Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/32FD4DDA28599A952A3EE560885B397084F837C4.mft
File:                     32FD4DDA28599A952A3EE560885B397084F837C4.mft (raw, json)
Hash identifier:          9tEMlz1HuDE30Jhb4016nSUV3t2jxxovssH9PFSznYY=
Subject key identifier:   75:47:88:CC:47:06:43:C0:0B:00:1F:0F:32:CA:B7:CC:8C:F2:9B:16
Authority key identifier: 32:FD:4D:DA:28:59:9A:95:2A:3E:E5:60:88:5B:39:70:84:F8:37:C4
Certificate issuer:       /CN=32FD4DDA28599A952A3EE560885B397084F837C4
Certificate serial:       75A00E5B1B2671CD6412EECB5EAA863A4F5A4DF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32FD4DDA28599A952A3EE560885B397084F837C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/32FD4DDA28599A952A3EE560885B397084F837C4.mft
Manifest number:          023B
Signing time:             Fri 22 Sep 2023 16:33:07 +0000
Manifest this update:     Fri 22 Sep 2023 16:28:07 +0000
Manifest next update:     Sat 23 Sep 2023 18:01:07 +0000
Files and hashes:         1: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: QRcIpXg7xsoplW8Y717gbmfokGodSupKwd9H+68tN/Y=)
                          2: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: t49pdjdHH9HkJPFnyxumYloHF/pORag/leY5bUxGBnI=)
                          3: 32FD4DDA28599A952A3EE560885B397084F837C4.crl (hash: p1XEImRjaDl0e2FP2juOdTZE7PSmwJBi5J/R0P2OS4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a0:0e:5b:1b:26:71:cd:64:12:ee:cb:5e:aa:86:3a:4f:5a:4d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32FD4DDA28599A952A3EE560885B397084F837C4
        Validity
            Not Before: Sep 22 16:28:07 2023 GMT
            Not After : Sep 23 18:01:07 2023 GMT
        Subject: CN=754788CC470643C00B001F0F32CAB7CC8CF29B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:58:68:38:44:f1:d0:4b:58:09:a2:62:d2:
                    34:39:70:dd:e8:5c:13:40:ce:2e:34:74:d9:46:60:
                    aa:6a:3c:6f:47:6d:7e:96:3b:04:2b:04:4b:7b:25:
                    1b:f3:5e:71:ac:68:72:a4:c5:67:45:36:ad:6d:2f:
                    75:05:43:b0:03:a4:6c:31:86:72:2b:6e:e7:97:83:
                    62:b8:01:57:59:e6:88:30:35:0e:df:f1:b3:8e:fe:
                    24:1a:c5:2b:fb:ec:57:5d:ea:17:c4:c1:ae:24:8e:
                    f7:ee:3f:aa:01:8c:01:cc:b9:2b:3d:4a:ce:54:3a:
                    54:e5:49:50:1b:b5:8c:4d:c1:19:70:7e:13:4e:07:
                    1a:d7:b0:81:07:01:f1:d7:73:9f:51:c6:30:a7:55:
                    85:72:6b:a4:48:11:fc:08:e3:60:2f:56:1a:05:1e:
                    67:92:49:54:7c:d2:27:58:43:b9:50:47:3c:bc:cf:
                    42:1c:09:89:d0:2d:25:de:25:f1:c6:19:78:46:2a:
                    a5:88:ac:c5:13:c9:6a:b6:61:73:d2:64:2a:80:ac:
                    4e:84:39:40:b1:5d:65:2c:5e:9d:8a:70:7c:f4:69:
                    0c:09:cb:49:25:fa:dc:bc:f3:1e:9e:b6:6b:77:4c:
                    83:e3:73:1b:1f:89:eb:a9:c8:bb:31:0d:b6:60:27:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:88:CC:47:06:43:C0:0B:00:1F:0F:32:CA:B7:CC:8C:F2:9B:16
            X509v3 Authority Key Identifier:
                keyid:32:FD:4D:DA:28:59:9A:95:2A:3E:E5:60:88:5B:39:70:84:F8:37:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/32FD4DDA28599A952A3EE560885B397084F837C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32FD4DDA28599A952A3EE560885B397084F837C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/32FD4DDA28599A952A3EE560885B397084F837C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:71:ba:41:2e:d8:ca:6b:eb:37:74:c2:a5:a6:fd:e8:6c:4e:
         e8:f7:f1:85:8c:25:1b:86:2a:ba:08:57:64:40:18:79:62:3d:
         e6:63:97:19:18:d4:77:94:1b:6a:c3:bb:13:d4:db:0b:c1:17:
         c2:ab:b0:81:68:ec:26:3b:d0:b2:d5:89:ba:b1:88:7e:58:ce:
         3d:78:a1:19:04:e3:24:64:73:10:b6:e5:7d:51:a6:b9:b8:51:
         d9:7c:4e:83:e6:73:f9:79:bc:26:e1:ea:c7:24:f1:45:57:de:
         5e:88:60:44:1f:0a:db:8c:52:71:13:f4:ad:79:0a:39:d2:4e:
         d1:fc:2e:eb:ed:31:81:30:ed:ac:72:79:18:c0:d9:a6:a8:41:
         ee:55:22:fc:e1:29:ca:e0:9d:19:fe:f4:ca:5e:63:cb:4f:cf:
         d3:1e:f6:db:60:82:0e:0b:3a:1c:d5:e6:9d:9b:30:03:cf:17:
         64:0d:46:84:cf:56:26:20:6c:1c:89:5f:34:cb:f6:16:20:1e:
         c9:ec:e9:77:05:71:59:51:4d:1b:9f:59:3a:9e:eb:2c:fe:ae:
         be:12:91:d5:70:44:2b:f7:62:9e:5a:f7:fe:9c:c4:bd:88:0f:
         ef:02:c7:42:3d:da:f4:f7:55:8a:ec:a5:bf:a4:ed:b9:b8:49:
         75:56:a7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----