Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/32F120628961E91749A1239DA4FFA744369562E2.mft
File:                     32F120628961E91749A1239DA4FFA744369562E2.mft (raw, json)
Hash identifier:          arI46cCp3NCUKY/eQ/xEVow8dEZtaedFloETyTPVjRU=
Subject key identifier:   FA:6B:7E:44:CB:35:C2:BF:FB:EB:3D:5D:15:91:F8:8A:EB:72:36:AA
Authority key identifier: 32:F1:20:62:89:61:E9:17:49:A1:23:9D:A4:FF:A7:44:36:95:62:E2
Certificate issuer:       /CN=32F120628961E91749A1239DA4FFA744369562E2
Certificate serial:       5FB7CB8762CF6121B8E290DF71D09101BBC2EB82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F120628961E91749A1239DA4FFA744369562E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/32F120628961E91749A1239DA4FFA744369562E2.mft
Manifest number:          9C
Signing time:             Sun 14 Apr 2024 23:44:36 +0000
Manifest this update:     Sun 14 Apr 2024 23:39:36 +0000
Manifest next update:     Tue 16 Apr 2024 02:20:36 +0000
Files and hashes:         1: 3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa (hash: HuxTN490J2c5qzHE2xikafvRzMiX9MUNENo/coK0JZE=)
                          2: 32F120628961E91749A1239DA4FFA744369562E2.crl (hash: sRWd3pi+XASQPEQzYyJmfFr1b2AKKENRNzh178w3jaQ=)
                          3: 323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (hash: or8MU3GiqkkxPtMAvcCz5QSs1k2EcXQ4ml9oIHhwVkA=)
                          4: 3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa (hash: isg6zwt0ag2mA3sL2p62XcWgbiIzbF114V76kMqW694=)
                          5: 3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa (hash: RQJ/S/gTrX+HRxlVXyBFTSRExoFjAipaE8kMcmNXGpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b7:cb:87:62:cf:61:21:b8:e2:90:df:71:d0:91:01:bb:c2:eb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F120628961E91749A1239DA4FFA744369562E2
        Validity
            Not Before: Apr 14 23:39:36 2024 GMT
            Not After : Apr 16 02:20:36 2024 GMT
        Subject: CN=FA6B7E44CB35C2BFFBEB3D5D1591F88AEB7236AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:a1:83:3c:e6:95:f4:0d:1f:e1:1f:6e:fa:
                    c6:9c:fe:3e:8d:c7:fd:f0:a7:12:ef:09:fe:7c:81:
                    2d:02:46:ce:5f:7d:3a:a1:78:31:db:c5:06:64:6f:
                    c2:be:b8:9f:b9:57:a3:1f:64:29:c6:79:47:aa:bb:
                    56:89:5f:cc:eb:4e:2b:6d:1f:53:7d:c4:a3:a3:3b:
                    bb:22:c4:f4:18:b0:a7:4f:ef:4e:1a:92:b5:7e:b3:
                    5f:39:83:44:ed:3e:ba:79:c9:ea:b2:a6:36:3d:62:
                    42:cf:6e:71:0b:1c:a9:6b:c3:d9:61:69:b4:68:44:
                    6b:a6:b7:b1:fb:9a:ea:c4:88:e9:1f:0f:5e:1f:7f:
                    d6:02:66:c2:a1:89:9d:8e:76:5b:b3:3a:95:64:a2:
                    77:a9:e9:bd:ae:45:a0:bc:6f:3d:34:40:48:27:3d:
                    f5:7e:b4:c1:3f:df:76:31:73:99:6f:95:96:c2:f8:
                    b0:f5:a4:34:e3:55:04:f8:9d:fc:f8:22:9b:7d:26:
                    e8:08:d6:0f:fe:46:8c:b8:57:41:92:5e:e8:b0:31:
                    d9:eb:67:a6:c9:aa:3c:78:31:59:d7:b7:d3:0f:bc:
                    87:14:ee:55:6e:98:7e:53:2c:5a:05:2e:1f:b6:b1:
                    eb:22:56:ab:26:52:ea:b4:9f:27:db:aa:7e:d1:e7:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6B:7E:44:CB:35:C2:BF:FB:EB:3D:5D:15:91:F8:8A:EB:72:36:AA
            X509v3 Authority Key Identifier:
                keyid:32:F1:20:62:89:61:E9:17:49:A1:23:9D:A4:FF:A7:44:36:95:62:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/32F120628961E91749A1239DA4FFA744369562E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F120628961E91749A1239DA4FFA744369562E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/32F120628961E91749A1239DA4FFA744369562E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c6:cf:ef:4d:96:e2:ef:f4:32:7d:10:09:17:ae:49:45:81:
         ce:7c:12:42:ab:2d:af:c7:2a:b9:1f:ef:7c:68:f1:f1:9e:1d:
         ba:e9:3f:5c:57:18:75:08:68:b7:b4:23:a8:b8:cb:be:0b:54:
         64:39:e2:46:c1:20:50:89:35:29:25:b4:8f:92:c6:df:87:fe:
         bc:a7:5c:e1:56:c6:72:85:7f:2a:ed:f8:32:b8:80:6a:63:04:
         81:01:b6:00:aa:9b:86:49:e3:6a:0f:f2:7f:d8:f8:18:38:c4:
         1f:03:8e:63:48:01:41:4c:78:2f:fc:92:7d:f7:d8:15:71:2f:
         aa:08:b7:2b:4e:56:9a:6d:2a:57:8e:22:f3:62:cb:54:a8:95:
         7e:89:33:65:1d:f9:11:b9:15:b4:8d:50:77:76:65:d1:7b:62:
         06:a2:78:c4:40:ab:5c:94:71:f5:1d:d4:d8:05:3a:d3:a0:f7:
         c1:3c:70:64:a9:8e:6e:d7:63:8f:2c:27:82:94:8d:93:61:2e:
         ca:48:77:8c:7a:7b:ad:1c:18:2c:aa:22:6c:dd:bc:48:fa:e1:
         b5:e6:b2:79:98:81:a0:44:03:04:de:61:92:9b:4e:f9:df:e4:
         fe:cf:1e:b2:84:fa:53:e4:42:ef:39:44:40:8c:d9:df:1c:fe:
         2a:28:e3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----