Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/D15C87DE37E2D6E43EC076726FAA6CE05F4EE235.mft
File:                     D15C87DE37E2D6E43EC076726FAA6CE05F4EE235.mft (raw, json)
Hash identifier:          MQzBmdJsYNVpdmZz3eRkzry+USQNbDGKmAYA+CO2R3M=
Subject key identifier:   71:B7:D9:E2:DD:7F:85:34:CA:A0:C9:BB:A1:90:F9:3F:4E:A3:7A:68
Authority key identifier: D1:5C:87:DE:37:E2:D6:E4:3E:C0:76:72:6F:AA:6C:E0:5F:4E:E2:35
Certificate issuer:       /CN=D15C87DE37E2D6E43EC076726FAA6CE05F4EE235
Certificate serial:       4E015B8D1E49DE9A8F07BDA99FEE25DE6D5D0E76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D15C87DE37E2D6E43EC076726FAA6CE05F4EE235.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/D15C87DE37E2D6E43EC076726FAA6CE05F4EE235.mft
Manifest number:          88
Signing time:             Tue 29 Aug 2023 23:45:53 +0000
Manifest this update:     Tue 29 Aug 2023 23:40:53 +0000
Manifest next update:     Thu 31 Aug 2023 01:12:53 +0000
Files and hashes:         1: 34352e3137392e3130382e302f32322d3234203d3e20323639303735.roa (hash: KrB3lj7144BmNXPQsmmYKfpGc9/vZQypQX6VrQLFajo=)
                          2: D15C87DE37E2D6E43EC076726FAA6CE05F4EE235.crl (hash: anw04Qq70CrFos/2tBy47icWVlovcw/msSrC6Kb3l9s=)
                          3: 323830343a356631343a3a2f33322d3334203d3e20323639303735.roa (hash: giNGsZXm0Y54lmtZqEoqv9bNbzTzlu99Yw/VSvoAiHY=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:01:5b:8d:1e:49:de:9a:8f:07:bd:a9:9f:ee:25:de:6d:5d:0e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15C87DE37E2D6E43EC076726FAA6CE05F4EE235
        Validity
            Not Before: Aug 29 23:40:53 2023 GMT
            Not After : Aug 31 01:12:53 2023 GMT
        Subject: CN=71B7D9E2DD7F8534CAA0C9BBA190F93F4EA37A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:c9:6c:33:04:2f:da:77:10:df:73:95:22:
                    fe:25:01:ec:9b:ec:0b:52:d8:ce:65:d0:a5:b6:92:
                    f0:2c:cd:9a:54:e4:ec:45:38:3d:c4:91:fc:e2:10:
                    0a:55:8d:55:c6:99:bd:b4:8e:28:46:b9:e3:36:74:
                    0c:68:da:da:97:99:d5:2c:88:92:4b:1c:91:18:9d:
                    0b:2c:fc:b3:3b:89:59:99:9f:61:c7:c9:53:fe:cd:
                    db:ce:a8:0d:9d:6e:0f:c8:a4:b6:99:70:61:a2:59:
                    5a:6c:89:8c:56:5f:4b:f3:f1:16:b4:bd:99:58:75:
                    31:2f:ee:08:88:ff:22:8d:85:f8:fd:f5:0b:07:69:
                    2f:4a:d1:23:aa:e4:09:50:4a:8d:b5:c7:68:11:9f:
                    e7:fd:c1:db:d2:9d:47:67:35:c6:f8:35:5b:81:fe:
                    91:d3:0f:8a:9a:ea:b1:0f:bd:d8:70:3e:11:25:86:
                    d6:66:d3:3e:cc:cd:b6:16:1e:8c:0f:86:df:59:63:
                    4d:1d:40:74:8c:97:b4:29:d5:34:4b:d3:ae:8b:87:
                    9c:cf:1f:5c:db:e7:26:ef:19:e7:fb:70:9f:d3:82:
                    1c:e4:31:44:36:7c:59:b7:87:9a:91:6b:fe:f7:7a:
                    84:5a:5e:f9:83:c7:ca:2e:b1:9c:4a:35:8d:c8:26:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B7:D9:E2:DD:7F:85:34:CA:A0:C9:BB:A1:90:F9:3F:4E:A3:7A:68
            X509v3 Authority Key Identifier:
                keyid:D1:5C:87:DE:37:E2:D6:E4:3E:C0:76:72:6F:AA:6C:E0:5F:4E:E2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/D15C87DE37E2D6E43EC076726FAA6CE05F4EE235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D15C87DE37E2D6E43EC076726FAA6CE05F4EE235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/D15C87DE37E2D6E43EC076726FAA6CE05F4EE235.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8f:63:92:1c:20:67:57:6e:42:14:11:67:ff:81:71:08:9f:
         42:39:9e:14:ec:3d:c2:d1:33:4b:3b:86:70:be:20:0a:7d:82:
         8b:cf:16:51:56:d5:38:bf:20:d8:6c:ec:e5:67:1e:ad:96:24:
         c0:d7:09:86:41:bb:e6:ed:a1:2d:5b:35:34:fa:0d:dd:11:bb:
         13:1f:e6:1b:08:d1:7f:82:b6:2a:ed:7d:bf:ab:95:ce:61:07:
         bc:d4:1a:89:b0:69:f3:6e:de:8b:ea:fb:6d:ab:0e:f0:e2:69:
         d7:f1:76:e1:ce:56:23:06:d7:06:8d:a8:04:71:f0:c9:15:7d:
         9c:6d:18:2d:f0:4a:6c:09:ba:77:f7:2a:d7:15:bc:18:c0:f3:
         b4:6a:3f:71:c4:4a:f7:98:b9:ef:98:b2:bd:76:97:36:bd:d2:
         14:22:0c:b5:ae:dc:ac:53:0b:05:88:1d:22:21:55:72:da:60:
         d4:45:ac:35:ca:d2:3c:b6:a6:05:18:15:3f:88:27:20:0f:a9:
         87:ce:7f:31:47:65:00:98:0a:23:53:81:bd:55:67:42:1b:b5:
         16:8d:7d:e8:6c:18:02:ba:f9:04:e4:be:e9:7a:98:ab:74:e0:
         35:f2:da:85:c5:c0:eb:5b:25:d0:97:c5:98:93:da:98:10:67:
         35:47:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----