Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/3832929AE6AF0F77BC724C2E06806883AB2AC9A0.mft
File:                     3832929AE6AF0F77BC724C2E06806883AB2AC9A0.mft (raw, json)
Hash identifier:          I1y0l3Kdxc447SllGIO2niJu6hkZ+PYGsGkvMH106AQ=
Subject key identifier:   2A:F3:44:99:A0:35:54:14:6A:F0:E7:09:86:E5:7B:DC:46:9F:14:57
Authority key identifier: 38:32:92:9A:E6:AF:0F:77:BC:72:4C:2E:06:80:68:83:AB:2A:C9:A0
Certificate issuer:       /CN=3832929AE6AF0F77BC724C2E06806883AB2AC9A0
Certificate serial:       45326B02B1306DA74764EA3D0EA42A2D00EAFFBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3832929AE6AF0F77BC724C2E06806883AB2AC9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/3832929AE6AF0F77BC724C2E06806883AB2AC9A0.mft
Manifest number:          26
Signing time:             Sun 14 Apr 2024 20:01:45 +0000
Manifest this update:     Sun 14 Apr 2024 19:56:45 +0000
Manifest next update:     Mon 15 Apr 2024 22:13:45 +0000
Files and hashes:         1: 34352e3233372e3135362e302f32322d3234203d3e20323638323836.roa (hash: 1V3A/k3vMaiCHcAXhOV/CDxn5UgF7j5hJSkUoLcN+jA=)
                          2: 323830343a346564383a3a2f33322d3438203d3e20323638323836.roa (hash: xQXdq0/E6gl/Wcr8n012A6VT+LYYdO7JTuneGbFkKH8=)
                          3: 3832929AE6AF0F77BC724C2E06806883AB2AC9A0.crl (hash: FaIpWA9lPg/x0SSTGOEcproqfcl+Zx/4gNIGFqPQ2zI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:32:6b:02:b1:30:6d:a7:47:64:ea:3d:0e:a4:2a:2d:00:ea:ff:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3832929AE6AF0F77BC724C2E06806883AB2AC9A0
        Validity
            Not Before: Apr 14 19:56:45 2024 GMT
            Not After : Apr 15 22:13:45 2024 GMT
        Subject: CN=2AF34499A03554146AF0E70986E57BDC469F1457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:ac:fc:0b:d4:5a:e7:98:10:75:70:bd:5c:
                    21:c8:dd:52:e1:1d:6d:36:97:fe:12:8b:ef:4b:45:
                    80:ea:db:1b:df:e5:5d:87:dd:30:85:0a:d9:3b:4b:
                    72:8b:f0:ab:ab:ef:ad:6d:67:8d:3c:60:b4:76:b5:
                    a5:ba:f3:b4:cc:83:94:75:59:81:bc:a8:c2:dd:7f:
                    fc:54:3f:01:ee:77:7c:5b:11:90:2e:1d:76:20:8f:
                    77:82:81:e6:cf:12:89:2c:d7:60:ba:1c:05:06:94:
                    8e:5a:8c:fc:68:3c:03:c2:c3:f4:5d:8d:0f:67:0a:
                    3e:0e:77:92:4d:fe:a0:13:0c:27:1c:b7:e8:47:73:
                    c8:72:69:7e:f7:fe:26:13:86:e6:23:17:56:f5:3e:
                    bc:a3:2b:ac:30:26:ae:b8:c0:75:e3:ec:04:80:b0:
                    77:c6:35:53:1e:62:df:a5:1d:63:15:00:73:cf:1b:
                    54:a5:65:0b:ef:e4:5d:32:98:a2:25:87:a8:ec:60:
                    c1:fc:4f:d6:7b:ab:d3:03:31:4b:36:29:9b:2f:1c:
                    62:8e:22:65:91:4c:93:af:bc:fe:b1:84:10:88:1a:
                    78:d0:60:10:75:70:8c:b7:9b:b1:6b:d7:47:de:ad:
                    7d:ac:37:56:94:a4:45:75:a9:70:36:fd:23:63:24:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F3:44:99:A0:35:54:14:6A:F0:E7:09:86:E5:7B:DC:46:9F:14:57
            X509v3 Authority Key Identifier:
                keyid:38:32:92:9A:E6:AF:0F:77:BC:72:4C:2E:06:80:68:83:AB:2A:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/3832929AE6AF0F77BC724C2E06806883AB2AC9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3832929AE6AF0F77BC724C2E06806883AB2AC9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/3832929AE6AF0F77BC724C2E06806883AB2AC9A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d4:7a:98:18:7c:6a:9b:4b:bb:4e:7e:cd:4d:87:5d:3f:4b:
         ba:e7:24:80:f9:fa:65:32:f7:09:c0:44:1c:24:4a:d6:15:c1:
         4e:32:0e:01:3d:86:02:1b:ce:21:0e:b1:cf:cd:c0:e5:53:a2:
         5c:51:48:b0:5e:40:04:5e:6a:99:3e:bc:d5:1c:a5:b8:e6:81:
         7b:1d:67:ad:80:fe:90:7b:77:58:7d:45:c1:48:89:56:80:c4:
         7e:f3:18:a0:1a:33:da:40:4b:aa:2a:a9:34:fa:56:ef:41:3d:
         ed:52:39:79:c3:ab:30:99:7e:0a:c4:e6:5c:99:30:7a:30:80:
         d5:c9:1f:1c:dd:1e:28:6b:33:e7:3d:3f:bb:92:7a:37:0f:04:
         f9:1d:35:03:5e:52:06:d6:88:e6:1e:e5:81:2f:e9:49:53:8f:
         1f:69:1d:8a:93:21:e6:4d:8a:27:11:71:d3:65:b0:14:f7:c7:
         ca:1f:96:00:ad:dd:30:60:61:0d:f1:22:1e:6e:92:7f:13:29:
         09:bd:b3:a8:cf:e3:10:6b:52:0d:fb:a7:f1:bf:e8:d4:92:e4:
         61:b4:f1:01:ad:d1:17:45:9c:ae:74:1e:da:b2:2f:b2:85:64:
         f3:87:f6:a0:b0:24:04:06:19:b3:54:0f:57:a4:42:41:7b:de:
         36:cd:97:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----