Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/932958F7F100FC92A232C05BB49EE3D150C915F1.mft
File:                     932958F7F100FC92A232C05BB49EE3D150C915F1.mft (raw, json)
Hash identifier:          D5lvp/0qd1UTDafklE/3VasfEs4nEH0KxDLpdYU0apM=
Subject key identifier:   80:1D:ED:7C:A4:5E:2F:D9:70:B0:8B:4F:05:D7:18:D7:1D:B3:04:4A
Authority key identifier: 93:29:58:F7:F1:00:FC:92:A2:32:C0:5B:B4:9E:E3:D1:50:C9:15:F1
Certificate issuer:       /CN=932958F7F100FC92A232C05BB49EE3D150C915F1
Certificate serial:       7A5221F25405A3615BA72204346B12D8C7814427
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/932958F7F100FC92A232C05BB49EE3D150C915F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/932958F7F100FC92A232C05BB49EE3D150C915F1.mft
Manifest number:          37
Signing time:             Mon 15 Apr 2024 07:29:58 +0000
Manifest this update:     Mon 15 Apr 2024 07:24:58 +0000
Manifest next update:     Tue 16 Apr 2024 10:57:58 +0000
Files and hashes:         1: 932958F7F100FC92A232C05BB49EE3D150C915F1.crl (hash: pzGaigdtGQTxE407xIh/l7V/3E6S1VngyG5jqbpKSiU=)
                          2: 323830343a333539633a323430303a3a2f33382d3338203d3e20323636323936.roa (hash: XMkOqJZvkuxmME2OLADN2lKjbKFjuUkcsIVN5LnyLQI=)
                          3: 3137302e37392e39322e302f32342d3234203d3e20323636323936.roa (hash: CZ7Ed9IuaQU4KNZNd39hIQbYNaAx/quKVvWqWWlnvY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:52:21:f2:54:05:a3:61:5b:a7:22:04:34:6b:12:d8:c7:81:44:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932958F7F100FC92A232C05BB49EE3D150C915F1
        Validity
            Not Before: Apr 15 07:24:58 2024 GMT
            Not After : Apr 16 10:57:58 2024 GMT
        Subject: CN=801DED7CA45E2FD970B08B4F05D718D71DB3044A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:0e:da:89:66:6d:0b:e2:42:20:fc:11:17:
                    5c:ea:02:f4:42:62:24:e4:1d:55:c2:8d:7a:7b:64:
                    32:fe:c8:8e:e8:77:4c:a9:1e:5a:05:9f:67:35:bb:
                    e0:af:5b:ff:39:c6:77:d9:c9:d2:93:c7:8a:8e:01:
                    ab:3c:91:91:1b:1f:0d:f8:fc:ef:0d:de:20:f1:21:
                    ad:5b:fc:6e:97:7c:ce:55:ab:7a:a9:30:da:70:12:
                    29:a7:d4:ec:28:62:3a:52:27:b9:8b:f9:56:43:71:
                    8a:b4:6d:3a:fc:72:45:61:db:4a:e5:40:53:2f:8e:
                    cc:23:ea:2a:5a:70:6b:e8:d3:11:c8:83:fb:09:3a:
                    04:c8:c2:f2:fe:56:27:4d:86:e1:58:11:e3:39:a3:
                    e6:0c:74:f0:73:68:04:0c:53:6c:0e:3c:10:b0:e8:
                    5b:95:fb:a5:ab:05:0e:8f:ea:ee:dc:80:72:4f:76:
                    fb:57:7e:f3:0e:f7:e9:3f:5c:22:34:f4:7f:e3:4a:
                    75:8a:66:aa:40:47:0d:95:87:4a:84:10:e1:8a:a6:
                    de:98:34:c1:db:e7:8f:2b:62:0a:7d:a0:27:a9:09:
                    72:ee:c1:42:8a:0a:22:79:d1:1e:04:fc:71:d6:79:
                    8d:c6:64:9b:8d:06:2c:06:e2:bf:57:26:0d:94:ce:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1D:ED:7C:A4:5E:2F:D9:70:B0:8B:4F:05:D7:18:D7:1D:B3:04:4A
            X509v3 Authority Key Identifier:
                keyid:93:29:58:F7:F1:00:FC:92:A2:32:C0:5B:B4:9E:E3:D1:50:C9:15:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/932958F7F100FC92A232C05BB49EE3D150C915F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/932958F7F100FC92A232C05BB49EE3D150C915F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/932958F7F100FC92A232C05BB49EE3D150C915F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:81:03:8b:62:5b:f7:d0:9a:70:43:e7:20:d8:90:b0:70:db:
         cd:a0:b6:c7:54:23:aa:21:df:3f:5e:cf:86:62:3d:d4:e4:ca:
         68:54:4d:f1:44:25:98:10:e6:a5:0b:a6:06:f8:22:41:91:6d:
         ae:59:28:50:3a:3e:c7:2e:c3:5f:1b:e3:48:55:4d:a4:a4:06:
         61:9f:7e:68:27:ca:e5:46:f0:c1:7b:22:1c:87:36:1f:2c:38:
         1b:7d:07:c3:b0:6c:cd:b5:db:ec:a8:84:d8:e1:65:c3:5a:63:
         ad:62:19:f6:d2:49:77:ec:e2:2a:48:75:5f:14:8b:07:8e:b6:
         da:af:d5:d0:2f:dc:8d:b1:ae:7c:07:fa:65:3f:b3:d9:40:04:
         41:21:02:31:13:f3:59:08:20:e4:70:53:88:06:c0:2b:7a:fd:
         78:32:36:a9:d2:c1:7c:99:fc:14:bf:b3:1d:2b:17:0f:2e:f3:
         c9:c9:f5:e6:39:3f:ae:e1:d7:79:84:85:bd:7d:13:b6:43:28:
         08:55:e2:dd:dd:29:9b:25:91:9e:8d:82:6b:0b:ae:7e:f5:7d:
         2e:8b:0b:07:8b:d3:32:22:36:6b:f9:de:42:8c:67:0e:a5:2d:
         1e:db:df:84:05:15:64:33:be:3a:b7:cf:6b:bd:cc:68:9f:d4:
         c0:46:32:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----