Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841.mft
File:                     6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841.mft (raw, json)
Hash identifier:          4TyAR8fyCjphQEyRZxABt+SOy7XKR/ioArngAlmG0Nc=
Subject key identifier:   D5:30:F5:59:28:49:3D:AF:3B:46:A1:34:79:BB:8F:32:67:72:4B:31
Authority key identifier: 60:54:BF:93:F9:A2:B2:73:BF:6F:DE:C3:AD:9E:C6:61:1A:B5:48:41
Certificate issuer:       /CN=6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841
Certificate serial:       4A98690E76199B355E41EA3228B38CEB7820107E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841.mft
Manifest number:          B4
Signing time:             Mon 18 Sep 2023 16:14:38 +0000
Manifest this update:     Mon 18 Sep 2023 16:09:38 +0000
Manifest next update:     Tue 19 Sep 2023 18:00:38 +0000
Files and hashes:         1: 3138362e3235302e33322e302f32322d3332203d3e20323730383633.roa (hash: T0YzDUf105lUDs8B+wDi0m+spD8gBwhy0zVFxHcWTVw=)
                          2: 6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841.crl (hash: dBIz6Q1R0u8lOYCYtwHO1lkr/5iaDD58F3LiKYSdcyU=)
                          3: 323830343a373239383a3a2f33322d313238203d3e20323730383633.roa (hash: wtd6tzAbs/FzQ1SvEMUFPDAFMMilYCOWMhY0ABnngwc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:98:69:0e:76:19:9b:35:5e:41:ea:32:28:b3:8c:eb:78:20:10:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841
        Validity
            Not Before: Sep 18 16:09:38 2023 GMT
            Not After : Sep 19 18:00:38 2023 GMT
        Subject: CN=D530F55928493DAF3B46A13479BB8F3267724B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:e3:86:4a:e7:0a:40:be:97:6e:b7:a1:ac:
                    c3:16:5b:38:05:48:73:05:5c:dd:ee:57:f4:13:e0:
                    5a:f6:a9:0d:a9:74:df:b0:d2:f3:40:79:d4:7e:56:
                    97:94:97:44:a5:b7:fb:29:1f:69:c8:0d:ec:4b:24:
                    84:2f:a7:bf:ec:6d:fe:d6:c1:f5:01:52:21:3d:1d:
                    a6:84:b7:c1:78:77:ef:12:27:bc:23:de:11:e8:1b:
                    51:a5:0d:83:94:38:58:51:e4:68:77:09:15:b9:8f:
                    b4:b9:38:14:9b:8a:c3:5f:80:15:ab:5f:1d:cc:e2:
                    3b:83:1d:04:e9:6e:9f:34:e8:1a:17:00:6b:ef:5d:
                    28:79:2d:5b:75:93:e1:b0:b2:b6:6d:5e:92:19:ca:
                    9d:65:f0:1f:fa:40:f2:e9:03:c9:f0:70:6d:c0:bb:
                    6c:96:6a:55:c4:48:03:d3:8f:74:22:74:ed:c0:bf:
                    84:2a:8b:07:4d:fb:fd:91:b2:a3:3d:11:81:82:1a:
                    f5:47:3c:37:d5:55:1d:91:a8:64:de:62:d5:4d:63:
                    5f:82:00:a9:f0:a5:02:d5:4a:21:61:36:e4:c1:17:
                    62:a3:d2:d5:b4:6e:2d:bc:9e:20:52:34:35:31:49:
                    b9:95:0d:db:26:8a:08:62:41:83:14:d9:e5:6c:16:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:30:F5:59:28:49:3D:AF:3B:46:A1:34:79:BB:8F:32:67:72:4B:31
            X509v3 Authority Key Identifier:
                keyid:60:54:BF:93:F9:A2:B2:73:BF:6F:DE:C3:AD:9E:C6:61:1A:B5:48:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/6054BF93F9A2B273BF6FDEC3AD9EC6611AB54841.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:36:f0:06:6e:41:ae:74:9d:98:80:eb:e6:cf:e6:1a:ae:
         b8:2c:a4:92:25:3a:d1:5c:f9:f8:ab:a2:55:db:a2:3f:de:24:
         2e:83:e8:31:4f:fd:99:20:a1:a2:b9:cc:69:bb:c7:e2:90:f1:
         b0:02:ba:ed:67:44:fb:b2:28:b8:ac:4d:65:18:fb:63:08:cf:
         c8:6f:be:d9:e0:53:5e:98:71:8f:54:52:a5:29:0e:51:46:8c:
         e8:81:2d:e1:73:ab:26:26:b2:8d:8a:54:09:24:cc:bb:25:3b:
         97:95:16:f3:7a:a7:8f:3b:69:51:5d:1b:1d:7d:73:21:b7:a2:
         48:74:88:8e:12:12:6a:d3:8c:a9:db:62:78:85:29:41:dc:db:
         2d:07:c2:53:45:ef:5c:01:61:cb:fd:21:e5:3e:ef:e2:9b:65:
         73:26:ae:b5:ba:c6:e8:22:a1:45:40:fe:60:9e:78:4e:77:53:
         d3:61:67:f6:91:6e:23:e5:fb:ff:1a:00:b1:43:d9:87:b9:71:
         83:ef:89:ab:67:c4:5e:f6:05:bb:e6:6c:08:a1:c5:d1:40:3d:
         65:ed:38:42:e7:87:56:75:71:47:93:6e:52:0a:96:14:41:5b:
         67:53:e6:4f:a4:3a:d1:52:98:94:e5:a6:51:e4:e1:61:d1:ad:
         95:7a:6c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----