Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.mft
File:                     328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.mft (raw, json)
Hash identifier:          Xux1JbUa3CN5o3n185Y4gYsSTNiNgRRjVPGmTZ3tv90=
Subject key identifier:   54:1F:6A:76:E4:60:FF:5B:EF:00:50:1C:32:12:04:E3:10:46:BB:F5
Authority key identifier: 32:8A:A3:8E:16:3E:EB:E8:44:12:52:AE:A3:C2:B4:B6:FF:73:8D:A3
Certificate issuer:       /CN=328AA38E163EEBE8441252AEA3C2B4B6FF738DA3
Certificate serial:       2A298DE54F6AC9BD198CD5CEBCB085D78E223D17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.mft
Manifest number:          0602
Signing time:             Mon 15 Apr 2024 01:46:33 +0000
Manifest this update:     Mon 15 Apr 2024 01:41:33 +0000
Manifest next update:     Tue 16 Apr 2024 03:26:33 +0000
Files and hashes:         1: 328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.crl (hash: 7lcKhVCsL421Cm+VaFoJuu5bVDltl86xefYB+/B7sKE=)
                          2: 323830343a333464343a3a2f33322d3438203d3e20323635343833.roa (hash: HemEn85cYssy0FQBeuhKAJqeisQ1zTaOxUXUXZQmlKE=)
                          3: 3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa (hash: 7FrGyRh2W6bmmPNmScKcn8eXnvqIFgyaZRbt0oozJhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:29:8d:e5:4f:6a:c9:bd:19:8c:d5:ce:bc:b0:85:d7:8e:22:3d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328AA38E163EEBE8441252AEA3C2B4B6FF738DA3
        Validity
            Not Before: Apr 15 01:41:33 2024 GMT
            Not After : Apr 16 03:26:33 2024 GMT
        Subject: CN=541F6A76E460FF5BEF00501C321204E31046BBF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:c1:73:38:e1:1c:45:42:bc:66:87:bb:13:
                    6c:6c:f3:2c:c0:ba:3a:5d:11:29:ae:94:fc:ef:d3:
                    d8:f3:42:ca:4f:0a:b0:7a:36:1f:95:b8:c5:18:e6:
                    a3:88:a5:09:8f:88:35:97:4a:0c:80:01:eb:fd:5c:
                    2e:b4:96:5f:95:cd:f4:f2:13:24:f6:95:ba:f8:bb:
                    c0:90:52:42:bf:d2:9c:f5:e2:ec:6e:26:ba:c2:30:
                    91:05:90:17:75:4a:96:f3:e5:13:1a:92:8a:df:1e:
                    c7:a8:a9:b8:9a:3d:d5:80:18:dd:68:ae:96:79:f5:
                    84:3d:14:90:36:5c:a2:b9:7d:cb:86:f4:51:5d:75:
                    81:b4:07:09:5e:9f:60:4f:53:34:22:dc:e4:d1:03:
                    3a:c2:dc:3e:39:f8:77:4d:0b:1e:be:14:ec:f1:94:
                    c3:1c:9f:66:de:cb:c8:4c:d4:21:67:93:ad:d8:05:
                    19:bb:cd:ee:ab:1a:da:85:e9:35:db:4c:1a:6a:15:
                    79:90:58:ac:78:c4:e4:ad:45:8b:17:e1:fc:d9:90:
                    f8:0e:7e:5a:4b:2e:cc:46:7f:6a:88:1e:8f:a8:d6:
                    af:b3:a5:f4:c9:c5:44:05:5b:b7:18:b4:4e:f9:b6:
                    fa:53:7d:d9:66:2f:5d:61:5f:17:74:34:88:4d:58:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1F:6A:76:E4:60:FF:5B:EF:00:50:1C:32:12:04:E3:10:46:BB:F5
