Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/5940C19E46A00D616E69354C6F425903A1505095.mft
File:                     5940C19E46A00D616E69354C6F425903A1505095.mft (raw, json)
Hash identifier:          Rn/CpO3CQGzP68grXGiXgMU1OsXIMncJMBL28lGRnuY=
Subject key identifier:   4D:28:E6:DC:96:5F:A5:5D:11:E2:EE:C2:FA:7D:96:2C:74:F7:79:4F
Authority key identifier: 59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95
Certificate issuer:       /CN=5940C19E46A00D616E69354C6F425903A1505095
Certificate serial:       5ECD8038E8E4DC1F88C5B307954FB186A2AF4C08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5940C19E46A00D616E69354C6F425903A1505095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/5940C19E46A00D616E69354C6F425903A1505095.mft
Manifest number:          033A
Signing time:             Mon 26 Feb 2024 23:30:05 +0000
Manifest this update:     Mon 26 Feb 2024 23:25:05 +0000
Manifest next update:     Wed 28 Feb 2024 00:01:05 +0000
Files and hashes:         1: 34352e3232352e35302e302f32342d3234203d3e20323636393431.roa (hash: IjkAS5zOJgjUd3PEcifAJHrlauFXvAGcXQ1//3dOzjQ=)
                          2: 34352e3232352e34382e302f32332d3233203d3e20323636393431.roa (hash: WcpOicYnDqB4R6B2rAV8G768Gh9twcYv0UR2ipeXSOY=)
                          3: 5940C19E46A00D616E69354C6F425903A1505095.crl (hash: rTFEDJUtRXgOJyhYcM/9P1bWveyaP9a3L+78IggInqs=)
                          4: 34352e3232352e34382e302f32342d3234203d3e20323636393431.roa (hash: VAcp1PG1uCPYyPbnGdjw6uUFPWfhBSdhBEfyuAsuHGg=)
                          5: 34352e3232352e35312e302f32342d3234203d3e20323636393431.roa (hash: Lihn+dA/PPB0yixELO99rvujs+P9ET/N9GPHw3dm0I8=)
                          6: 34352e3232352e34392e302f32342d3234203d3e20323636393431.roa (hash: 1B+ha5HSsuSRWtDGWdjSfkWLthym7zjPXJSRHhFAQHc=)
                          7: 323830343a343561383a3a2f33322d3332203d3e20323636393431.roa (hash: FTEiGxZZNbqzWJiqK24thK2BtK/kSRuVyn6oLywzRfI=)
                          8: 34352e3232352e34382e302f32322d3232203d3e20323636393431.roa (hash: Q9UylVrhMeKvgSIVA7kv8LL88bukbl93wkgP6DHbivs=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cd:80:38:e8:e4:dc:1f:88:c5:b3:07:95:4f:b1:86:a2:af:4c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5940C19E46A00D616E69354C6F425903A1505095
        Validity
            Not Before: Feb 26 23:25:05 2024 GMT
            Not After : Feb 28 00:01:05 2024 GMT
        Subject: CN=4D28E6DC965FA55D11E2EEC2FA7D962C74F7794F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:70:7f:6a:7c:08:11:be:0e:93:b1:cc:86:
                    9a:f0:ed:92:0b:b9:b0:50:8a:d1:31:c4:cf:90:24:
                    b8:ec:c7:bd:35:70:a6:b4:35:8d:1d:13:66:a1:c1:
                    f4:d7:23:9c:87:e1:87:09:3e:d0:40:94:7e:00:ce:
                    ac:25:6c:69:d8:07:85:e9:35:f9:fc:8c:75:1b:6b:
                    92:ec:73:c8:7a:6a:f9:e0:5f:4a:ca:e2:63:98:3d:
                    93:7f:86:24:48:4e:38:eb:4b:8b:c8:bd:de:1d:b6:
                    3d:6c:d8:ba:0c:60:7b:51:28:6f:51:77:64:80:5e:
                    12:44:ae:09:06:60:5d:94:70:7e:97:54:39:a7:17:
                    ce:8b:a8:53:30:f5:cc:3b:e1:b1:20:de:36:54:29:
                    20:98:57:ad:59:01:f3:91:0e:64:29:72:81:46:8e:
                    f2:f3:29:60:72:2e:da:16:6c:74:0b:82:ce:37:af:
                    ce:b3:8e:3e:32:85:ea:32:2e:cc:fd:74:c7:f9:9d:
