Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.mft
File:                     54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.mft (raw, json)
Hash identifier:          tWzAuIotD55C3wULQq6ob/1tzwtsiA3h916PPTKs/Cs=
Subject key identifier:   F4:06:D0:49:BD:E0:F1:F2:E7:CF:81:BC:28:64:53:AD:D2:5E:A3:18
Authority key identifier: 54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D
Certificate issuer:       /CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
Certificate serial:       671E9E827093C279A1A86D6E1B557DF04F35CEBB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.mft
Manifest number:          20
Signing time:             Wed 11 Sep 2024 01:16:29 +0000
Manifest this update:     Wed 11 Sep 2024 01:11:29 +0000
Manifest next update:     Thu 12 Sep 2024 04:24:29 +0000
Files and hashes:         1: 3133382e33362e3139342e302f32332d3233203d3e20323634353835.roa (hash: 8Cazd+p4HyyvXcDPhJ002CTfhEEyzv7nGUCnx+DDfMw=)
                          2: 323830343a323230303a3a2f33322d3332203d3e20323634353835.roa (hash: V6b/slgAbNMpLaKIGcslwdj7RpN9MQGMnLelZpuuFY0=)
                          3: 3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa (hash: Z3WhyV1RFEfZb0hXuDaKZDk9DgPy0edZ8/KZ90rGwdg=)
                          4: 3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa (hash: cW/SFp2c2GNvzAVV/Y99hCWaJO1QzVAmW2ycjy3PVpw=)
                          5: 3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa (hash: yyJRLLu8TIdtO5Gt2tDIKqQFW91hVnljcttBcKMOvGw=)
                          6: 3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa (hash: YqtiJYZGXlP6we9WPmIaend4AmFy1LgAKl6ezM62xlM=)
                          7: 3133382e33362e3139322e302f32342d3234203d3e20323634353835.roa (hash: aC4NKAlGxV8XQ+Mdt3ADci5oBfavJi1nlvNUvYEm0qo=)
                          8: 54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.crl (hash: uhQCyIZj642Y8xmBfNAtcZ/cnxGoDIoA+8K4oAULNMs=)
                          9: 3133382e33362e3139322e302f32322d3232203d3e20323634353835.roa (hash: TB6BCR0PKcc7gxBU4RB2vrPtvCf37R1+GtDPr3Og5VA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1e:9e:82:70:93:c2:79:a1:a8:6d:6e:1b:55:7d:f0:4f:35:ce:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
        Validity
            Not Before: Sep 11 01:11:29 2024 GMT
            Not After : Sep 12 04:24:29 2024 GMT
        Subject: CN=F406D049BDE0F1F2E7CF81BC286453ADD25EA318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:10:39:9f:04:1b:d9:75:43:d1:7d:e6:de:
                    66:45:18:89:99:d1:ff:d6:c8:a8:23:85:81:39:b0:
                    6e:d4:42:d2:f6:44:bf:2f:cf:95:0b:b8:9c:9d:7c:
                    7d:c9:48:80:b9:47:6f:f3:11:e6:01:0f:d4:81:c4:
                    cc:2a:4c:a9:57:69:db:76:ed:8c:44:04:da:bd:2c:
                    b4:fb:b9:75:10:99:d0:3f:95:85:85:a2:3a:83:07:
                    a4:62:a2:cd:d8:8a:e2:68:cd:8e:75:c2:e8:4b:e2:
                    7f:2b:6b:01:25:fb:c9:d8:13:9d:a0:70:3a:82:fe:
                    a7:7f:ee:5e:ae:ad:e7:a8:b8:13:4f:69:0b:f5:6d:
                    a1:c1:58:2f:be:9c:2d:a0:05:9d:0f:35:4d:14:5b:
                    53:d0:63:17:28:74:5f:d0:2c:fd:cf:39:08:39:2f:
                    c7:37:11:bf:ae:22:d8:52:f6:f4:60:47:87:cd:2f:
                    7a:85:ac:2c:12:9f:04:5c:b6:8d:19:92:60:b5:ee:
                    c1:19:1b:ef:d4:14:2a:de:f9:15:ea:82:d9:f5:b0:
                    77:c9:51:1e:03:85:14:98:43:e9:e5:61:68:3b:c2:
                    aa:5d:d5:ec:40:7e:4d:b1:f0:de:ce:78:5e:38:9d:
                    0a:30:b5:bc:65:7a:85:f3:1f:64:70:24:a5:61:d0:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:06:D0:49:BD:E0:F1:F2:E7:CF:81:BC:28:64:53:AD:D2:5E:A3:18
            X509v3 Authority Key Identifier:
                keyid:54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ee:30:cb:41:84:59:6f:3f:c5:ba:05:4a:73:db:e1:df:72:
         71:27:5a:d5:7c:e1:84:57:d7:17:26:61:2a:5c:b3:4f:9d:0b:
         29:2b:eb:4b:69:65:68:f2:79:4b:c8:3a:e5:d7:f4:79:2b:7b:
         c3:a2:0a:57:13:a5:44:19:c1:0c:a9:37:62:d0:2d:b9:a9:2b:
         10:87:09:b7:66:82:d3:7b:4b:9a:2f:cc:25:f1:92:b8:82:cc:
         31:f3:25:fb:fa:aa:b0:30:1a:b7:f6:11:18:6b:3c:7a:53:aa:
         ba:71:a8:67:fc:46:5b:bb:7c:95:25:fb:df:b3:29:a1:b7:81:
         c2:52:41:c8:d6:93:35:ec:c1:16:8d:a3:ac:49:8d:84:21:b4:
         44:ff:86:24:dc:a4:76:86:92:1e:f6:8f:31:0b:72:0f:37:8b:
         37:19:8e:ae:82:6d:89:59:8d:79:10:9a:80:65:18:96:2b:ef:
         ce:70:9e:db:39:a1:e1:a9:be:3b:d3:c4:54:d4:8a:a0:c6:d5:
         36:f5:cb:2a:6c:29:6d:d2:ba:9b:b8:ec:8c:9d:68:93:71:c7:
         96:2c:b3:f9:80:75:82:45:ce:6e:56:6b:dd:08:f8:d4:f7:42:
         82:75:3b:a3:09:63:a0:d5:18:0b:28:2d:eb:69:51:af:e4:17:
         69:56:0e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 16:18:55 2024 by rpki-client on console-ams.rpki-client.org