Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/54B288A3567A81712D7F46EFFC038D40DFCD025F.mft
File:                     54B288A3567A81712D7F46EFFC038D40DFCD025F.mft (raw, json)
Hash identifier:          fvYBtKRlttwhf7QoMOvbkwQvgWYP8iAhQvpEALQoL1Y=
Subject key identifier:   35:19:01:B0:22:DB:B4:B5:3B:1C:BA:C8:EC:D1:DC:A7:F6:11:66:1F
Authority key identifier: 54:B2:88:A3:56:7A:81:71:2D:7F:46:EF:FC:03:8D:40:DF:CD:02:5F
Certificate issuer:       /CN=54B288A3567A81712D7F46EFFC038D40DFCD025F
Certificate serial:       2CAC882ED15AA90A7D5147FB64142E3CB8C39A56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54B288A3567A81712D7F46EFFC038D40DFCD025F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/54B288A3567A81712D7F46EFFC038D40DFCD025F.mft
Manifest number:          02A4
Signing time:             Sat 17 Feb 2024 01:02:06 +0000
Manifest this update:     Sat 17 Feb 2024 00:57:06 +0000
Manifest next update:     Sun 18 Feb 2024 05:00:06 +0000
Files and hashes:         1: 323830343a323264633a3a2f33322d3438203d3e20323634313237.roa (hash: pwfHISCEsPSuYaEr8kgyyURBpfrKFXJAxekAEf0bpiI=)
                          2: 54B288A3567A81712D7F46EFFC038D40DFCD025F.crl (hash: oF42wBnx8n54fnfex098craT0BKE8RegLeI4iG/G9Qs=)
                          3: 3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa (hash: 74pgoWmclcguFIEcLc0fwn9imm0KLyFPG43KNfLb0XY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ac:88:2e:d1:5a:a9:0a:7d:51:47:fb:64:14:2e:3c:b8:c3:9a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B288A3567A81712D7F46EFFC038D40DFCD025F
        Validity
            Not Before: Feb 17 00:57:06 2024 GMT
            Not After : Feb 18 05:00:06 2024 GMT
        Subject: CN=351901B022DBB4B53B1CBAC8ECD1DCA7F611661F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:f0:83:f1:6e:84:8d:ec:f0:e0:6c:32:c5:
                    ca:55:59:58:cc:21:c9:d6:86:86:c7:74:ba:c1:af:
                    fd:47:6b:9d:24:e7:c0:2f:13:c4:e2:fa:95:18:b9:
                    c8:c9:12:3b:64:3e:18:a4:70:96:3b:ef:a9:ee:16:
                    d9:4d:48:27:37:fc:94:b2:4c:11:01:e5:3a:6c:79:
                    4a:82:af:68:c4:23:f3:1e:51:2c:ce:57:5b:8f:1f:
                    72:0b:27:a7:2d:04:86:f4:0c:4c:cb:2e:3d:96:ad:
                    3f:c7:2c:e8:ae:17:37:a1:a2:e8:5e:05:52:24:be:
                    c0:96:ce:33:8a:09:30:20:40:c2:ee:e4:9d:69:de:
                    28:c3:2e:3b:2f:00:1f:23:6a:e1:62:d6:f6:e8:d1:
                    56:71:f2:95:74:e9:4b:60:e1:98:bd:ac:52:73:88:
                    00:06:9a:08:ee:66:4b:9a:21:f9:81:84:32:de:95:
                    3f:b7:a3:52:96:a2:66:ef:fe:74:a2:df:a7:e1:25:
                    62:c8:d9:68:78:01:db:8d:46:4e:e7:d0:d1:72:e1:
                    32:b3:30:bd:99:70:2b:d3:66:f0:58:d9:f0:6a:53:
                    d2:d8:4f:6d:55:18:95:14:46:79:70:e8:81:8e:09:
                    a7:52:74:9b:e8:f9:b4:5b:b5:11:7e:55:79:ec:65:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:01:B0:22:DB:B4:B5:3B:1C:BA:C8:EC:D1:DC:A7:F6:11:66:1F
            X509v3 Authority Key Identifier:
                keyid:54:B2:88:A3:56:7A:81:71:2D:7F:46:EF:FC:03:8D:40:DF:CD:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/54B288A3567A81712D7F46EFFC038D40DFCD025F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54B288A3567A81712D7F46EFFC038D40DFCD025F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/54B288A3567A81712D7F46EFFC038D40DFCD025F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:76:3a:ca:c2:de:e9:fb:9a:20:c3:08:d1:01:e9:da:c9:3b:
         c7:fc:96:24:6d:be:83:2a:70:a9:91:09:3e:10:cb:0e:dd:01:
         28:d0:3c:5f:4b:2a:7b:3e:20:47:ef:10:c1:b8:e4:f1:2d:77:
         12:5b:b0:53:f6:3f:16:7f:65:41:3c:92:d8:75:65:62:53:37:
         bc:82:b1:b2:fa:ad:32:f2:45:36:e4:b4:16:38:45:11:e1:4a:
         cc:b5:6b:5e:29:37:99:9b:18:80:0b:2d:a1:2c:91:0d:37:58:
         98:98:f7:50:d6:42:39:be:7d:58:44:4a:7d:2e:9b:3b:5a:eb:
         cc:c8:15:fb:f6:73:48:e5:e2:6c:6d:97:76:a3:25:87:c0:ea:
         6b:9b:d7:79:3c:ba:92:e3:a5:52:5f:59:df:a4:6e:b1:2f:89:
         a6:88:46:79:c5:fc:6c:45:36:ea:0e:0d:0f:0a:49:82:d9:1f:
         03:d2:71:94:cc:49:11:0c:a2:de:08:d1:f3:ba:48:1d:d1:46:
         8a:48:4a:dc:2d:e3:3c:0d:ed:90:1c:e9:e7:33:d5:34:aa:b7:
         11:f0:3c:3e:9b:00:0a:0e:71:8f:c5:98:43:35:4f:a5:23:66:
         de:ce:ed:07:77:7e:9d:a8:79:8e:b7:41:a5:72:57:25:fa:eb:
         fb:4a:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----