Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.mft
File:                     8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.mft (raw, json)
Hash identifier:          tbntVpnMiQX/Ux3zyMKDFdE9Qglx9k4ZEqWxm5YD+G4=
Subject key identifier:   19:F4:71:7C:37:C8:63:CF:C4:5A:E9:11:29:38:D6:83:32:74:09:45
Authority key identifier: 8C:B5:CE:D2:B8:D2:28:EB:7F:8F:F3:59:8F:A4:9F:CE:19:03:12:85
Certificate issuer:       /CN=8CB5CED2B8D228EB7F8FF3598FA49FCE19031285
Certificate serial:       3A05F2D25AD074916028385F486FE78694769D0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.mft
Manifest number:          0433
Signing time:             Thu 08 Jun 2023 07:30:00 +0000
Manifest this update:     Thu 08 Jun 2023 07:25:00 +0000
Manifest next update:     Fri 09 Jun 2023 07:30:00 +0000
Files and hashes:         1: 323830343a343237343a3a2f33322d3438203d3e20323637353031.roa (hash: E0+sWAQq0iy1hRI+J5igmp5dcb7iG957mKt9jPK/jgM=)
                          2: 3230312e3138322e36342e302f32322d3234203d3e20323637353031.roa (hash: CK28NyaCLwh5rEpmvwheqWTqPeaGz7m7b894epdyAYA=)
                          3: 8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.crl (hash: sQtuqxWdBUKsS58ItMyK95tBpMxJX7LX4dv4WZDl2GI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:05:f2:d2:5a:d0:74:91:60:28:38:5f:48:6f:e7:86:94:76:9d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CB5CED2B8D228EB7F8FF3598FA49FCE19031285
        Validity
            Not Before: Jun  8 07:25:00 2023 GMT
            Not After : Jun 15 07:30:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:5a:fb:5a:f9:c8:ca:7c:b6:2d:34:b9:4b:
                    fd:e3:88:62:14:a4:d1:f1:9a:96:33:c9:00:4d:9f:
                    f6:0a:5c:a9:b1:ca:1f:da:4d:ea:5d:6b:10:7f:bd:
                    36:29:45:b7:94:8b:de:bc:dd:4e:02:22:6c:5a:a6:
                    98:3d:26:45:a9:9f:45:9a:70:04:1c:ca:5e:f2:62:
                    06:f0:10:3f:d4:f8:6d:87:98:a6:30:43:52:77:b0:
                    2d:59:32:25:ad:3d:53:fd:06:4b:d4:af:09:51:1d:
                    f6:8b:e8:51:53:36:83:17:c7:f6:b6:d3:e1:67:9b:
                    9c:4e:32:8a:63:e9:bc:bd:ec:e4:c6:d6:c9:a8:c3:
                    62:7d:b1:47:c5:b4:63:36:aa:9c:d7:97:de:1d:02:
                    bc:4c:28:d3:42:d6:d9:a2:01:fb:ca:1f:d0:84:58:
                    dd:36:86:8f:e3:06:58:ad:fe:a5:78:ad:06:2a:3d:
                    c2:db:ff:94:97:58:94:fa:e2:9f:5e:13:30:31:f8:
                    50:93:7c:b5:86:0a:b0:a3:88:45:5b:76:d5:d4:62:
                    9c:04:8b:1b:81:81:6c:8b:82:91:72:b4:14:19:18:
                    ce:fc:fd:ae:2d:cd:7c:6d:ce:e3:c8:47:f6:b3:39:
                    2b:2d:75:0a:da:77:51:7f:4b:89:ec:23:e9:76:41:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F4:71:7C:37:C8:63:CF:C4:5A:E9:11:29:38:D6:83:32:74:09:45
            X509v3 Authority Key Identifier:
                keyid:8C:B5:CE:D2:B8:D2:28:EB:7F:8F:F3:59:8F:A4:9F:CE:19:03:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/8CB5CED2B8D228EB7F8FF3598FA49FCE19031285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3c:7d:cd:d7:e1:ad:1c:0e:30:d6:dc:f2:eb:c4:fd:c0:f0:
         fc:42:94:45:48:6d:e4:ca:d7:ab:b8:39:9a:55:3f:46:f8:37:
         81:82:49:49:72:aa:f0:23:7d:a9:62:11:32:c6:c6:2b:ed:e3:
         20:86:29:18:50:d1:37:14:0f:41:a6:b0:f2:da:b4:db:fc:8d:
         e0:89:84:19:1d:40:f0:50:53:62:8f:6d:a2:1e:0a:79:c4:e8:
         c3:80:a1:f4:c3:c6:4d:d2:92:8a:8b:d4:0a:3f:12:a8:0d:56:
         79:a2:d5:d0:e7:c1:42:c7:fb:f3:66:88:3e:d8:ed:e2:f6:41:
         3e:bb:00:6a:d5:ff:21:46:65:4e:70:43:52:87:fe:a0:eb:6d:
         86:2b:7d:d2:34:af:40:e0:69:2b:a1:3a:b1:59:84:1e:d7:21:
         7f:99:69:14:79:9f:22:7b:3f:f4:68:95:b0:64:69:c5:72:83:
         65:cb:f4:d6:d8:2d:ed:28:0e:26:13:62:3e:e5:c6:d3:58:11:
         cb:a8:3d:0b:e3:c8:d9:67:d0:5f:a4:4a:87:e8:3b:d5:09:f5:
         db:da:c3:f8:0a:be:c5:4d:86:48:20:37:92:2d:d0:a2:9a:3c:
         ee:a1:f5:1b:c3:e5:80:a0:e9:58:20:2e:fc:58:a4:84:7f:ae:
         14:c0:e5:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----