Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/32149EE0DC10ABC770C49D053156E085CC1E2144.mft
File:                     32149EE0DC10ABC770C49D053156E085CC1E2144.mft (raw, json)
Hash identifier:          QEczjJ+UfFbqeuARxN9BbRx9ryYfZpCgY5Z0BJEyO0o=
Subject key identifier:   D0:A2:0A:63:61:80:76:24:F6:A7:A3:5A:27:94:61:F8:1F:45:43:5A
Authority key identifier: 32:14:9E:E0:DC:10:AB:C7:70:C4:9D:05:31:56:E0:85:CC:1E:21:44
Certificate issuer:       /CN=32149EE0DC10ABC770C49D053156E085CC1E2144
Certificate serial:       72C13925A240FE589971E920E14BB0938FA7D138
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32149EE0DC10ABC770C49D053156E085CC1E2144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/32149EE0DC10ABC770C49D053156E085CC1E2144.mft
Manifest number:          01D9
Signing time:             Mon 15 Apr 2024 06:41:23 +0000
Manifest this update:     Mon 15 Apr 2024 06:36:23 +0000
Manifest next update:     Tue 16 Apr 2024 07:00:23 +0000
Files and hashes:         1: 32149EE0DC10ABC770C49D053156E085CC1E2144.crl (hash: oTJ8unJFjKXwwtzBapctdRZoXNLI6qbdCxlo+kWbDq0=)
                          2: 323830343a333865383a3a2f33322d3438203d3e20323636353039.roa (hash: Hlqe6v5QE2rc3CPylKNKtMj+4inoDaJ1NEDp26lOsO8=)
                          3: 3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa (hash: hjb52vTI/tm4As5lesC8VTpJKGjRX00Hfp1whbsDYn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c1:39:25:a2:40:fe:58:99:71:e9:20:e1:4b:b0:93:8f:a7:d1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32149EE0DC10ABC770C49D053156E085CC1E2144
        Validity
            Not Before: Apr 15 06:36:23 2024 GMT
            Not After : Apr 16 07:00:23 2024 GMT
        Subject: CN=D0A20A6361807624F6A7A35A279461F81F45435A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ae:97:48:b8:2f:e8:9f:b6:0d:7b:23:c0:2b:
                    81:bf:bc:f3:c8:de:db:12:8d:eb:95:f1:0c:a0:10:
                    64:12:26:04:37:e6:b7:9b:85:f4:6b:17:78:33:3a:
                    dd:fc:03:68:b7:bb:12:94:d1:f8:73:75:2d:1a:9d:
                    b1:18:62:da:5e:2f:b9:6b:d4:e5:89:b8:f8:dc:ce:
                    18:51:0a:dc:66:8c:87:33:63:bd:48:01:93:13:9c:
                    8d:29:33:99:74:04:6b:3a:95:e3:c7:f2:3a:91:bc:
                    17:f5:96:32:1d:48:76:31:df:be:5c:b3:dc:4c:5c:
                    d2:5a:73:5f:9f:38:a2:50:e8:a6:58:64:0d:74:0c:
                    2b:5b:c5:dc:43:e2:93:3f:ad:ce:da:d5:c4:c7:3e:
                    98:23:6d:2c:c3:78:53:2e:ac:14:18:7e:27:76:a4:
                    bf:e0:ba:4e:2c:bd:33:93:e6:8c:9d:c0:c5:f9:ee:
                    94:ed:e2:1d:31:a0:34:55:6b:bf:6f:22:c8:6d:16:
                    ec:c2:47:23:d4:50:e7:38:c9:8e:64:25:e7:94:61:
                    aa:22:83:bf:8c:53:bd:d8:b9:85:a0:27:ad:b1:28:
                    37:36:3e:0a:e8:cd:cd:de:a2:f2:f7:29:61:6b:f9:
                    0b:91:e4:3d:5b:22:73:2b:49:2e:33:ee:41:9d:12:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:0A:63:61:80:76:24:F6:A7:A3:5A:27:94:61:F8:1F:45:43:5A
            X509v3 Authority Key Identifier:
