Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HP51F1TsMzz1t2mjpPXU5U5U3Ton4Vycp2BeJh8LMoEa/0/11CC8AE2A7545F772BF16517841BD62FB05DF023.mft
File:                     11CC8AE2A7545F772BF16517841BD62FB05DF023.mft (raw, json)
Hash identifier:          kKWV8TvTqhTAGPIB/VATOCgOEaJ68wrVUYVAC9vFh84=
Subject key identifier:   D8:7D:1F:52:43:88:20:C1:57:B8:11:CF:9D:6E:29:DF:1B:EA:6B:30
Authority key identifier: 11:CC:8A:E2:A7:54:5F:77:2B:F1:65:17:84:1B:D6:2F:B0:5D:F0:23
Certificate issuer:       /CN=11CC8AE2A7545F772BF16517841BD62FB05DF023
Certificate serial:       2B2C9466621A11794745DA50AE9F3747346A3580
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CC8AE2A7545F772BF16517841BD62FB05DF023.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HP51F1TsMzz1t2mjpPXU5U5U3Ton4Vycp2BeJh8LMoEa/0/11CC8AE2A7545F772BF16517841BD62FB05DF023.mft
Manifest number:          8C
Signing time:             Fri 14 Apr 2023 09:02:02 +0000
Manifest this update:     Fri 14 Apr 2023 08:57:02 +0000
Manifest next update:     Sat 15 Apr 2023 09:09:02 +0000
Files and hashes:         1: 11CC8AE2A7545F772BF16517841BD62FB05DF023.crl (hash: 0tmRIF9ZaSbtHFxhu8wjsLAy/AQmmAfL006wZFXMZ0c=)
                          2: 3137372e37312e3130342e302f32322d3234203d3e20323731333430.roa (hash: /WLNAWOCvXal8IW9JWmE7heyhun2swAri8CEhOBhusw=)
                          3: 323830343a373966633a3a2f33322d3438203d3e20323731333430.roa (hash: aprD3EXJmVpyVJUJemRjmnSRZmjyYv4jaiTixOiFeDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2c:94:66:62:1a:11:79:47:45:da:50:ae:9f:37:47:34:6a:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CC8AE2A7545F772BF16517841BD62FB05DF023
        Validity
            Not Before: Apr 14 08:57:02 2023 GMT
            Not After : Apr 15 09:09:02 2023 GMT
        Subject: CN=D87D1F52438820C157B811CF9D6E29DF1BEA6B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:ff:83:c7:c9:4d:95:0a:4c:75:0e:12:b5:
                    90:28:77:2a:90:f1:3b:b7:64:e7:f1:ab:ef:70:ea:
                    93:ab:11:cb:6e:3d:5a:ee:9e:ac:1f:35:8b:48:60:
                    25:83:71:6b:e1:8f:33:03:20:33:09:a0:0f:1f:8c:
                    f0:b5:18:e9:6e:4c:82:12:25:de:a5:b7:56:2a:b2:
                    04:ea:28:4f:ef:4b:37:94:e4:0c:a4:72:53:ef:30:
                    f0:70:13:a2:3e:db:b3:0a:4e:b5:9e:60:d5:a8:9c:
                    ef:af:bd:a7:f7:68:c9:9b:74:67:c0:fc:1d:c7:07:
                    da:86:1e:33:7d:d1:79:ca:1f:d0:8c:6e:c3:72:8b:
                    c9:54:61:08:c8:57:29:bd:be:18:c2:fd:b0:a6:d1:
                    88:39:a0:f8:ff:0a:c1:af:1f:6c:44:a6:6c:78:2d:
                    de:49:7a:e5:bc:b1:ac:f4:43:00:c0:a5:79:aa:55:
                    fd:e4:68:de:b8:bf:f3:9c:2f:88:be:26:5b:f7:fd:
                    3a:bb:e5:fe:36:f7:8b:55:ea:c3:65:0c:ae:8b:3f:
                    65:5b:c0:69:06:e0:06:84:81:d6:b6:3a:0b:6c:c0:
                    75:85:11:08:55:1a:91:fe:1a:fe:73:19:76:a2:73:
                    fe:66:c6:2b:41:f3:2b:4c:d5:62:66:df:a4:46:1c:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7D:1F:52:43:88:20:C1:57:B8:11:CF:9D:6E:29:DF:1B:EA:6B:30
            X509v3 Authority Key Identifier:
                keyid:11:CC:8A:E2:A7:54:5F:77:2B:F1:65:17:84:1B:D6:2F:B0:5D:F0:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HP51F1TsMzz1t2mjpPXU5U5U3Ton4Vycp2BeJh8LMoEa/0/11CC8AE2A7545F772BF16517841BD62FB05DF023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CC8AE2A7545F772BF16517841BD62FB05DF023.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HP51F1TsMzz1t2mjpPXU5U5U3Ton4Vycp2BeJh8LMoEa/0/11CC8AE2A7545F772BF16517841BD62FB05DF023.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:5b:c7:cc:43:78:dc:9a:ec:e3:5f:1d:0c:dd:03:d4:14:
         d5:a8:90:17:3b:8d:67:f8:d8:e3:ee:f3:85:09:d6:1d:fd:c6:
         6a:8c:b0:a0:b1:f9:6c:1e:a2:05:17:ce:56:e3:eb:ef:52:85:
         9b:51:c9:76:5f:e8:a2:d7:d8:11:af:f2:4b:06:ea:cc:53:f2:
         50:a6:96:a4:53:a2:1a:b8:0a:3f:b2:d8:27:82:3c:d4:15:90:
         25:71:50:28:13:7e:a4:28:ae:a7:62:42:7a:d9:ef:c8:18:90:
         cd:fa:fc:c7:21:6e:21:2a:e3:b7:38:a1:51:12:4a:64:f7:1c:
         06:19:61:69:78:04:14:e9:ad:d5:78:1f:a2:80:31:a1:66:db:
         81:23:fb:4e:4c:d1:b5:c1:f4:72:dd:d9:85:95:68:24:8d:49:
         b3:51:c6:26:10:42:b1:0f:12:8f:7b:a4:77:37:1f:1e:e4:30:
         d2:c1:e4:b5:0c:a0:4c:d3:d1:18:3f:46:20:9d:df:38:6b:f2:
         48:3c:9d:8c:e8:f9:cf:dd:2f:66:fc:06:ff:8f:3c:6b:15:bc:
         f1:9e:b5:32:b1:9a:aa:ab:22:70:a1:a4:aa:16:84:4f:96:77:
         bc:17:2c:85:6a:83:c8:a8:4a:bd:96:88:64:a3:58:43:1b:31:
         2e:81:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----