Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.mft
File:                     97A4AF5A5DAA9301E561374F38352591E093C270.mft (raw, json)
Hash identifier:          CSAbagEBIBjyLyDBr7btCy9ga4sbig0JMopdrJMTJh4=
Subject key identifier:   08:1C:CF:AC:13:F7:8C:F0:32:0D:30:6C:02:15:C7:7E:80:F3:DC:9D
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       15A25AF056D846B251A62BA26442BA8CAE455A91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.mft
Manifest number:          42
Signing time:             Sun 31 Dec 2023 13:38:23 +0000
Manifest this update:     Sun 31 Dec 2023 13:33:23 +0000
Manifest next update:     Mon 01 Jan 2024 14:23:23 +0000
Files and hashes:         1: 3137392e34332e342e302f32322d3234203d3e20323632343137.roa (hash: NTkeU7rADfkrb3BRjH4VNP9bd3WSbLGEktSJnvTmdQ0=)
                          2: 3137372e33372e36342e302f32302d3234203d3e20323632343137.roa (hash: X6tA9TZ9SMRAOQg65Od8X2nj9mW3sQOMmFJzkGm+4sg=)
                          3: 3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa (hash: +UiyXZ9f5oLTOe2jWNwggkmE7fsZX31e7Y9py73ZpS8=)
                          4: 3137372e33372e38382e302f32312d3234203d3e20323632343137.roa (hash: IRreX0f62V9g70qofqzNKW1RxfyDpKO2pntFu/t5t04=)
                          5: 97A4AF5A5DAA9301E561374F38352591E093C270.crl (hash: +qtMQgPA5H7mlDlnoxgG8bjJPXkPIfA7gv+Ih5SH2NY=)
                          6: 323830343a6532343a3a2f33322d3438203d3e20323632343137.roa (hash: POw8SidHYeCM1ztWNhKb//aGUK4zoDIaidT0iWm2pfc=)
                          7: 3136382e39302e32382e302f32322d3234203d3e20323632343137.roa (hash: smszIFGyLxEaw5iDhhhcY+ef/6T4Yh1+udI1pByJlGU=)
                          8: 3137372e33372e38302e302f32312d3234203d3e20323632343137.roa (hash: Dc/P24bhq3pChKMT6Jdtl2UTz1Tq3RJbl8mGD/zkGmQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a2:5a:f0:56:d8:46:b2:51:a6:2b:a2:64:42:ba:8c:ae:45:5a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 31 13:33:23 2023 GMT
            Not After : Jan  1 14:23:23 2024 GMT
        Subject: CN=081CCFAC13F78CF0320D306C0215C77E80F3DC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0e:d6:b2:85:68:5b:55:c6:b7:1d:66:17:02:
                    bc:1e:0f:d3:09:74:e2:9e:b7:a8:b7:0a:ad:eb:ab:
                    ba:25:0c:08:01:76:e2:ef:a5:11:9d:ee:98:17:0e:
                    7a:6f:59:53:a3:6a:44:65:80:b3:a3:e7:57:27:61:
                    c6:11:d5:5c:67:db:b2:88:0e:39:cd:5d:45:d0:fd:
                    e4:8d:3d:c2:67:a7:d4:89:0e:63:fa:5b:42:65:54:
                    98:fa:86:54:8e:96:e8:a4:72:67:5c:05:81:83:73:
                    9a:de:1d:75:13:8f:e8:29:1b:f7:40:fb:87:ba:45:
                    0f:f5:2f:5f:93:fc:ef:5e:fc:4e:1c:56:9d:17:3a:
                    ed:f4:8f:f3:7b:cc:98:1e:dd:3b:6c:2c:bd:29:95:
                    22:96:ee:a1:6d:77:e0:e2:ed:00:ad:1f:95:71:af:
                    67:76:6b:15:b6:7c:60:00:ab:f9:22:fe:e4:ef:b0:
                    16:dd:fb:f0:be:0a:f9:ed:bc:5b:09:fa:af:8b:47:
                    d3:75:e0:ee:da:12:3b:c9:fd:dd:dd:cf:99:41:c4:
                    91:b4:23:f4:da:00:90:ee:5b:d5:71:9a:36:7e:e5:
                    08:89:c6:a7:ce:d2:b2:e7:0f:f0:15:88:52:14:16:
                    e6:a2:cf:a7:f3:47:4d:f3:76:7e:05:1f:a6:a7:ab:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1C:CF:AC:13:F7:8C:F0:32:0D:30:6C:02:15:C7:7E:80:F3:DC:9D
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bf:66:35:0f:47:24:f2:a3:b6:05:f0:82:7c:27:ce:c3:0c:
         43:d3:08:21:10:3e:71:09:58:7c:34:70:11:17:85:15:f6:e7:
         20:e3:ab:13:aa:f6:23:8f:0a:29:76:ad:ac:ae:7f:9e:db:aa:
         a9:95:92:04:08:8f:c4:1d:99:94:8a:7c:dc:3c:9d:40:9c:d7:
         a0:81:6c:1c:ae:e4:6b:1c:82:56:0a:97:f3:83:25:f9:22:c8:
         8b:de:c4:8a:22:a6:72:38:da:7e:b3:71:dd:cd:c0:62:49:8d:
         a8:3c:4a:6e:28:8a:c3:f7:e2:e2:86:f9:d8:3d:db:f5:3d:d8:
         5b:94:ec:f8:96:d7:19:f3:fb:95:5a:55:e7:e6:57:03:8b:d4:
         16:be:2d:ec:e3:5c:75:24:9d:6b:f7:a4:9c:54:2c:aa:f5:cc:
         18:ba:64:d4:71:88:c5:19:35:b7:57:19:df:e4:38:c6:0c:c2:
         9a:8d:40:e2:39:f0:2f:39:96:1f:69:7a:4f:ec:82:d0:8b:01:
         7c:3d:9f:67:9e:cf:49:72:b4:0f:b7:22:86:6e:cb:60:71:3c:
         c1:0a:72:be:e3:36:86:dc:54:dc:2f:ef:12:e5:0e:8d:68:4b:
         f3:7c:53:1d:17:86:8b:74:96:00:b9:87:96:fd:3a:17:cc:e6:
         21:a8:1f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 16:20:59 2024 by rpki-client on console-fra.rpki-client.org