Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.mft
File:                     3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.mft (raw, json)
Hash identifier:          8ao8bU72i8SrFFbDigUK27viza3B/uomEhNKOocH21Y=
Subject key identifier:   5E:00:C9:14:0A:E3:5E:6E:C9:2B:78:14:91:9F:20:FB:4A:29:15:E6
Authority key identifier: 32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
Certificate issuer:       /CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
Certificate serial:       5D9C0FBB97CAD01A87A3AC824BB9FB1E1A455FDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.mft
Manifest number:          9E
Signing time:             Mon 15 Apr 2024 03:08:57 +0000
Manifest this update:     Mon 15 Apr 2024 03:03:57 +0000
Manifest next update:     Tue 16 Apr 2024 06:46:57 +0000
Files and hashes:         1: 3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.crl (hash: W4qrczBryA9LV+j3B7pWS3uS7ipaAQ8R8EbuHD9Tb/U=)
                          2: 3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa (hash: X6+qTpDldMLORm4fFTkYVnPaYeps8kcBqt9s2L2zyqA=)
                          3: 3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa (hash: B2+mYIB2kvsEALi4sNMB9Ie0XBDo9rLtHB2+/oMSXLc=)
                          4: 3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa (hash: gx/8b1r+nKWOs2DV46y3a5CRvsyIVh3Prw2FOtibtE8=)
                          5: 323830343a313164303a3a2f33322d313238203d3e20323633343431.roa (hash: AgHb+1Jq50Cg/cVJG9U24UCpkAvRJ/Z1Tcj9I0oZ2sY=)
                          6: 3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa (hash: tlRvqWYBBuGvOgVrzLILXgAGfYcrHquhzhHr2vtcDw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9c:0f:bb:97:ca:d0:1a:87:a3:ac:82:4b:b9:fb:1e:1a:45:5f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
        Validity
            Not Before: Apr 15 03:03:57 2024 GMT
            Not After : Apr 16 06:46:57 2024 GMT
        Subject: CN=5E00C9140AE35E6EC92B7814919F20FB4A2915E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:45:30:6f:02:8b:ae:fd:48:27:69:45:3b:
                    7f:b3:a5:25:e1:84:ce:0a:19:9f:69:ab:2b:5d:52:
                    85:33:04:5f:51:51:f9:2f:61:bf:c2:04:0b:88:67:
                    b2:a4:06:15:72:5a:cd:64:58:e1:47:81:2f:fc:0d:
                    60:9c:59:f9:44:86:dd:6e:ab:05:a3:6f:b1:76:d0:
                    3e:44:ea:b3:16:57:ba:cd:ce:f9:ba:aa:a3:59:57:
                    e8:16:8c:94:b5:0b:05:89:16:dc:1c:6a:d9:02:54:
                    39:e8:4d:de:24:02:35:b8:99:ce:e3:9f:0d:cc:e9:
                    4f:dc:04:ec:8f:cd:5f:4a:10:ac:17:a0:b4:81:2a:
                    b7:c5:5e:22:7b:f3:5e:a7:2d:73:97:2b:4c:83:ac:
                    08:9f:8d:0f:1d:ba:03:51:e6:0c:40:4c:3c:1c:5e:
                    ac:2a:e3:7d:ee:26:54:36:a8:97:ae:30:d6:90:e5:
                    44:04:c7:6f:44:32:0c:8e:a6:d1:68:4c:73:bd:83:
                    d8:7a:4e:8f:8b:4c:c9:6d:62:cd:69:11:a1:ed:3c:
                    cd:98:aa:8a:ad:23:f4:7d:44:42:42:8b:4d:c4:df:
                    a0:ad:05:c2:2c:dc:24:6e:16:ea:e6:d8:40:5c:ed:
                    82:cb:49:5c:da:25:95:1f:4a:ea:b2:56:fb:c1:dd:
                    2f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:C9:14:0A:E3:5E:6E:C9:2B:78:14:91:9F:20:FB:4A:29:15:E6
            X509v3 Authority Key Identifier:
                keyid:32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:46:fb:53:b7:d4:c3:d6:64:10:13:d8:1f:14:aa:b2:0c:29:
         0c:41:c4:97:87:0a:54:29:90:a8:13:a6:c5:ab:e8:92:ae:65:
         8a:0a:f5:04:f6:a4:92:56:3f:8e:af:28:59:5f:0c:ad:45:d7:
         84:e1:29:c6:81:30:8a:3e:43:53:ea:8f:79:99:04:b3:c2:62:
         a0:1e:e7:1a:89:a6:8d:59:f6:51:64:87:6b:f2:bd:a7:9c:76:
         97:25:a6:75:ab:75:7f:a4:03:7e:78:8f:29:03:b1:c1:36:49:
         17:ec:2a:fb:bb:b4:03:05:8b:0b:3d:75:a9:12:aa:e7:d8:f1:
         a4:2b:28:e8:b7:9c:d2:06:39:15:cf:8a:68:3d:4e:4b:cc:98:
         1b:39:7d:cd:b9:15:d3:79:c2:f1:6e:df:86:71:5d:a3:1f:a6:
         c3:ea:1d:75:03:36:00:f2:ff:a1:60:8e:63:d1:95:69:14:32:
         d0:83:06:12:12:86:70:e8:d2:e1:ca:0d:ab:f6:42:60:09:6f:
         05:21:bd:84:8d:93:e7:9b:cb:5b:a7:94:64:53:2b:ff:1f:25:
         f4:93:4c:67:f1:06:7c:87:3f:08:10:84:78:18:18:f1:ad:78:
         0d:fd:d3:58:89:14:49:b0:f4:a3:34:f0:76:66:41:53:b4:46:
         5b:1b:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org