Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/54D7204FD91ECE7C2602426B24DF0B354DC87328.mft
File:                     54D7204FD91ECE7C2602426B24DF0B354DC87328.mft (raw, json)
Hash identifier:          tGPE4KQtwozdSe3pwA7H1wX0SuGeh4xR+TDlXyMPK8U=
Subject key identifier:   64:FE:AC:BF:00:54:37:4B:F0:4C:99:0E:A1:EB:B6:26:84:7C:A6:1F
Authority key identifier: 54:D7:20:4F:D9:1E:CE:7C:26:02:42:6B:24:DF:0B:35:4D:C8:73:28
Certificate issuer:       /CN=54D7204FD91ECE7C2602426B24DF0B354DC87328
Certificate serial:       7CF15B2CAA3B45CF7DD498EB3669EE861F8AA894
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54D7204FD91ECE7C2602426B24DF0B354DC87328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/54D7204FD91ECE7C2602426B24DF0B354DC87328.mft
Manifest number:          01C4
Signing time:             Mon 14 Aug 2023 10:51:14 +0000
Manifest this update:     Mon 14 Aug 2023 10:46:14 +0000
Manifest next update:     Tue 15 Aug 2023 12:25:14 +0000
Files and hashes:         1: 323830343a363230633a3a2f33322d3334203d3e203238323235.roa (hash: tHYRi1ecpLRWwK36f7vuz4MzYKknRG3kzyng+qKTRwk=)
                          2: 54D7204FD91ECE7C2602426B24DF0B354DC87328.crl (hash: dLIM2KpD7c03aXX6J2VoSHXJHgFq1bG4rZ3OZ3KUUx8=)
                          3: 3138392e3132362e36342e302f32302d3234203d3e203238323235.roa (hash: DlHznqmDmHIVc89+mNvTbByHxtVZxggL+kxa1b6yS3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f1:5b:2c:aa:3b:45:cf:7d:d4:98:eb:36:69:ee:86:1f:8a:a8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54D7204FD91ECE7C2602426B24DF0B354DC87328
        Validity
            Not Before: Aug 14 10:46:14 2023 GMT
            Not After : Aug 15 12:25:14 2023 GMT
        Subject: CN=64FEACBF0054374BF04C990EA1EBB626847CA61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:e5:78:6c:90:81:78:a9:3c:5d:8a:86:89:
                    dc:c7:a8:6c:e8:7a:69:32:e8:e7:fd:fc:cf:87:bb:
                    cc:9f:13:d4:da:ed:52:2f:27:f5:93:7c:2b:59:a9:
                    e9:39:88:09:5b:bd:cd:29:7d:6b:aa:e5:8f:5a:59:
                    39:24:2e:32:b9:76:0a:01:36:ac:a0:0e:43:e9:33:
                    32:ac:43:c9:38:7e:8a:90:14:58:47:92:e0:b1:02:
                    59:5e:69:21:e6:12:ec:7b:6e:38:5a:ba:75:2d:fc:
                    19:65:a6:90:be:c5:e1:f7:d0:07:0d:89:79:d2:62:
                    8e:c2:ba:be:75:a1:c7:db:1a:a2:c1:d2:f1:8a:1f:
                    09:dc:44:c3:fe:fb:b8:da:f3:5e:24:42:92:a1:00:
                    02:df:78:36:5c:6e:71:d6:61:e6:8b:eb:76:6e:bb:
                    a1:bc:4c:74:c7:5d:f6:35:5f:a5:4c:49:2e:ea:ab:
                    07:99:bd:f8:bf:c8:16:f1:71:18:f3:57:28:fb:f1:
                    69:91:bd:71:7f:4e:b7:fb:e1:6c:17:06:29:bb:47:
                    e4:1e:50:9d:9b:18:1d:68:41:c8:dc:c4:75:a5:d0:
                    35:a0:21:a5:fd:9b:f1:83:b4:0a:d8:3a:7c:69:39:
                    08:ca:bf:0c:b0:36:ac:a0:48:88:b7:cf:af:42:73:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FE:AC:BF:00:54:37:4B:F0:4C:99:0E:A1:EB:B6:26:84:7C:A6:1F
            X509v3 Authority Key Identifier:
                keyid:54:D7:20:4F:D9:1E:CE:7C:26:02:42:6B:24:DF:0B:35:4D:C8:73:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/54D7204FD91ECE7C2602426B24DF0B354DC87328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54D7204FD91ECE7C2602426B24DF0B354DC87328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/54D7204FD91ECE7C2602426B24DF0B354DC87328.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:f5:50:0c:5c:e1:9c:ec:5e:bd:6f:bf:b6:5c:cf:b2:3d:
         88:d1:81:06:25:06:c3:46:56:14:64:dc:50:14:7f:88:52:4a:
         2a:9d:16:41:73:15:c0:1e:1d:b3:c1:b5:79:1a:62:cf:5e:04:
         68:73:fd:fb:07:60:ce:a3:85:16:63:6b:bf:a6:d9:94:f0:a1:
         8a:d0:7b:eb:3b:d0:91:8f:f4:09:f3:a3:c6:7f:a2:fe:9f:00:
         db:7b:96:cb:f8:a8:e3:e0:7b:cf:fb:ef:0d:5a:f3:53:86:ec:
         ea:b8:b9:66:33:65:06:bf:43:85:9c:1a:d1:b0:55:87:5b:98:
         1a:5d:26:b1:7b:7e:78:b7:a5:0f:8d:97:5a:e4:8f:d3:f3:fa:
         09:95:66:42:24:8e:ff:c4:70:89:79:f3:c4:3e:ff:80:b1:23:
         d6:e8:81:c0:a1:e9:37:2a:85:25:65:81:97:b4:a2:53:fd:cf:
         e4:f8:e4:83:7f:a8:1d:13:65:2e:76:1b:da:8c:87:f0:6c:e9:
         c6:b3:74:cd:bc:d7:ab:77:85:75:3d:df:44:ad:bc:da:de:5e:
         3d:bc:ea:f3:d5:54:b2:6d:14:a2:9d:f0:b0:51:25:11:f0:2d:
         4e:e2:80:c9:e3:f2:b9:e1:c4:e7:0e:28:db:6a:05:a7:c9:f3:
         f8:4a:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----