Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/0/DC32EE3150B27A2F08435740CF2B8037115FBB37.mft
File:                     DC32EE3150B27A2F08435740CF2B8037115FBB37.mft (raw, json)
Hash identifier:          1I8jemJDnZescqdjSMc6d4TLeV2VMuv5mY73pnirTho=
Subject key identifier:   5E:C6:E5:42:4C:2A:23:FC:27:05:70:06:61:EF:8F:0E:C2:CA:DA:20
Authority key identifier: DC:32:EE:31:50:B2:7A:2F:08:43:57:40:CF:2B:80:37:11:5F:BB:37
Certificate issuer:       /CN=DC32EE3150B27A2F08435740CF2B8037115FBB37
Certificate serial:       77B65B8F0ECCEB845F2B31F7B031FD5E52BAD5D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC32EE3150B27A2F08435740CF2B8037115FBB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/0/DC32EE3150B27A2F08435740CF2B8037115FBB37.mft
Manifest number:          0283
Signing time:             Mon 15 Apr 2024 06:15:09 +0000
Manifest this update:     Mon 15 Apr 2024 06:10:09 +0000
Manifest next update:     Tue 16 Apr 2024 09:37:09 +0000
Files and hashes:         1: DC32EE3150B27A2F08435740CF2B8037115FBB37.crl (hash: jlVRV0ykGS2JH3AUj1kVCgC5ySSF8c97MGetZDIZK0M=)
                          2: 323830343a373434343a3a2f33322d3334203d3e20323730393730.roa (hash: 3xvD51ro9R8RlL7Mm3w+cp76gNL9C7XUoZUrUmHqw58=)
                          3: 3137372e37342e3130382e302f32322d3234203d3e20323730393730.roa (hash: B8W96ZksTBmsv4xC1tjmTEzuZ0zqKaOjXkPb2KZV22g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b6:5b:8f:0e:cc:eb:84:5f:2b:31:f7:b0:31:fd:5e:52:ba:d5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC32EE3150B27A2F08435740CF2B8037115FBB37
        Validity
            Not Before: Apr 15 06:10:09 2024 GMT
            Not After : Apr 16 09:37:09 2024 GMT
        Subject: CN=5EC6E5424C2A23FC2705700661EF8F0EC2CADA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:25:64:76:01:2c:1b:96:be:74:23:bb:12:
                    62:5e:4c:6a:74:48:ef:ba:d7:18:26:6b:e6:d9:9b:
                    f1:15:7d:db:ec:72:c5:0e:51:5e:09:dc:df:a5:1f:
                    c4:1b:a5:76:0c:dc:54:1f:60:ed:c2:69:3d:9f:5e:
                    6e:03:7b:e9:72:59:28:a4:dc:5b:86:4d:31:51:0e:
                    ec:b1:a1:16:54:14:6a:58:82:a3:94:2f:b7:9d:35:
                    e6:d1:92:54:01:ea:2a:fb:2b:b1:24:98:f1:89:ad:
                    04:6a:4f:c6:0d:43:19:41:98:6d:14:f5:06:50:ff:
                    93:31:b6:97:06:20:46:86:b1:13:ed:55:2f:69:20:
                    4c:99:9a:45:bf:4f:52:8b:7c:47:e3:5d:39:b0:fd:
                    b5:7d:23:31:39:12:2f:2d:e7:b0:6c:91:26:0a:6e:
                    b3:a2:dd:d5:a9:18:50:89:fc:f9:6e:fb:58:fa:5a:
                    b6:1e:a9:af:4b:dd:93:9f:5a:8b:f7:32:db:39:d8:
                    98:9f:9c:af:ad:4c:2c:34:ca:87:11:41:93:1e:d1:
                    e9:bc:3e:e5:7a:bd:fb:f5:ce:17:db:fa:de:fa:9b:
                    a1:8d:80:a2:fd:13:78:93:a5:30:e2:03:fe:f9:ff:
                    1d:44:94:b8:b4:28:91:f9:f7:7c:02:1e:3c:a5:92:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C6:E5:42:4C:2A:23:FC:27:05:70:06:61:EF:8F:0E:C2:CA:DA:20
            X509v3 Authority Key Identifier:
