FD6897A34101AC3CFDFB17
Certificate serial:       04C3D9EA70A331A212C10E2BF3671FB063E93660
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11011CC8EDF8300F25FD6897A34101AC3CFDFB17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/11011CC8EDF8300F25FD6897A34101AC3CFDFB17.mft
Manifest number:          0135
Signing time:             Tue 12 Mar 2024 04:58:13 +0000
Manifest this update:     Tue 12 Mar 2024 04:53:13 +0000
Manifest next update:     Wed 13 Mar 2024 07:04:13 +0000
Files and hashes:         1: 323830343a356265383a3a2f33322d313238203d3e20323638383736.roa (hash: YnTK46/i4DTemfiwvqkjx2mB58SpLw3mPIsLgWFEjzI=)
                          2: 11011CC8EDF8300F25FD6897A34101AC3CFDFB17.crl (hash: vCuBZLbpwmvVKNSsx8Nj+CplhpcSMKjq/KyKWbcInd4=)
                          3: 34352e3137312e3132322e302f32332d3332203d3e20323638383736.roa (hash: mP979OmxeqHKOIBZObolDieJIzdDspmr0GAGVQSTyFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c3:d9:ea:70:a3:31:a2:12:c1:0e:2b:f3:67:1f:b0:63:e9:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11011CC8EDF8300F25FD6897A34101AC3CFDFB17
        Validity
            Not Before: Mar 12 04:53:13 2024 GMT
            Not After : Mar 13 07:04:13 2024 GMT
        Subject: CN=440059D4DD355A0330F96922A34C8E08496E6A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:1f:9c:49:38:7d:0d:24:fb:e8:37:1b:d7:
                    e1:df:2c:8d:b9:b1:1c:41:26:bc:69:3b:83:80:f3:
                    39:0a:e7:ca:77:90:4c:c8:27:9c:c3:1e:0e:4b:f6:
                    d8:00:d3:a6:a5:7b:58:23:21:92:e4:3c:d3:7c:27:
                    85:fc:b8:7f:73:bb:b0:f9:da:7b:c4:a1:ba:2d:10:
                    da:dd:5b:12:99:96:ad:6a:6d:b4:41:14:a7:69:f1:
                    72:f0:6d:98:14:c8:67:48:f7:12:d4:40:42:07:4a:
                    71:aa:4a:45:bf:6d:e3:50:fe:2a:fb:ea:e8:e6:cf:
                    1d:44:44:b3:0d:6a:ef:59:b1:03:cc:c4:a3:75:2d:
                    d2:eb:0b:ea:9a:ba:82:37:ce:b7:c4:96:79:cb:11:
                    d1:d0:e0:39:0e:18:d5:5b:5c:d5:9f:b5:b5:8d:4d:
                    88:8c:cb:5a:c1:15:a6:17:9c:ef:27:69:71:76:85:
                    69:9d:3f:ed:d7:d3:9c:a2:87:55:92:46:f2:50:05:
                    4f:ca:bd:ea:ce:94:bc:cc:02:dc:51:d6:b1:7b:40:
                    69:a9:4a:11:a0:d2:08:8a:47:c2:54:3e:ac:22:1d:
                    64:d3:e4:99:8c:de:f4:7d:76:c6:e3:2d:1d:bd:23:
                    71:dc:19:fb:91:ac:da:82:2b:28:68:ec:b0:36:de:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:59:D4:DD:35:5A:03:30:F9:69:22:A3:4C:8E:08:49:6E:6A:87
            X509v3 Authority Key Identifier:
                keyid:11:01:1C:C8:ED:F8:30:0F:25:FD:68:97:A3:41:01:AC:3C:FD:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/11011CC8EDF8300F25FD6897A34101AC3CFDFB17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11011CC8EDF8300F25FD6897A34101AC3CFDFB17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/11011CC8EDF8300F25FD6897A34101AC3CFDFB17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:82:04:51:a3:01:84:ac:98:84:ac:18:e9:c6:05:6c:a6:03:
         46:9f:d6:0c:56:91:a5:fb:01:43:4f:47:f7:04:c4:91:e4:d6:
         4c:cb:c3:e4:af:f7:c6:71:6a:fe:53:da:6c:41:1c:12:ce:39:
         4d:fb:d3:68:96:e3:95:5b:a3:1a:fb:8a:a7:03:0a:71:9a:42:
         ed:57:ef:8f:2f:4c:6f:1d:98:42:ea:b7:f1:83:88:53:d4:75:
         94:ff:1b:d0:49:5b:12:6c:38:7f:7f:a4:d2:a7:cf:02:7d:79:
         47:bd:b4:31:f7:2c:29:f6:ec:b6:f1:f7:4e:90:fa:0a:2f:4c:
         db:1d:9e:d1:0b:8d:36:a5:73:8d:34:d6:af:45:c4:18:fd:62:
         ab:b6:39:49:08:11:72:a6:2c:64:d8:ec:a0:e0:e2:f5:cc:0f:
         5c:a2:c8:28:14:d7:92:72:6b:19:01:76:fa:68:aa:43:76:c5:
         df:4e:76:09:3c:9f:49:26:af:24:38:d0:18:a4:07:39:50:d1:
         d3:0d:0e:2c:dc:b5:ba:52:b0:f9:c9:72:54:bc:47:78:cc:5e:
         01:8d:74:2d:62:12:e3:07:da:62:d5:8c:f8:6f:2b:44:90:26:
         3f:28:b9:f2:d2:76:68:1a:05:29:1f:45:9c:36:45:9b:9d:5c:
         e3:3a:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----