Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.mft
File:                     C32EF4FE36152A1B57F8E49C42908899C2D13CF0.mft (raw, json)
Hash identifier:          x61ZWKjv7Fv9PVEpsMqX1Wu8NRRMB4a3GrqHI0HEbE0=
Subject key identifier:   33:86:5B:1A:6D:33:89:31:21:6E:90:04:53:08:D9:99:73:29:A8:44
Authority key identifier: C3:2E:F4:FE:36:15:2A:1B:57:F8:E4:9C:42:90:88:99:C2:D1:3C:F0
Certificate issuer:       /CN=C32EF4FE36152A1B57F8E49C42908899C2D13CF0
Certificate serial:       67B6A0F1A325AF0F96385F8C7A64693110E9C117
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.mft
Manifest number:          0184
Signing time:             Sun 14 Apr 2024 22:14:22 +0000
Manifest this update:     Sun 14 Apr 2024 22:09:22 +0000
Manifest next update:     Tue 16 Apr 2024 01:52:22 +0000
Files and hashes:         1: 3230372e3234382e31362e302f32322d3332203d3e20323731343132.roa (hash: xTb+nt/ueg3yGNani8udy4R9t/CorAmLuQGJpCV7q5Q=)
                          2: 323830343a376232303a3a2f33322d313238203d3e20323731343132.roa (hash: HnLhR9M+dXKzP+and2Bvl6fLX38KPaokAbFGRfOj30g=)
                          3: C32EF4FE36152A1B57F8E49C42908899C2D13CF0.crl (hash: C63RJLlXedoqn+EhUunGMYQkCIuOdgvRlvOIw3y2YR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b6:a0:f1:a3:25:af:0f:96:38:5f:8c:7a:64:69:31:10:e9:c1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C32EF4FE36152A1B57F8E49C42908899C2D13CF0
        Validity
            Not Before: Apr 14 22:09:22 2024 GMT
            Not After : Apr 16 01:52:22 2024 GMT
        Subject: CN=33865B1A6D338931216E90045308D9997329A844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:a5:d7:24:aa:ec:50:f5:46:69:99:6d:93:
                    da:22:cf:ba:30:20:14:19:63:49:01:28:5a:32:7f:
                    34:07:e5:22:46:cc:5e:af:42:69:04:f1:3e:2d:9b:
                    26:f9:51:a0:ef:d6:5d:5c:91:64:25:29:75:54:d1:
                    b2:56:bd:82:60:3a:77:c0:a3:a9:61:f5:a1:0f:70:
                    56:7d:c1:6b:c0:b9:fa:02:e3:62:75:cd:89:cf:b2:
                    b7:18:03:ea:2d:86:a5:85:57:d7:02:21:5d:e0:f4:
                    60:59:ad:15:d5:45:c8:93:ff:f1:2d:0e:1b:85:5b:
                    87:3b:46:1e:54:8a:2b:ed:9e:e3:6c:1c:16:5d:28:
                    60:3b:58:9a:1d:5c:0c:00:a6:e8:20:7d:d6:f5:58:
                    e8:eb:38:96:15:0d:ec:40:bf:bb:a0:f3:96:d7:bb:
                    0b:c9:ba:54:0e:db:8d:0f:29:d8:e8:51:73:f2:aa:
                    70:60:1b:54:25:52:84:e2:27:50:82:6a:5b:79:6e:
                    8e:b3:3d:aa:ef:c4:dc:17:ad:0e:21:87:79:ee:db:
                    7a:70:59:2c:09:83:47:77:de:3f:91:61:07:96:1e:
                    e8:eb:5c:67:ca:7e:e1:52:10:1a:5a:40:1a:15:82:
                    68:d7:36:dd:34:ff:e0:b6:8b:5d:6c:e2:61:7d:e3:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:86:5B:1A:6D:33:89:31:21:6E:90:04:53:08:D9:99:73:29:A8:44
            X509v3 Authority Key Identifier:
                keyid:C3:2E:F4:FE:36:15:2A:1B:57:F8:E4:9C:42:90:88:99:C2:D1:3C:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:76:cb:db:ce:9a:e1:70:57:2b:54:19:34:91:32:07:6e:
         94:d6:c7:7d:52:35:67:00:2c:3c:df:eb:99:4e:3a:46:81:d9:
         c6:14:67:7d:b8:1e:a2:f5:f0:8b:69:b0:03:8e:cf:04:18:d2:
         1e:f7:26:c7:1f:bc:a2:c2:11:c2:d2:e7:fb:47:14:b7:17:a5:
         69:9a:70:f9:3a:8c:84:74:8a:6c:e7:91:c7:43:14:f0:0e:ee:
         bc:75:1d:3f:94:71:5a:bf:76:c0:57:8c:ca:51:4c:fe:85:de:
         c0:d0:06:ab:61:15:bb:c0:3d:6b:33:35:a1:2e:d2:f1:36:e9:
         f9:e1:35:96:c4:09:d0:3d:a6:df:c9:57:3a:c6:79:7f:f2:08:
         b8:a8:0f:14:59:7d:ca:74:14:32:9c:56:42:07:90:3a:fe:88:
         19:ea:0a:4e:76:5f:70:6a:1e:01:65:1f:a5:1e:19:ef:dd:0b:
         12:72:90:a8:f9:c1:1c:fd:45:50:c2:f5:00:3b:b1:3e:0a:cb:
         67:23:48:e6:91:9d:18:a8:97:8c:5e:49:4d:41:30:ed:6e:3e:
         36:46:f0:c1:f6:a1:91:0c:f7:5f:9c:4c:30:a9:b2:9a:9a:d0:
         e5:19:e1:33:9a:c8:fd:44:5d:6b:33:5c:d8:a8:f2:3c:b8:9b:
         97:e3:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----