Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.mft
File:                     32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.mft (raw, json)
Hash identifier:          2RLQbrZfbEwYNBHhc3kyhYt93nJg+qaYmwLDmbiyYSg=
Subject key identifier:   D3:AC:34:73:E6:33:D6:7B:84:85:2A:D1:DE:09:68:04:FD:B1:31:0D
Authority key identifier: 32:FE:1C:E8:CB:D1:10:3F:B4:A7:A3:C7:C4:C5:83:58:51:2A:B3:04
Certificate issuer:       /CN=32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304
Certificate serial:       2957598BD9486DD2D7A7316130B2782E16166CB1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.mft
Manifest number:          011F
Signing time:             Mon 15 Apr 2024 06:13:22 +0000
Manifest this update:     Mon 15 Apr 2024 06:08:22 +0000
Manifest next update:     Tue 16 Apr 2024 09:27:22 +0000
Files and hashes:         1: 32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.crl (hash: aH8xKAKjGikp+E1uJtNmk0BHljbr31JbjSnoZRplw4Q=)
                          2: 323830343a333633303a3a2f33322d3438203d3e20323636333332.roa (hash: t4Ubvy5fYB0okMVgF87pHF/jkni0rBsdO8KmUhvOZ0I=)
                          3: 3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa (hash: +dqy0AHO9MzCcaonhBVMeyQV9NNN8UdI+3b0PpvDqzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:57:59:8b:d9:48:6d:d2:d7:a7:31:61:30:b2:78:2e:16:16:6c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304
        Validity
            Not Before: Apr 15 06:08:22 2024 GMT
            Not After : Apr 16 09:27:22 2024 GMT
        Subject: CN=D3AC3473E633D67B84852AD1DE096804FDB1310D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:8b:c3:72:21:04:6c:0d:7e:cd:c8:99:9d:
                    7d:e1:21:77:30:ac:1f:34:7f:b3:d5:c8:4e:d6:6c:
                    e7:b6:28:f4:62:ff:0b:77:b8:99:e4:27:02:dd:e8:
                    df:4d:95:9b:da:c2:54:27:12:c4:46:27:44:24:96:
                    7e:f7:a6:4e:6d:34:c9:ad:04:37:5c:6d:23:d7:a7:
                    17:31:33:2f:51:06:eb:b8:a6:56:81:90:e1:91:1a:
                    24:af:36:2e:58:bf:ed:f6:76:ef:16:8c:77:96:90:
                    41:7d:e6:0c:93:73:92:67:bc:07:e0:02:21:b8:f5:
                    7e:91:3a:ec:30:84:a6:10:92:86:5d:4c:93:55:49:
                    59:50:84:f3:3d:ba:cb:9b:73:fd:db:22:cd:cc:e4:
                    7e:20:01:79:c8:de:ad:35:a7:13:bb:e2:f9:e5:a3:
                    a9:94:4e:7c:25:21:3d:8b:0d:b2:a4:77:f3:74:81:
                    f8:19:68:0c:06:dc:83:0c:4c:19:1c:0f:8d:d1:6a:
                    d8:a8:f8:ea:83:26:60:97:70:52:15:0c:20:22:f4:
                    8e:b6:9b:d2:97:e8:70:ad:26:e5:b5:c9:6e:23:bf:
                    a9:0e:9a:85:10:ea:57:f4:c3:2b:30:dd:95:5d:0d:
                    77:49:e5:9e:fd:cb:78:d1:7b:92:74:d4:62:08:f4:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AC:34:73:E6:33:D6:7B:84:85:2A:D1:DE:09:68:04:FD:B1:31:0D
