Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/0/32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.mft
File:                     32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.mft (raw, json)
Hash identifier:          KB32rFLs6Qm68IfvikUTP5A0t11PX8nIEq2xSw8gLjM=
Subject key identifier:   33:10:75:B3:C4:5D:5A:F0:EC:93:E4:72:AC:6D:E4:D6:16:54:60:68
Authority key identifier: 32:E9:E1:0E:22:7A:54:5A:9E:90:5D:79:01:D9:BA:92:A9:F7:C7:E0
Certificate issuer:       /CN=32E9E10E227A545A9E905D7901D9BA92A9F7C7E0
Certificate serial:       4A78E661CD104F003BCEFC3915F9798921251266
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/0/32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.mft
Manifest number:          1F
Signing time:             Wed 22 Nov 2023 14:10:13 +0000
Manifest this update:     Wed 22 Nov 2023 14:05:13 +0000
Manifest next update:     Thu 23 Nov 2023 17:55:13 +0000
Files and hashes:         1: 323830343a383961303a3a2f33322d3332203d3e20323733363136.roa (hash: 1nVcOFsXToelQA+ZZVsEfzC4coCY0dhWvxCAd/7RoPk=)
                          2: 32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.crl (hash: RqFSRYpTnBpx57C15yK9n6H4mljuKGBiQx58XSMiKCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:78:e6:61:cd:10:4f:00:3b:ce:fc:39:15:f9:79:89:21:25:12:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32E9E10E227A545A9E905D7901D9BA92A9F7C7E0
        Validity
            Not Before: Nov 22 14:05:13 2023 GMT
            Not After : Nov 23 17:55:13 2023 GMT
        Subject: CN=331075B3C45D5AF0EC93E472AC6DE4D616546068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:62:91:16:bd:a5:04:bb:00:54:9a:9a:8e:
                    52:67:93:de:d3:b8:d7:e7:90:73:06:a9:29:58:c1:
                    80:7a:52:72:45:a9:d9:ad:9b:9b:be:5b:e6:97:93:
                    1c:f1:90:45:ca:ce:98:6a:c1:58:e4:ff:9b:46:31:
                    0b:a7:21:15:b3:1e:84:35:0f:8a:88:dd:a2:18:38:
                    53:7a:a8:47:e6:31:c7:d7:95:42:1c:14:33:23:7e:
                    f0:99:c5:a4:6f:62:a8:d1:af:fe:eb:33:fc:34:5a:
                    78:86:3d:c9:c1:69:30:39:9c:6f:af:b7:18:8d:f3:
                    d5:25:d1:4f:c6:d9:ad:15:25:06:a4:de:db:48:0a:
                    33:98:ea:cf:b3:46:b5:07:9b:df:68:f0:5c:ba:a2:
                    d5:fa:c0:c2:d3:c1:e8:98:ca:02:d7:be:f6:1a:a9:
                    71:9c:5b:de:d6:35:dd:8d:bf:f1:38:a6:7a:a2:1b:
                    c5:a5:5c:38:33:9a:bb:db:cf:89:c4:53:17:4f:40:
                    08:26:ff:bc:7e:5b:a9:39:15:cc:44:84:3b:70:62:
                    3e:08:14:7b:a7:34:30:8f:bf:fe:15:30:8e:3b:3d:
                    de:66:17:87:26:25:04:96:9c:e9:db:50:d5:d9:50:
                    d5:c1:91:0e:ed:33:3b:34:65:4c:97:ad:cf:c4:71:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:10:75:B3:C4:5D:5A:F0:EC:93:E4:72:AC:6D:E4:D6:16:54:60:68
            X509v3 Authority Key Identifier:
                keyid:32:E9:E1:0E:22:7A:54:5A:9E:90:5D:79:01:D9:BA:92:A9:F7:C7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/0/32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/0/32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d9:a8:b0:73:be:85:52:02:77:3b:7d:36:08:d5:83:85:70:
         a5:ba:53:8e:4d:74:04:a0:6e:c6:b2:52:4a:41:5f:6d:2a:02:
         eb:66:4e:b4:56:b0:15:89:30:6d:d6:46:f8:46:8e:a8:f6:16:
         cb:88:ba:22:2a:8b:7a:16:b9:6a:3c:3b:f8:42:65:3b:61:6a:
         14:44:1b:62:4d:35:7b:e3:83:3f:ec:57:99:6a:59:3b:a5:bb:
         fe:e3:aa:18:6b:f8:87:54:9a:9f:ef:ed:5f:35:5e:43:a8:ab:
         7a:45:d9:f8:a7:57:28:94:17:f8:9a:34:c5:0d:35:aa:0c:66:
         34:d2:e1:2e:26:65:db:2f:1a:e7:7d:4c:86:f2:c6:cc:0f:7f:
         c4:8b:20:c4:68:df:69:d5:0d:a2:88:a9:ba:ec:e5:0c:e2:e9:
         ae:b0:9e:01:db:96:32:47:f6:c2:0e:2e:e2:50:00:ea:f5:a3:
         5e:c5:7e:ff:44:e6:f7:65:d5:76:8f:3a:71:89:32:a7:e7:3b:
         f0:c7:66:65:42:a9:9e:66:98:ae:ce:a2:83:70:15:51:5d:47:
         47:a8:d2:37:1f:30:8a:0c:95:8a:34:ab:06:05:a0:45:0e:7c:
         ef:c9:1d:8f:c5:98:09:d4:2b:65:a7:3c:2f:8e:99:00:e1:dc:
         ac:b2:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org