Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.mft
File:                     320EB8465036C44E507A88E7F8BABA7B33CA3BD4.mft (raw, json)
Hash identifier:          YiNKLt1semf+oMm4p5LUf1GEEu9VjX4lY8V64xrtu0M=
Subject key identifier:   FF:7D:E7:13:7A:16:AC:01:2D:2A:20:4C:7E:AA:18:45:08:40:23:DC
Authority key identifier: 32:0E:B8:46:50:36:C4:4E:50:7A:88:E7:F8:BA:BA:7B:33:CA:3B:D4
Certificate issuer:       /CN=320EB8465036C44E507A88E7F8BABA7B33CA3BD4
Certificate serial:       443333AEB0CDDE559DD4491A9D746672C8CEA02B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.mft
Manifest number:          09
Signing time:             Mon 15 Apr 2024 00:21:52 +0000
Manifest this update:     Mon 15 Apr 2024 00:16:52 +0000
Manifest next update:     Tue 16 Apr 2024 03:02:52 +0000
Files and hashes:         1: 320EB8465036C44E507A88E7F8BABA7B33CA3BD4.crl (hash: z5HRw315KJGrO2J9tC41VPRyUmsPLHPwboW54/gBxrk=)
                          2: 34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa (hash: wZ4i5KL9K0A/mnMuWaYgi2X1ojwvu+DhXOMJPkUek78=)
                          3: 323830343a363332303a3a2f33322d3336203d3e20323639333430.roa (hash: ekFKPaascT3IAOaPdVG+ZGD7eZnvSn2aXkGB9wtSKsg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:33:33:ae:b0:cd:de:55:9d:d4:49:1a:9d:74:66:72:c8:ce:a0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320EB8465036C44E507A88E7F8BABA7B33CA3BD4
        Validity
            Not Before: Apr 15 00:16:52 2024 GMT
            Not After : Apr 16 03:02:52 2024 GMT
        Subject: CN=FF7DE7137A16AC012D2A204C7EAA1845084023DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:cb:2e:46:df:bf:66:2a:1a:36:b7:23:8e:
                    db:07:42:d0:d7:bd:9e:17:3f:5b:5c:ad:df:b8:cb:
                    90:6f:4b:72:8e:1f:94:8f:97:34:6f:8e:f1:76:c2:
                    35:e1:6c:cd:8b:1e:3e:9d:aa:e2:22:b9:34:c6:1c:
                    b1:48:3c:04:27:a0:73:4e:79:45:da:3e:65:fb:a9:
                    c1:42:db:d3:99:26:e2:51:12:2c:78:ba:99:64:3e:
                    fc:75:d5:a9:e6:0e:f9:a8:2c:76:5b:76:be:77:4e:
                    44:74:b4:56:63:50:a0:14:3d:5f:d8:26:6c:08:1b:
                    82:f0:5d:9b:4f:4a:81:d1:c0:0a:d6:43:7a:74:4c:
                    a2:0a:73:5b:52:df:23:b8:7e:3e:ed:fb:89:d4:8d:
                    71:52:a6:00:7b:d9:b1:2a:72:ec:81:13:ff:1b:5f:
                    70:35:1a:4e:48:79:58:2d:d4:1b:2e:80:a3:09:39:
                    13:73:3a:c3:bd:e9:f7:0b:91:6c:8b:9a:78:db:63:
                    9a:3b:48:55:18:bd:d1:95:fd:47:bd:01:7f:b6:8d:
                    f2:d0:cd:d8:22:d5:fc:f5:45:4b:51:06:90:21:3f:
                    3c:49:06:ef:2d:b7:24:f5:52:b7:8a:76:69:01:f2:
                    44:56:6a:6c:f9:6d:4b:14:ec:f6:d3:f5:0d:f8:c9:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7D:E7:13:7A:16:AC:01:2D:2A:20:4C:7E:AA:18:45:08:40:23:DC
            X509v3 Authority Key Identifier:
                keyid:32:0E:B8:46:50:36:C4:4E:50:7A:88:E7:F8:BA:BA:7B:33:CA:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/1/320EB8465036C44E507A88E7F8BABA7B33CA3BD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:18:d2:88:94:20:26:59:0b:a0:dc:43:26:2e:2c:00:82:1b:
         4a:9d:51:4e:14:68:2c:58:cf:0c:0a:2a:69:46:df:c5:3c:b1:
         cb:41:d2:f0:1c:c8:41:77:2e:21:a4:a8:49:d8:b0:bb:22:e0:
         4c:de:63:cd:27:2f:4e:86:0d:5e:ce:a7:99:f4:01:d7:73:e0:
         db:e9:47:2f:e4:6d:08:a7:f4:86:32:a2:0c:45:dd:2e:a6:84:
         54:e8:3a:ac:4e:36:a3:b7:60:08:76:18:cd:ec:f8:78:2c:34:
         3d:73:84:be:ff:c9:e6:7a:83:4a:65:02:d3:4c:8b:5d:f4:c1:
         ca:10:bf:93:24:fb:c3:25:71:42:b9:39:3b:fe:5b:83:61:02:
         41:72:36:66:c8:04:05:79:d6:d4:bf:f9:31:c7:5e:63:3e:d3:
         37:90:15:20:7e:9b:f5:61:3f:29:ee:4e:42:0b:36:51:25:11:
         45:b3:03:91:1b:80:aa:c3:e1:73:85:35:78:36:85:d2:2d:da:
         98:7b:c5:a2:45:b8:6f:a5:d1:cc:85:59:15:79:0d:64:8f:74:
         fe:10:cd:52:b9:a6:6d:64:34:1b:3b:5d:18:5d:df:1d:e4:6e:
         5d:ce:d5:96:6a:f7:c9:b9:e4:e8:68:d9:06:46:38:fb:7b:2d:
         f0:48:68:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURDMzrrDN3lWd1EkanXRmcsjOoCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIwRUI4NDY1MDM2QzQ0RTUwN0E4OEU3RjhCQUJBN0Iz
M0NBM0JENDAeFw0yNDA0MTUwMDE2NTJaFw0yNDA0MTYwMzAyNTJaMDMxMTAvBgNV
BAMTKEZGN0RFNzEzN0ExNkFDMDEyRDJBMjA0QzdFQUExODQ1MDg0MDIzREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeo8suRt+/ZioaNrcjjtsHQtDX
vZ4XP1tcrd+4y5BvS3KOH5SPlzRvjvF2wjXhbM2LHj6dquIiuTTGHLFIPAQnoHNO
eUXaPmX7qcFC29OZJuJREix4uplkPvx11anmDvmoLHZbdr53TkR0tFZjUKAUPV/Y
JmwIG4LwXZtPSoHRwArWQ3p0TKIKc1tS3yO4fj7t+4nUjXFSpgB72bEqcuyBE/8b
X3A1Gk5IeVgt1BsugKMJORNzOsO96fcLkWyLmnjbY5o7SFUYvdGV/Ue9AX+2jfLQ
zdgi1fz1RUtRBpAhPzxJBu8ttyT1UreKdmkB8kRWamz5bUsU7PbT9Q34yc6xAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/33nE3oWrAEtKiBMfqoYRQhAI9wwHwYDVR0j
BBgwFoAUMg64RlA2xE5Qeojn+Lq6ezPKO9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpnVGY1QWJXNVBSS2l6MllGNHBMWjlMR1VyNnplM29iZmpwMTRxelFL
TmcvMS8zMjBFQjg0NjUwMzZDNDRFNTA3QTg4RTdGOEJBQkE3QjMzQ0EzQkQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMEVCODQ2NTAzNkM0NEU1
MDdBODhFN0Y4QkFCQTdCMzNDQTNCRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWpnVGY1QWJXNVBSS2l6MllGNHBMWjlMR1VyNnplM29iZmpwMTRxelFLTmcvMS8z
MjBFQjg0NjUwMzZDNDRFNTA3QTg4RTdGOEJBQkE3QjMzQ0EzQkQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIhjSiJQgJlkLoNxDJi4sAIIbSp1RThRoLFjPDAoqaUbfxTyxy0HS8BzIQXcu
IaSoSdiwuyLgTN5jzScvToYNXs6nmfQB13Pg2+lHL+RtCKf0hjKiDEXdLqaEVOg6
rE42o7dgCHYYzez4eCw0PXOEvv/J5nqDSmUC00yLXfTByhC/kyT7wyVxQrk5O/5b
g2ECQXI2ZsgEBXnW1L/5McdeYz7TN5AVIH6b9WE/Ke5OQgs2USURRbMDkRuAqsPh
c4U1eDaF0i3amHvFokW4b6XRzIVZFXkNZI90/hDNUrmmbWQ0GztdGF3fHeRuXc7V
lmr3ybnk6GjZBkY4+3st8EhoxQ==
-----END CERTIFICATE-----