Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/32BE580D860CE57E80548533943E4642B25BEE59.mft
File:                     32BE580D860CE57E80548533943E4642B25BEE59.mft (raw, json)
Hash identifier:          p975+X3kxjPvYZ/tQR4xgW0mCqZk1Ta/IJ2GwHvXbn8=
Subject key identifier:   9B:81:E4:98:1A:AB:3B:9C:DD:BF:DA:94:40:E8:76:B2:85:4D:33:41
Authority key identifier: 32:BE:58:0D:86:0C:E5:7E:80:54:85:33:94:3E:46:42:B2:5B:EE:59
Certificate issuer:       /CN=32BE580D860CE57E80548533943E4642B25BEE59
Certificate serial:       08462EC206EE468AEE67853BC9DC0E4DA2C700A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BE580D860CE57E80548533943E4642B25BEE59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/32BE580D860CE57E80548533943E4642B25BEE59.mft
Manifest number:          39
Signing time:             Wed 15 May 2024 11:14:52 +0000
Manifest this update:     Wed 15 May 2024 11:09:52 +0000
Manifest next update:     Thu 16 May 2024 12:01:52 +0000
Files and hashes:         1: 32BE580D860CE57E80548533943E4642B25BEE59.crl (hash: IyqmXy5kKmhl6l7OUrTD+YG3Ox6XJTG/ciXOwHNnDtI=)
                          2: 3230302e3135302e3235322e302f32322d3234203d3e20323731363730.roa (hash: nBJBj9phBk2jGU53mND9J0q0jEbD3MktaeuPNAvJGoY=)
                          3: 323830343a376632383a3a2f33322d3334203d3e20323731363730.roa (hash: 2h5W/7Qc+ZlEhmBbE6e9DYJ4cO9mibxZLcIHzFmKHYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:46:2e:c2:06:ee:46:8a:ee:67:85:3b:c9:dc:0e:4d:a2:c7:00:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32BE580D860CE57E80548533943E4642B25BEE59
        Validity
            Not Before: May 15 11:09:52 2024 GMT
            Not After : May 16 12:01:52 2024 GMT
        Subject: CN=9B81E4981AAB3B9CDDBFDA9440E876B2854D3341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:da:0c:9e:f7:94:60:b8:79:19:41:8f:d7:
                    fc:c0:5b:d4:68:ea:53:cd:a1:c3:9b:e1:10:2d:65:
                    74:55:60:fb:b8:17:e9:e8:a9:e3:01:0a:fc:5a:7c:
                    1b:ae:37:55:09:cf:ae:be:be:2c:b9:f5:2c:d0:82:
                    d8:d5:b9:0d:9d:50:44:3b:6e:57:a1:cc:1d:ab:2f:
                    7d:5e:e5:f4:ec:23:40:af:a2:a5:ff:9f:ec:be:c4:
                    03:0b:ba:ec:78:5a:c8:19:84:c3:34:f8:de:3e:d0:
                    67:53:73:c8:c8:a0:95:49:14:44:fc:64:2c:ad:bd:
                    46:e7:79:47:97:ab:90:19:53:dd:90:94:2c:ac:c4:
                    98:22:ae:c7:fb:dc:5f:ed:82:62:77:aa:65:f5:8e:
                    5d:d4:2d:f9:57:b1:92:20:87:80:9a:e3:ca:6e:29:
                    7f:09:7a:7c:7f:66:74:8e:f2:0b:78:98:09:22:61:
                    68:65:97:c1:7a:d4:06:39:c6:0f:2e:63:a4:85:54:
                    1f:57:91:3a:15:9f:1f:c7:d6:b5:f6:ed:77:4f:93:
                    15:a0:fb:ed:92:d3:ae:45:f3:c2:b4:60:f0:2b:38:
                    47:3b:4d:78:16:8b:73:69:50:f9:f2:45:28:36:29:
                    44:a6:7a:13:d4:76:bc:e2:5a:c8:47:de:23:09:49:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:81:E4:98:1A:AB:3B:9C:DD:BF:DA:94:40:E8:76:B2:85:4D:33:41
            X509v3 Authority Key Identifier:
                keyid:32:BE:58:0D:86:0C:E5:7E:80:54:85:33:94:3E:46:42:B2:5B:EE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/32BE580D860CE57E80548533943E4642B25BEE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BE580D860CE57E80548533943E4642B25BEE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/32BE580D860CE57E80548533943E4642B25BEE59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e7:49:3a:19:a5:be:43:b2:7c:2c:25:c7:32:c9:c9:00:ae:
         5d:f8:3d:ae:34:a6:0a:2f:71:aa:91:bb:e4:1f:a1:44:cc:db:
         47:f6:a4:81:ed:e3:94:1c:67:81:95:7a:bd:cf:7e:a9:91:23:
         92:d8:1f:e6:7e:e2:7b:39:ae:eb:a4:4a:37:10:9b:68:b4:a6:
         86:85:19:72:7d:91:3f:df:b1:a1:2f:64:31:cc:d9:e2:d1:0d:
         b8:c8:82:ee:8f:c0:7d:9b:72:5a:19:f6:c2:7e:06:9e:15:d4:
         7e:b9:e1:cf:34:04:d3:60:03:53:18:12:c1:de:9b:80:cc:50:
         b2:4e:03:6e:bf:53:cc:49:18:7d:11:de:a5:17:1a:b8:ea:a3:
         dd:3d:78:92:4c:eb:2a:29:9f:10:15:51:f3:f6:36:67:42:2c:
         d9:5d:f4:64:b9:6f:01:84:22:a1:44:91:9a:7a:fe:34:03:6f:
         15:c9:a6:73:4c:f9:9e:62:b2:17:5f:7a:12:29:26:b5:90:48:
         57:ac:81:32:ab:1a:35:99:c2:54:69:1a:94:d0:c2:c5:3b:0c:
         1d:8b:65:e8:73:c7:a1:dc:f3:4c:6f:18:d8:8c:b2:f4:6b:dc:
         35:9b:cc:eb:f3:4a:b3:ab:e7:4f:0e:a7:4d:89:8b:52:bd:78:
         93:6d:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----