Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/32AA339FE387D2854828D8C97B6334A53234CB17.mft
File:                     32AA339FE387D2854828D8C97B6334A53234CB17.mft (raw, json)
Hash identifier:          9c16fnB2k8itP2e9g3uPJDb8h7Hc27zjh3Tls520ljg=
Subject key identifier:   DE:A7:3F:EC:CD:D3:55:DA:A0:CB:07:53:22:0F:BF:4B:72:BA:CC:96
Authority key identifier: 32:AA:33:9F:E3:87:D2:85:48:28:D8:C9:7B:63:34:A5:32:34:CB:17
Certificate issuer:       /CN=32AA339FE387D2854828D8C97B6334A53234CB17
Certificate serial:       325ADDBE0567296FF0059C4E24B99AD6EA6F36D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32AA339FE387D2854828D8C97B6334A53234CB17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/32AA339FE387D2854828D8C97B6334A53234CB17.mft
Manifest number:          FF
Signing time:             Fri 02 Dec 2022 07:47:04 +0000
Manifest this update:     Fri 02 Dec 2022 07:42:04 +0000
Manifest next update:     Sat 03 Dec 2022 10:47:04 +0000
Files and hashes:         1: 32AA339FE387D2854828D8C97B6334A53234CB17.crl (hash: u0bYdOe5uV9w8aZ9J/GjYmcuo7idxxeEdZabon4zrRg=)
                          2: 323830343a323739343a3a2f33322d3332203d3e20323633393131.roa (hash: rdED0XpbcBoIhfA2ZalPoJmMNbBxZ8tXbys31vdr2Qo=)
                          3: 3133382e3230342e3137322e302f32322d3234203d3e20323633393131.roa (hash: 06+3PusVcrjaRCZc4YFcbD9WlqmQ50NVWWSNAIksymM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5a:dd:be:05:67:29:6f:f0:05:9c:4e:24:b9:9a:d6:ea:6f:36:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32AA339FE387D2854828D8C97B6334A53234CB17
        Validity
            Not Before: Dec  2 07:42:04 2022 GMT
            Not After : Dec  3 10:47:04 2022 GMT
        Subject: CN=DEA73FECCDD355DAA0CB0753220FBF4B72BACC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:44:77:3a:08:54:02:55:a8:ab:b6:fc:26:
                    f8:7d:61:e9:16:16:76:09:fc:6b:78:5a:4c:13:a0:
                    6d:65:6a:19:37:8e:c1:22:7d:c3:3f:27:dc:c0:d2:
                    5a:d7:c1:ac:b6:b7:24:c6:83:df:d9:0c:6c:29:57:
                    a2:9c:70:ad:c1:cf:44:47:af:9b:bb:cf:6c:34:c2:
                    70:c3:f5:23:01:ba:03:da:59:f7:ac:6d:e3:e6:fa:
                    bb:fb:be:4f:80:15:f2:99:32:da:15:55:1d:d5:b4:
                    bb:7a:37:f9:98:22:cf:70:6d:46:06:25:1e:68:d6:
                    c7:29:b5:04:de:72:5e:5f:a0:89:ef:4a:c8:ff:9d:
                    5c:5a:f3:4c:9e:38:79:4c:8f:f8:81:a4:71:27:62:
                    54:1a:c9:47:79:75:18:d3:17:65:8b:3f:c1:8e:00:
                    ce:d8:16:d7:18:8d:35:4e:91:ed:f6:bd:a0:ba:17:
                    55:14:78:55:e7:e1:26:c9:da:ed:11:7e:4d:d3:f8:
                    a8:01:50:bb:ce:93:ac:1b:85:b4:23:8c:c2:35:1d:
                    21:d7:de:3d:4b:99:df:c2:cd:17:e5:96:18:cd:49:
                    48:2e:93:36:5a:7c:6e:8d:ea:39:9b:2a:8d:fe:d3:
                    78:78:39:2e:0f:0b:33:86:1d:57:5a:1d:bf:14:da:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:3F:EC:CD:D3:55:DA:A0:CB:07:53:22:0F:BF:4B:72:BA:CC:96
            X509v3 Authority Key Identifier:
                keyid:32:AA:33:9F:E3:87:D2:85:48:28:D8:C9:7B:63:34:A5:32:34:CB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/32AA339FE387D2854828D8C97B6334A53234CB17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32AA339FE387D2854828D8C97B6334A53234CB17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/32AA339FE387D2854828D8C97B6334A53234CB17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:98:f7:da:75:7d:1c:3c:a7:f3:d6:c2:04:e5:f4:95:b8:b6:
         d2:d3:ba:0b:03:98:31:fa:bc:3c:74:2b:a0:33:b6:42:cf:95:
         9c:10:36:be:4b:97:66:56:01:ca:37:a2:00:f4:52:9f:91:62:
         03:7b:f3:09:11:17:ce:5c:f4:a4:19:e3:e1:56:2f:a1:d0:d9:
         5d:52:be:a9:12:81:16:bd:6d:fa:b7:34:65:3f:66:9e:68:63:
         da:3b:c6:0a:78:ca:32:cf:8e:b2:76:b7:67:97:66:da:d6:8a:
         e4:82:6a:6c:57:cc:6e:61:02:6b:e4:28:6b:79:08:34:ab:de:
         97:1a:65:24:59:43:2f:54:00:40:a4:59:1a:57:17:9f:31:be:
         26:dc:70:8b:47:67:ce:52:08:7c:44:0c:de:8c:e0:63:6c:f3:
         e0:ca:6a:aa:cf:3e:f8:22:10:0a:4f:41:2e:2b:96:34:91:88:
         05:c3:10:22:67:53:c5:ac:74:e6:6f:72:f1:65:79:76:2a:60:
         aa:6d:e4:6b:09:6a:37:45:59:0b:6b:56:48:a7:7d:72:3d:85:
         96:65:c7:93:da:01:c8:5d:7b:1f:3a:70:79:3e:af:67:4e:ed:
         44:9a:8d:66:d1:3a:db:05:02:84:db:d0:41:d6:d5:b1:a3:71:
         b6:b8:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org