Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.mft
File:                     320E46742A246F2F4D4D4E1DDF535FB80D30747F.mft (raw, json)
Hash identifier:          OSLOObbTg8BIFsgGD+SdFP370APtWOEv7NW/2SDyxjg=
Subject key identifier:   E6:2C:85:C1:97:FB:A6:A2:A2:E9:6E:C7:A1:59:40:FD:5D:3B:C3:12
Authority key identifier: 32:0E:46:74:2A:24:6F:2F:4D:4D:4E:1D:DF:53:5F:B8:0D:30:74:7F
Certificate issuer:       /CN=320E46742A246F2F4D4D4E1DDF535FB80D30747F
Certificate serial:       03DA6048CCF15DC0AAE7D66F4D020421F3CB1432
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.mft
Manifest number:          0185
Signing time:             Mon 15 Apr 2024 10:04:52 +0000
Manifest this update:     Mon 15 Apr 2024 09:59:52 +0000
Manifest next update:     Tue 16 Apr 2024 13:46:52 +0000
Files and hashes:         1: 323830343a333766343a3a2f33322d313238203d3e20323636343436.roa (hash: WgYMTI0B8ERGpNNcmn68i6nYzSwkhrE++lUXlLqmCfs=)
                          2: 320E46742A246F2F4D4D4E1DDF535FB80D30747F.crl (hash: xEnRIESXQZGJgVfIm92Nif8u1dDE1Mo0Bb0+gYLa/uU=)
                          3: 3137302e38322e3139322e302f32322d3332203d3e20323636343436.roa (hash: mMv1PtMm6QRCC3q4W7kQno5r24zPMg8a+FJqy4Uydbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:da:60:48:cc:f1:5d:c0:aa:e7:d6:6f:4d:02:04:21:f3:cb:14:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320E46742A246F2F4D4D4E1DDF535FB80D30747F
        Validity
            Not Before: Apr 15 09:59:52 2024 GMT
            Not After : Apr 16 13:46:52 2024 GMT
        Subject: CN=E62C85C197FBA6A2A2E96EC7A15940FD5D3BC312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:22:b6:0c:5f:09:12:a8:62:3e:08:94:d6:
                    3b:b3:c3:3a:b9:2f:f1:b2:02:83:4a:1d:dd:bb:68:
                    cf:4e:7c:d8:9b:05:67:ca:34:fa:a2:5c:d5:72:8f:
                    64:6b:f8:3e:bd:5c:fd:a1:9a:a0:20:52:90:f6:ce:
                    13:b8:24:1b:e2:e9:c5:ad:e0:10:08:17:a3:32:d7:
                    8e:d0:3a:1e:5b:8c:eb:11:37:28:91:8e:4c:17:b7:
                    48:be:cd:52:69:d5:79:f0:2a:59:84:d9:84:d6:e5:
                    f3:2c:c0:a1:a3:10:61:b7:ce:6e:6f:f7:04:92:46:
                    ff:62:b0:3a:7e:ac:41:29:6c:81:07:ae:07:1a:d6:
                    f3:41:74:8b:9b:44:6f:31:52:99:b4:27:cb:04:98:
                    46:0f:bf:12:0a:c7:a4:95:58:41:e8:3a:b1:8b:95:
                    15:a0:4c:07:92:31:d0:8f:56:f9:af:af:47:be:07:
                    2b:8b:e0:15:69:ad:5b:52:d2:64:fe:f4:bc:67:6f:
                    ed:82:42:d4:ef:d3:24:5a:f4:d9:6e:71:bb:5c:da:
                    bb:ee:87:11:53:06:e4:4c:ba:34:04:0e:a3:4d:b6:
                    fb:e3:6b:e9:92:f3:06:60:67:84:3d:49:1b:8d:0a:
                    cc:60:7b:1a:6c:e5:77:b2:1a:9b:c6:c5:71:d7:6c:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2C:85:C1:97:FB:A6:A2:A2:E9:6E:C7:A1:59:40:FD:5D:3B:C3:12
            X509v3 Authority Key Identifier:
                keyid:32:0E:46:74:2A:24:6F:2F:4D:4D:4E:1D:DF:53:5F:B8:0D:30:74:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4d:20:22:72:4c:28:f7:78:9a:cf:7f:ed:80:69:31:bc:35:
         e3:4d:d2:83:85:d6:a7:91:1a:c7:68:23:22:c1:27:f4:e3:64:
         25:67:ca:14:04:8a:73:9b:c6:74:f0:cb:42:4f:04:d9:3b:a2:
         9c:d0:db:a3:67:7a:c2:5e:86:e0:2b:b4:89:a0:a4:3d:4d:7c:
         a9:d3:5b:04:a3:1d:8a:c6:b8:13:a2:d2:26:90:17:86:60:8d:
         81:21:ad:21:87:bc:80:57:d2:4c:cb:1c:a7:29:19:ea:84:a7:
         20:c7:d6:ce:33:ef:a7:8f:f0:58:d5:a5:32:4e:98:68:80:f5:
         fb:1c:a3:84:b3:dd:69:fd:00:d2:74:05:c5:db:f8:53:2f:eb:
         c6:68:52:ef:00:be:63:4c:18:2f:93:29:7b:9a:dc:42:d4:c0:
         cb:3f:f4:a0:7f:78:f0:3f:0b:c4:90:42:ec:16:5a:8c:e2:9f:
         bc:27:bb:7c:5e:6f:92:04:d3:b0:0f:53:18:55:65:74:99:9f:
         8e:77:1e:81:c1:e2:56:e7:0e:25:ab:84:07:f4:91:e2:63:13:
         52:98:95:f9:7f:87:8b:2e:e2:6e:2b:04:ec:7e:79:0b:a7:dc:
         8c:1e:c6:bf:04:44:b9:dd:b7:b4:76:bc:61:9c:e5:a3:21:50:
         f9:4b:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----