                    1a:a8:1a:54:d4:ce:5e:10:8f:08:40:cf:94:6e:c4:
                    c3:df:6a:67:d9:33:a5:d3:74:03:0e:5b:4a:bc:81:
                    b3:f4:f5:0c:16:72:25:10:24:96:fe:48:36:5b:12:
                    31:de:33:1d:68:14:43:74:36:a3:32:2d:e7:80:42:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:28:E6:DC:96:5F:A5:5D:11:E2:EE:C2:FA:7D:96:2C:74:F7:79:4F
            X509v3 Authority Key Identifier:
                keyid:59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/5940C19E46A00D616E69354C6F425903A1505095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5940C19E46A00D616E69354C6F425903A1505095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/5940C19E46A00D616E69354C6F425903A1505095.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:21:32:68:96:e5:0c:33:84:4b:27:bf:c3:97:14:28:d5:
         97:b4:fd:36:fe:64:bd:6b:5d:5e:dd:c7:c6:f0:d3:2e:df:b2:
         fd:1f:72:4d:8b:e3:2f:a0:d8:29:c5:db:56:0d:da:3b:c1:fc:
         b6:1b:66:50:41:66:bb:1a:79:52:c3:d4:0d:34:63:c6:d3:6d:
         d1:c8:6d:55:0f:0e:f5:0e:21:fb:67:92:b8:74:3a:83:f4:d3:
         94:cd:f5:2a:e6:60:eb:ae:0f:de:35:cc:60:06:75:68:b5:ea:
         3f:5b:0d:0c:1b:4e:e0:1f:20:06:5b:74:c0:93:88:12:c1:51:
         12:f8:3f:54:fe:ea:95:05:9f:3c:51:4a:12:7b:ba:cd:dc:29:
         d5:94:e2:0d:98:4c:5a:5b:22:df:fd:08:68:88:55:ab:d0:0b:
         35:86:95:68:37:3b:ff:6a:e6:bd:fe:ba:8f:0d:39:7a:3a:3c:
         36:2d:34:6a:4b:15:e9:af:e7:dc:74:83:6e:45:40:e5:6f:fe:
         28:29:56:e2:92:a5:ed:71:6f:69:79:c7:3d:86:3a:1c:cc:65:
         14:9b:49:49:21:8d:71:44:c6:8c:f6:05:b3:53:2c:13:1a:6a:
         95:f8:c2:d6:3f:f9:35:87:14:96:87:01:89:dc:42:c1:aa:91:
         1e:bc:30:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXs2AOOjk3B+IxbMHlU+xhqKvTAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk0MEMxOUU0NkEwMEQ2MTZFNjkzNTRDNkY0MjU5MDNB
MTUwNTA5NTAeFw0yNDAyMjYyMzI1MDVaFw0yNDAyMjgwMDAxMDVaMDMxMTAvBgNV
BAMTKDREMjhFNkRDOTY1RkE1NUQxMUUyRUVDMkZBN0Q5NjJDNzRGNzc5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QHB/anwIEb4Ok7HMhprw7ZIL
ubBQitExxM+QJLjsx701cKa0NY0dE2ahwfTXI5yH4YcJPtBAlH4AzqwlbGnYB4Xp
Nfn8jHUba5Lsc8h6avngX0rK4mOYPZN/hiRITjjrS4vIvd4dtj1s2LoMYHtRKG9R
d2SAXhJErgkGYF2UcH6XVDmnF86LqFMw9cw74bEg3jZUKSCYV61ZAfORDmQpcoFG
jvLzKWByLtoWbHQLgs43r86zjj4yheoyLsz9dMf5nRqoGlTUzl4QjwhAz5RuxMPf
amfZM6XTdAMOW0q8gbP09QwWciUQJJb+SDZbEjHeMx1oFEN0NqMyLeeAQotxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTSjm3JZfpV0R4u7C+n2WLHT3eU8wHwYDVR0j
BBgwFoAUWUDBnkagDWFuaTVMb0JZA6FQUJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1lVemNzcUhqRlV4a3NreGh0SEp3NE0zWmVQdmE0Tm5rVVQ1eFRDRnlZ
UG4vMC81OTQwQzE5RTQ2QTAwRDYxNkU2OTM1NEM2RjQyNTkwM0ExNTA1MDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5NDBDMTlFNDZBMDBENjE2
RTY5MzU0QzZGNDI1OTAzQTE1MDUwOTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1lVemNzcUhqRlV4a3NreGh0SEp3NE0zWmVQdmE0Tm5rVVQ1eFRDRnlZUG4vMC81
OTQwQzE5RTQ2QTAwRDYxNkU2OTM1NEM2RjQyNTkwM0ExNTA1MDk1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARcUhMmiW5QwzhEsnv8OXFCjVl7T9Nv5kvWtdXt3HxvDTLt+y/R9yTYvjL6DY
KcXbVg3aO8H8thtmUEFmuxp5UsPUDTRjxtNt0chtVQ8O9Q4h+2eSuHQ6g/TTlM31
KuZg664P3jXMYAZ1aLXqP1sNDBtO4B8gBlt0wJOIEsFREvg/VP7qlQWfPFFKEnu6
zdwp1ZTiDZhMWlsi3/0IaIhVq9ALNYaVaDc7/2rmvf66jw05ejo8Ni00aksV6a/n
3HSDbkVA5W/+KClW4pKl7XFvaXnHPYY6HMxlFJtJSSGNcUTGjPYFs1MsExpqlfjC
1j/5NYcUlocBidxCwaqRHrwwOA==
-----END CERTIFICATE-----