Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.mft
File:                     154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.mft (raw, json)
Hash identifier:          IGpnjygLvtB4fN/Ui3EBPo3wHGQex8cvwUUig/Ycg1w=
Subject key identifier:   30:8C:16:A6:A3:F6:DB:14:64:64:62:FA:73:6B:A6:F9:B9:F0:A0:78
Authority key identifier: 15:4C:1B:45:8D:0C:AC:7F:C3:D6:34:4F:92:C0:EB:41:CE:5B:25:32
Certificate issuer:       /CN=154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532
Certificate serial:       4215CA006090DAA3F894A5BF4838E8D46BD4B126
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.mft
Manifest number:          7F
Signing time:             Thu 11 May 2023 19:07:02 +0000
Manifest this update:     Thu 11 May 2023 19:02:02 +0000
Manifest next update:     Fri 12 May 2023 21:12:02 +0000
Files and hashes:         1: 154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.crl (hash: ZyCp1nClbScNv8X7PfHYk14TSB0iKv7d2B/oNg5Wzh4=)
                          2: 3133382e3231392e36342e302f32322d3232203d3e20323638323035.roa (hash: 3OKi0scnmSatGpn+G3fggi6u1hHIBi7Wh+/57ONcBXE=)
                          3: 3137372e37342e3137362e302f32322d3232203d3e20323638323035.roa (hash: il/CqpkFU27N230ePUcyOkGD7Kiik58Pwojy50TxO9g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:15:ca:00:60:90:da:a3:f8:94:a5:bf:48:38:e8:d4:6b:d4:b1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532
        Validity
            Not Before: May 11 19:02:02 2023 GMT
            Not After : May 12 21:12:02 2023 GMT
        Subject: CN=308C16A6A3F6DB14646462FA736BA6F9B9F0A078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:48:91:f0:66:14:f0:db:fa:82:5a:31:c8:29:
                    5f:d6:1d:e6:be:f4:1d:1f:13:61:ef:fe:9b:11:f5:
                    51:b6:2a:92:30:1d:25:f2:10:41:b1:cb:7b:ae:ef:
                    f9:bc:f3:44:6a:98:ae:49:23:79:2b:a4:0e:40:7c:
                    40:38:1a:82:98:9f:d8:aa:e4:95:cc:26:0d:20:47:
                    d4:a1:b1:7b:db:8d:99:1e:e1:8c:86:24:e7:ba:7c:
                    96:01:02:b2:bc:84:84:da:73:9b:9a:74:e3:59:84:
                    75:d7:40:5f:61:66:f7:71:30:0a:fd:df:73:17:f4:
                    6a:2a:c8:33:4a:65:26:a8:2b:32:f4:ba:e8:83:3e:
                    ef:0d:60:fd:c1:4b:6f:69:cf:46:d8:91:46:53:7a:
                    24:0a:13:af:52:22:05:f0:01:a9:3f:36:93:27:2f:
                    f8:e0:76:69:2b:44:1f:ac:38:de:50:ba:f7:23:b7:
                    67:14:45:16:d2:79:fb:0e:21:d2:78:f5:86:01:05:
                    97:3a:4f:1b:81:8f:16:9e:e8:48:39:9c:2b:b6:7d:
                    d2:6b:6d:b9:6f:ef:5e:0d:47:43:d2:d6:9b:33:c4:
                    05:8f:ee:95:55:b5:06:71:3a:ff:24:13:da:d2:0d:
                    56:f3:00:3d:63:c8:9b:b9:98:9d:80:8e:4d:ba:b8:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:16:A6:A3:F6:DB:14:64:64:62:FA:73:6B:A6:F9:B9:F0:A0:78