                keyid:DC:32:EE:31:50:B2:7A:2F:08:43:57:40:CF:2B:80:37:11:5F:BB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/0/DC32EE3150B27A2F08435740CF2B8037115FBB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC32EE3150B27A2F08435740CF2B8037115FBB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/0/DC32EE3150B27A2F08435740CF2B8037115FBB37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:74:d2:5f:a7:b1:08:f9:11:65:0c:a9:b0:d4:1f:5f:3c:08:
         fc:7f:f8:7f:68:75:a9:50:9d:b2:4a:29:f6:87:9b:00:ff:db:
         00:a2:fd:6c:49:ec:ec:76:33:8b:32:9c:62:ef:68:76:70:b8:
         ff:3c:30:91:39:df:cb:f9:0e:c6:db:74:8d:8e:96:4a:12:ff:
         86:60:23:6e:cd:0e:d0:d2:82:05:a5:48:0e:74:9f:5c:cf:30:
         69:2e:ae:48:6f:2f:d7:97:2c:d0:f6:4e:b1:f9:55:e2:d5:e4:
         ce:64:9c:be:f4:2c:2a:51:4a:f6:16:df:2f:6a:c4:39:99:2a:
         0c:87:a0:9f:72:c8:ba:23:e0:55:c6:e6:d6:e3:6e:82:87:7d:
         6f:a5:0a:02:e6:d1:d6:5c:92:2a:5f:ea:79:7f:8f:d7:bb:2a:
         8f:a7:9f:21:12:a9:86:10:5a:17:93:81:2d:25:80:f2:d4:4c:
         0c:ee:23:a6:df:fb:89:90:45:f4:9f:a2:36:cb:4e:af:b7:68:
         3b:db:13:67:3e:bd:15:77:cb:63:16:ca:6b:f9:8e:38:7d:aa:
         38:70:1d:1e:d0:3b:e2:9b:bd:c4:fd:57:f1:b5:bd:d3:af:11:
         80:b1:dd:63:cc:8c:a2:1d:cb:a2:42:9b:6d:3d:53:25:96:25:
         fe:08:04:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd7Zbjw7M64RfKzH3sDH9XlK61dEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMzMkVFMzE1MEIyN0EyRjA4NDM1NzQwQ0YyQjgwMzcx
MTVGQkIzNzAeFw0yNDA0MTUwNjEwMDlaFw0yNDA0MTYwOTM3MDlaMDMxMTAvBgNV
BAMTKDVFQzZFNTQyNEMyQTIzRkMyNzA1NzAwNjYxRUY4RjBFQzJDQURBMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghiVkdgEsG5a+dCO7EmJeTGp0
SO+61xgma+bZm/EVfdvscsUOUV4J3N+lH8QbpXYM3FQfYO3CaT2fXm4De+lyWSik
3FuGTTFRDuyxoRZUFGpYgqOUL7edNebRklQB6ir7K7EkmPGJrQRqT8YNQxlBmG0U
9QZQ/5MxtpcGIEaGsRPtVS9pIEyZmkW/T1KLfEfjXTmw/bV9IzE5Ei8t57BskSYK
brOi3dWpGFCJ/Plu+1j6WrYeqa9L3ZOfWov3Mts52JifnK+tTCw0yocRQZMe0em8
PuV6vfv1zhfb+t76m6GNgKL9E3iTpTDiA/75/x1ElLi0KJH593wCHjylkv+RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXsblQkwqI/wnBXAGYe+PDsLK2iAwHwYDVR0j
BBgwFoAU3DLuMVCyei8IQ1dAzyuANxFfuzcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDc0akRmaEFtdkV5TXZxdmdwQWZoQjhjZkJVNTl0SGE1cTU1Q29FamN4
bUsvMC9EQzMyRUUzMTUwQjI3QTJGMDg0MzU3NDBDRjJCODAzNzExNUZCQjM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDMzJFRTMxNTBCMjdBMkYw
ODQzNTc0MENGMkI4MDM3MTE1RkJCMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDc0akRmaEFtdkV5TXZxdmdwQWZoQjhjZkJVNTl0SGE1cTU1Q29FamN4bUsvMC9E
QzMyRUUzMTUwQjI3QTJGMDg0MzU3NDBDRjJCODAzNzExNUZCQjM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvnTSX6exCPkRZQypsNQfXzwI/H/4f2h1qVCdskop9oebAP/bAKL9bEns7HYz
izKcYu9odnC4/zwwkTnfy/kOxtt0jY6WShL/hmAjbs0O0NKCBaVIDnSfXM8waS6u
SG8v15cs0PZOsflV4tXkzmScvvQsKlFK9hbfL2rEOZkqDIegn3LIuiPgVcbm1uNu
god9b6UKAubR1lySKl/qeX+P17sqj6efIRKphhBaF5OBLSWA8tRMDO4jpt/7iZBF
9J+iNstOr7doO9sTZz69FXfLYxbKa/mOOH2qOHAdHtA74pu9xP1X8bW9068RgLHd
Y8yMoh3LokKbbT1TJZYl/ggEeg==
-----END CERTIFICATE-----