            X509v3 Authority Key Identifier:
                keyid:32:FE:1C:E8:CB:D1:10:3F:B4:A7:A3:C7:C4:C5:83:58:51:2A:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:ee:27:f0:c3:e9:3a:1b:f3:c8:d0:c9:c3:37:66:73:63:
         0c:3c:b1:d5:be:c5:92:65:68:ce:ab:07:56:52:89:f1:09:3a:
         7a:7c:91:0c:58:f7:3e:79:1d:09:07:cf:0d:af:cf:0f:ba:ce:
         34:21:a3:9a:70:4b:2f:33:e0:22:46:e3:01:f0:5b:06:dd:8e:
         4a:dc:27:ff:28:d5:3a:d2:be:96:da:53:22:66:84:1b:ad:46:
         a0:25:71:88:d0:e3:46:80:5d:50:92:34:4f:e7:d0:76:7c:55:
         e8:0e:1c:ec:42:7b:a6:89:96:16:6f:91:83:cd:12:8a:11:3c:
         80:8d:d4:05:16:7b:02:b2:89:bb:c9:3c:0e:f9:5d:12:ca:f5:
         2b:83:84:a0:58:b3:67:ce:f1:e5:a4:d4:f0:ed:eb:24:15:4b:
         b0:3c:95:0c:e7:3b:b0:0a:64:9c:5d:b6:32:7f:28:37:ed:11:
         8a:32:7a:7c:bb:01:89:08:da:e2:f8:46:26:07:40:c1:1c:3e:
         e4:fe:d1:07:b5:ba:15:6c:ae:24:d2:20:cf:9a:7d:a8:de:22:
         3a:13:3b:44:d7:d1:79:02:30:eb:55:16:f9:14:9c:02:d2:69:
         53:52:fd:95:6b:c9:c7:d2:c8:63:b4:f0:e7:86:0c:4a:4b:e1:
         36:64:69:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKVdZi9lIbdLXpzFhMLJ4LhYWbLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGRTFDRThDQkQxMTAzRkI0QTdBM0M3QzRDNTgzNTg1
MTJBQjMwNDAeFw0yNDA0MTUwNjA4MjJaFw0yNDA0MTYwOTI3MjJaMDMxMTAvBgNV
BAMTKEQzQUMzNDczRTYzM0Q2N0I4NDg1MkFEMURFMDk2ODA0RkRCMTMxMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZz4vDciEEbA1+zciZnX3hIXcw
rB80f7PVyE7WbOe2KPRi/wt3uJnkJwLd6N9NlZvawlQnEsRGJ0Qkln73pk5tNMmt
BDdcbSPXpxcxMy9RBuu4plaBkOGRGiSvNi5Yv+32du8WjHeWkEF95gyTc5JnvAfg
AiG49X6ROuwwhKYQkoZdTJNVSVlQhPM9usubc/3bIs3M5H4gAXnI3q01pxO74vnl
o6mUTnwlIT2LDbKkd/N0gfgZaAwG3IMMTBkcD43Ratio+OqDJmCXcFIVDCAi9I62
m9KX6HCtJuW1yW4jv6kOmoUQ6lf0wysw3ZVdDXdJ5Z79y3jRe5J01GII9Kl9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU06w0c+Yz1nuEhSrR3gloBP2xMQ0wHwYDVR0j
BBgwFoAUMv4c6MvRED+0p6PHxMWDWFEqswQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2NhTXI2UWY1c1lydFFuaTdKaEM5MTNHMVpQY1Z3eXduQlRpWHdDNFZB
a0gvMC8zMkZFMUNFOENCRDExMDNGQjRBN0EzQzdDNEM1ODM1ODUxMkFCMzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyRkUxQ0U4Q0JEMTEwM0ZC
NEE3QTNDN0M0QzU4MzU4NTEyQUIzMDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2NhTXI2UWY1c1lydFFuaTdKaEM5MTNHMVpQY1Z3eXduQlRpWHdDNFZBa0gvMC8z
MkZFMUNFOENCRDExMDNGQjRBN0EzQzdDNEM1ODM1ODUxMkFCMzA0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHGjuJ/DD6Tob88jQycM3ZnNjDDyx1b7FkmVozqsHVlKJ8Qk6enyRDFj3Pnkd
CQfPDa/PD7rONCGjmnBLLzPgIkbjAfBbBt2OStwn/yjVOtK+ltpTImaEG61GoCVx
iNDjRoBdUJI0T+fQdnxV6A4c7EJ7pomWFm+Rg80SihE8gI3UBRZ7ArKJu8k8Dvld
Esr1K4OEoFizZ87x5aTU8O3rJBVLsDyVDOc7sApknF22Mn8oN+0RijJ6fLsBiQja
4vhGJgdAwRw+5P7RB7W6FWyuJNIgz5p9qN4iOhM7RNfReQIw61UW+RScAtJpU1L9
lWvJx9LIY7Tw54YMSkvhNmRpmw==
-----END CERTIFICATE-----