Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/0C54FF8CCF705A631ED318DF5A472490B2D79BB8.mft
File:                     0C54FF8CCF705A631ED318DF5A472490B2D79BB8.mft (raw, json)
Hash identifier:          O3JKJr5c7m5lFFr9V1VipR/CP3GcZ6g27fyG4WsmGoY=
Subject key identifier:   A5:53:81:3E:41:50:B8:6A:44:57:B2:02:45:A0:1A:85:F9:BE:A6:AE
Authority key identifier: 0C:54:FF:8C:CF:70:5A:63:1E:D3:18:DF:5A:47:24:90:B2:D7:9B:B8
Certificate issuer:       /CN=0C54FF8CCF705A631ED318DF5A472490B2D79BB8
Certificate serial:       73C880A2FD936420CE8A6C02454C92487D6E361D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C54FF8CCF705A631ED318DF5A472490B2D79BB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/0C54FF8CCF705A631ED318DF5A472490B2D79BB8.mft
Manifest number:          5E
Signing time:             Mon 15 Jan 2024 22:11:00 +0000
Manifest this update:     Mon 15 Jan 2024 22:06:00 +0000
Manifest next update:     Tue 16 Jan 2024 22:46:00 +0000
Files and hashes:         1: 323830343a366533303a3a2f33322d313238203d3e20323730353831.roa (hash: GyYoC0pCI5kRyfCQxMpVZ/xolXhXOH2CEaxkRimtTDA=)
                          2: 3137372e382e3133322e302f32322d3332203d3e20323730353831.roa (hash: +6BEg9Yk30OGN6PS9gH1qSUjx0kVlUFSfALXfN0PHiA=)
                          3: 0C54FF8CCF705A631ED318DF5A472490B2D79BB8.crl (hash: DJ6FJcHOzAaswYknRPQFl6bhD/gD7p7j2R39dxvaxUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c8:80:a2:fd:93:64:20:ce:8a:6c:02:45:4c:92:48:7d:6e:36:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C54FF8CCF705A631ED318DF5A472490B2D79BB8
        Validity
            Not Before: Jan 15 22:06:00 2024 GMT
            Not After : Jan 16 22:46:00 2024 GMT
        Subject: CN=A553813E4150B86A4457B20245A01A85F9BEA6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:14:2e:21:85:6e:4c:a9:6d:fe:af:c6:8f:
                    c4:4b:ee:48:b7:a3:f3:2a:4e:f9:35:3f:58:78:ed:
                    ce:67:8f:eb:67:81:f0:37:dd:15:06:21:3e:56:a4:
                    af:ce:7c:48:66:73:66:f0:18:7e:19:3a:53:d4:d2:
                    04:9d:bd:d1:58:ce:e3:45:ec:42:d4:07:37:34:98:
                    88:bf:d2:b1:da:0c:21:5c:33:c0:ac:f3:64:65:13:
                    2f:63:f7:4c:e3:85:bc:7f:72:a4:7c:c3:3d:da:0d:
                    0b:29:8e:aa:bf:a6:b6:8c:b2:c2:8a:41:ee:8d:d9:
                    b8:50:22:45:d0:02:81:00:91:e8:db:db:9c:19:10:
                    7d:3e:7e:a3:aa:c4:70:93:b2:99:6e:2b:12:c6:a5:
                    b5:98:f5:04:dc:70:37:0b:dd:53:dc:62:61:95:50:
                    45:1b:60:bc:e8:61:65:3d:4c:d3:f0:37:bc:c6:28:
                    ed:a8:15:7e:db:4f:dd:77:df:05:d0:61:79:f0:a2:
                    6b:e5:4c:28:eb:9e:c8:33:34:e0:92:b3:81:58:90:
                    32:b5:9e:92:3a:6c:04:7d:f0:23:42:a6:f7:b2:68:
                    3d:25:ce:a0:22:d0:f5:d1:7c:74:55:1b:60:16:e2:
                    99:44:06:8c:5c:da:67:f4:20:29:81:fa:1c:ad:3e:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:53:81:3E:41:50:B8:6A:44:57:B2:02:45:A0:1A:85:F9:BE:A6:AE
            X509v3 Authority Key Identifier:
                keyid:0C:54:FF:8C:CF:70:5A:63:1E:D3:18:DF:5A:47:24:90:B2:D7:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/0C54FF8CCF705A631ED318DF5A472490B2D79BB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C54FF8CCF705A631ED318DF5A472490B2D79BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/0C54FF8CCF705A631ED318DF5A472490B2D79BB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:81:51:18:1b:03:aa:51:94:b1:83:c5:c9:4f:67:c8:34:53:
         be:b2:f0:2d:03:89:fe:30:ff:a1:31:b2:d0:5c:aa:b9:30:4c:
         c3:67:b0:0c:79:c3:47:2f:0c:8f:57:f9:ba:7f:c3:21:7d:1c:
         7f:af:15:97:fa:d5:d3:32:95:3e:61:9e:08:0c:4c:19:ac:0e:
         3f:dc:a5:41:db:1d:63:d2:3d:ed:aa:e8:a1:73:94:84:52:70:
         90:ea:48:a9:d3:e3:37:39:2b:82:4d:b4:52:67:10:93:70:0a:
         31:b8:c6:d9:15:a7:a2:f2:8f:6b:c9:24:7f:d4:54:00:74:53:
         2e:c7:8e:6d:23:93:9f:4d:de:27:28:d6:52:ac:eb:06:a5:26:
         56:20:c8:68:b6:c7:d7:70:3a:37:57:96:a5:7c:67:f6:f0:e7:
         a7:23:2b:3b:ea:66:35:bc:06:9b:10:2e:5e:f4:db:92:60:61:
         37:92:44:c9:2f:2b:8e:d7:11:73:dc:29:ed:bb:3f:d7:96:6e:
         5a:7d:86:d5:bb:cc:d7:8f:98:8c:b1:01:9d:b3:d2:0d:8d:38:
         14:d4:35:22:23:2f:3d:1c:18:ef:18:de:3a:32:c4:d0:71:6e:
         3e:8b:e6:42:df:df:d0:6b:e8:55:34:4b:ca:07:38:36:8d:4f:
         83:1b:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----