            X509v3 Authority Key Identifier:
                keyid:32:8A:A3:8E:16:3E:EB:E8:44:12:52:AE:A3:C2:B4:B6:FF:73:8D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:e0:76:20:16:c3:d6:c8:c4:59:52:16:9c:c8:b9:09:fd:
         9c:e1:34:c0:63:25:74:96:ec:cb:b6:a0:ad:27:09:0a:88:5c:
         20:d1:a2:f2:41:44:0b:60:9d:96:7a:71:e1:c7:be:d0:c3:2e:
         bf:2a:b9:ea:ab:61:77:32:cd:51:03:33:4c:57:d4:55:c4:aa:
         03:7c:7e:1d:88:f4:cf:2c:dd:47:4e:55:c2:bb:b7:1c:ab:2b:
         06:7f:bf:74:46:d5:56:b0:32:81:91:30:a7:d2:b5:86:4f:ce:
         88:d1:b5:d3:46:59:6f:84:71:d5:97:8a:ed:be:ee:34:63:b6:
         f6:17:7b:12:74:4c:82:d7:67:06:dc:5a:fd:61:7b:59:5e:45:
         67:b5:39:c6:db:d1:bb:ec:55:7e:09:b5:1d:8c:16:0f:dd:58:
         bd:4a:c4:8b:e0:d2:da:7f:18:d0:69:39:48:f2:90:cc:42:ef:
         1c:a0:6f:0c:97:de:12:67:ea:0a:c0:5f:78:11:ba:2a:14:18:
         df:33:0c:c0:b8:e3:35:ff:f6:7c:1a:f6:7b:93:f2:d3:26:f4:
         8f:15:bd:49:5c:2f:3f:97:26:84:ed:e4:71:95:4d:5f:33:bb:
         64:cc:88:81:c5:9a:57:8b:79:2b:bb:c5:be:af:d3:f7:d5:b9:
         c2:94:18:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKimN5U9qyb0ZjNXOvLCF144iPRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI4QUEzOEUxNjNFRUJFODQ0MTI1MkFFQTNDMkI0QjZG
RjczOERBMzAeFw0yNDA0MTUwMTQxMzNaFw0yNDA0MTYwMzI2MzNaMDMxMTAvBgNV
BAMTKDU0MUY2QTc2RTQ2MEZGNUJFRjAwNTAxQzMyMTIwNEUzMTA0NkJCRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMsFzOOEcRUK8Zoe7E2xs8yzA
ujpdESmulPzv09jzQspPCrB6Nh+VuMUY5qOIpQmPiDWXSgyAAev9XC60ll+VzfTy
EyT2lbr4u8CQUkK/0pz14uxuJrrCMJEFkBd1Spbz5RMakorfHseoqbiaPdWAGN1o
rpZ59YQ9FJA2XKK5fcuG9FFddYG0Bwlen2BPUzQi3OTRAzrC3D45+HdNCx6+FOzx
lMMcn2bey8hM1CFnk63YBRm7ze6rGtqF6TXbTBpqFXmQWKx4xOStRYsX4fzZkPgO
flpLLsxGf2qIHo+o1q+zpfTJxUQFW7cYtE75tvpTfdlmL11hXxd0NIhNWEdnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVB9qduRg/1vvAFAcMhIE4xBGu/UwHwYDVR0j
BBgwFoAUMoqjjhY+6+hEElKuo8K0tv9zjaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVLaUxFeEpEZnpTcHAyVWNVQlpzU3gyRmtIdWJ1cmQ0NWpTR2Fra2pL
YjQvMC8zMjhBQTM4RTE2M0VFQkU4NDQxMjUyQUVBM0MyQjRCNkZGNzM4REEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyOEFBMzhFMTYzRUVCRTg0
NDEyNTJBRUEzQzJCNEI2RkY3MzhEQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnVLaUxFeEpEZnpTcHAyVWNVQlpzU3gyRmtIdWJ1cmQ0NWpTR2Fra2pLYjQvMC8z
MjhBQTM4RTE2M0VFQkU4NDQxMjUyQUVBM0MyQjRCNkZGNzM4REEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe5XgdiAWw9bIxFlSFpzIuQn9nOE0wGMldJbsy7agrScJCohcINGi8kFEC2Cd
lnpx4ce+0MMuvyq56qthdzLNUQMzTFfUVcSqA3x+HYj0zyzdR05Vwru3HKsrBn+/
dEbVVrAygZEwp9K1hk/OiNG100ZZb4Rx1ZeK7b7uNGO29hd7EnRMgtdnBtxa/WF7
WV5FZ7U5xtvRu+xVfgm1HYwWD91YvUrEi+DS2n8Y0Gk5SPKQzELvHKBvDJfeEmfq
CsBfeBG6KhQY3zMMwLjjNf/2fBr2e5Py0yb0jxW9SVwvP5cmhO3kcZVNXzO7ZMyI
gcWaV4t5K7vFvq/T99W5wpQYzA==
-----END CERTIFICATE-----