            X509v3 Authority Key Identifier:
                keyid:15:4C:1B:45:8D:0C:AC:7F:C3:D6:34:4F:92:C0:EB:41:CE:5B:25:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:98:ca:a9:1e:54:ce:02:4b:7f:3c:cf:09:73:ab:d2:89:ca:
         3c:5f:49:d5:c0:f9:6f:f7:6f:e2:83:23:d0:ac:4f:bf:6f:ec:
         a1:88:c4:6e:a1:7e:58:55:db:ed:fd:c2:05:f9:1b:a1:24:8e:
         f6:60:38:ef:2e:79:b6:9b:2a:24:56:92:3a:c0:64:82:b5:33:
         9f:ac:87:d7:27:41:83:f8:c4:5e:b9:a0:8d:d9:a1:16:df:9b:
         b2:5f:59:bb:dd:e9:94:52:03:da:57:d4:3a:10:09:46:79:d2:
         e8:99:1c:16:9a:a7:6a:9b:5b:8e:70:de:da:eb:0b:8d:64:43:
         eb:1d:d8:65:b4:80:a8:02:85:8a:3b:09:da:c5:27:e8:73:9f:
         a1:25:6f:2c:87:ba:20:af:1e:2a:d5:17:84:ea:67:19:36:65:
         d4:28:f0:a2:28:99:67:12:cb:7a:b1:0a:87:f9:93:1b:91:19:
         64:54:e3:34:8d:d0:9e:78:42:af:6c:cf:a8:63:a5:93:66:7e:
         a7:07:de:9f:71:1a:83:9b:fd:13:66:88:85:d7:ef:6f:cc:d1:
         ed:8c:69:cd:47:82:9a:32:b3:7f:f1:5b:d5:bd:4f:48:60:22:
         96:86:fb:3f:02:ea:6f:49:be:63:83:ec:68:e9:c2:49:c3:ab:
         48:36:db:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQhXKAGCQ2qP4lKW/SDjo1GvUsSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0QzFCNDU4RDBDQUM3RkMzRDYzNDRGOTJDMEVCNDFD
RTVCMjUzMjAeFw0yMzA1MTExOTAyMDJaFw0yMzA1MTIyMTEyMDJaMDMxMTAvBgNV
BAMTKDMwOEMxNkE2QTNGNkRCMTQ2NDY0NjJGQTczNkJBNkY5QjlGMEEwNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSSJHwZhTw2/qCWjHIKV/WHea+
9B0fE2Hv/psR9VG2KpIwHSXyEEGxy3uu7/m880RqmK5JI3krpA5AfEA4GoKYn9iq
5JXMJg0gR9ShsXvbjZke4YyGJOe6fJYBArK8hITac5uadONZhHXXQF9hZvdxMAr9
33MX9GoqyDNKZSaoKzL0uuiDPu8NYP3BS29pz0bYkUZTeiQKE69SIgXwAak/NpMn
L/jgdmkrRB+sON5Quvcjt2cURRbSefsOIdJ49YYBBZc6TxuBjxae6Eg5nCu2fdJr
bblv714NR0PS1pszxAWP7pVVtQZxOv8kE9rSDVbzAD1jyJu5mJ2Ajk26uNtTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMIwWpqP22xRkZGL6c2um+bnwoHgwHwYDVR0j
BBgwFoAUFUwbRY0MrH/D1jRPksDrQc5bJTIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHg1d3dkTkZDZ3FFallkZGNGeW9pTEJMVmhLalVaanJWbnF6R1Rwc05K
QUQvMC8xNTRDMUI0NThEMENBQzdGQzNENjM0NEY5MkMwRUI0MUNFNUIyNTMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1NEMxQjQ1OEQwQ0FDN0ZD
M0Q2MzQ0RjkyQzBFQjQxQ0U1QjI1MzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHg1d3dkTkZDZ3FFallkZGNGeW9pTEJMVmhLalVaanJWbnF6R1Rwc05KQUQvMC8x
NTRDMUI0NThEMENBQzdGQzNENjM0NEY5MkMwRUI0MUNFNUIyNTMyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPJjKqR5UzgJLfzzPCXOr0onKPF9J1cD5b/dv4oMj0KxPv2/soYjEbqF+WFXb
7f3CBfkboSSO9mA47y55tpsqJFaSOsBkgrUzn6yH1ydBg/jEXrmgjdmhFt+bsl9Z
u93plFID2lfUOhAJRnnS6JkcFpqnaptbjnDe2usLjWRD6x3YZbSAqAKFijsJ2sUn
6HOfoSVvLIe6IK8eKtUXhOpnGTZl1CjwoiiZZxLLerEKh/mTG5EZZFTjNI3QnnhC
r2zPqGOlk2Z+pwfen3Eag5v9E2aIhdfvb8zR7YxpzUeCmjKzf/Fb1b1PSGAilob7
PwLqb0m+Y4PsaOnCScOrSDbbXQ==
-----END CERTIFICATE-----