                keyid:32:14:9E:E0:DC:10:AB:C7:70:C4:9D:05:31:56:E0:85:CC:1E:21:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/32149EE0DC10ABC770C49D053156E085CC1E2144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32149EE0DC10ABC770C49D053156E085CC1E2144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/32149EE0DC10ABC770C49D053156E085CC1E2144.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cb:7d:7d:92:ca:f8:c4:6c:9d:60:5f:f6:2b:0a:f8:de:e7:
         84:99:7e:e2:08:0b:15:80:d4:68:44:1b:e2:24:a4:5e:b5:8a:
         3d:1d:88:ea:e6:26:32:ca:49:01:53:bb:38:10:58:03:a6:2f:
         e1:78:52:f1:df:31:44:c0:47:76:da:ab:52:2d:60:86:58:e0:
         d9:a2:96:1c:3e:d6:ab:81:72:fb:3a:ba:de:90:42:e3:ef:b2:
         8f:45:99:a7:0c:10:6d:c4:f1:90:a7:15:99:7f:c1:2d:53:14:
         a6:60:32:f0:80:01:f0:df:75:b4:3c:ae:6a:fe:99:03:90:fa:
         bd:79:83:96:15:a3:33:3a:a1:1c:ad:9b:ae:dc:7e:42:da:d3:
         3f:bb:56:72:06:6b:30:71:35:b9:53:eb:ad:aa:7d:74:a9:c3:
         09:1c:a4:64:2a:11:60:d8:37:a2:31:ce:a4:a9:a7:63:08:0b:
         c7:09:12:da:72:3c:c3:55:ce:19:2d:0b:c7:a7:fd:68:7a:28:
         14:1c:4e:2d:68:6c:bf:4b:cd:59:95:c1:9a:32:17:cc:35:97:
         cd:dc:cd:82:c3:8b:17:8a:9c:68:67:40:cc:02:0b:6d:c9:e6:
         8f:0e:11:b2:37:17:f8:42:ac:7b:5f:37:4e:34:9b:2b:88:96:
         d0:48:2c:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcsE5JaJA/liZcekg4Uuwk4+n0TgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxNDlFRTBEQzEwQUJDNzcwQzQ5RDA1MzE1NkUwODVD
QzFFMjE0NDAeFw0yNDA0MTUwNjM2MjNaFw0yNDA0MTYwNzAwMjNaMDMxMTAvBgNV
BAMTKEQwQTIwQTYzNjE4MDc2MjRGNkE3QTM1QTI3OTQ2MUY4MUY0NTQzNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgrpdIuC/on7YNeyPAK4G/vPPI
3tsSjeuV8QygEGQSJgQ35rebhfRrF3gzOt38A2i3uxKU0fhzdS0anbEYYtpeL7lr
1OWJuPjczhhRCtxmjIczY71IAZMTnI0pM5l0BGs6lePH8jqRvBf1ljIdSHYx375c
s9xMXNJac1+fOKJQ6KZYZA10DCtbxdxD4pM/rc7a1cTHPpgjbSzDeFMurBQYfid2
pL/guk4svTOT5oydwMX57pTt4h0xoDRVa79vIshtFuzCRyPUUOc4yY5kJeeUYaoi
g7+MU73YuYWgJ62xKDc2Pgrozc3eovL3KWFr+QuR5D1bInMrSS4z7kGdEl4xAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0KIKY2GAdiT2p6NaJ5Rh+B9FQ1owHwYDVR0j
BBgwFoAUMhSe4NwQq8dwxJ0FMVbghcweIUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTM1bTgzaDlndHdCOFo5NG5uZWI0aUszbXRRNTVUSlVqVVJHblVxVkRm
VXEvMC8zMjE0OUVFMERDMTBBQkM3NzBDNDlEMDUzMTU2RTA4NUNDMUUyMTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMTQ5RUUwREMxMEFCQzc3
MEM0OUQwNTMxNTZFMDg1Q0MxRTIxNDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTM1bTgzaDlndHdCOFo5NG5uZWI0aUszbXRRNTVUSlVqVVJHblVxVkRmVXEvMC8z
MjE0OUVFMERDMTBBQkM3NzBDNDlEMDUzMTU2RTA4NUNDMUUyMTQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcst9fZLK+MRsnWBf9isK+N7nhJl+4ggLFYDUaEQb4iSkXrWKPR2I6uYmMspJ
AVO7OBBYA6Yv4XhS8d8xRMBHdtqrUi1ghljg2aKWHD7Wq4Fy+zq63pBC4++yj0WZ
pwwQbcTxkKcVmX/BLVMUpmAy8IAB8N91tDyuav6ZA5D6vXmDlhWjMzqhHK2brtx+
QtrTP7tWcgZrMHE1uVPrrap9dKnDCRykZCoRYNg3ojHOpKmnYwgLxwkS2nI8w1XO
GS0Lx6f9aHooFBxOLWhsv0vNWZXBmjIXzDWXzdzNgsOLF4qcaGdAzAILbcnmjw4R
sjcX+EKse183TjSbK4iW0EgsuQ==
-----END CERTIFICATE-----