Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft
File:                     D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft (raw, json)
Hash identifier:          CTnQ9txhW7hP5mDCbKNo/eWpnk9EsHacgdOLtKU9jtQ=
Subject key identifier:   27:0F:38:B0:40:8C:80:DC:F4:17:C5:A7:2C:5B:73:FF:26:E5:99:6F
Authority key identifier: D7:CE:CD:40:25:A2:73:1E:62:E9:63:33:D0:9F:B4:C5:10:D5:C7:6D
Certificate issuer:       /CN=D7CECD4025A2731E62E96333D09FB4C510D5C76D
Certificate serial:       250D45DAF3E96475CE6B0470034F245610366A15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft
Manifest number:          021F
Signing time:             Wed 17 Jan 2024 13:45:45 +0000
Manifest this update:     Wed 17 Jan 2024 13:40:45 +0000
Manifest next update:     Thu 18 Jan 2024 14:23:45 +0000
Files and hashes:         1: 323830343a383037343a3a2f33322d3335203d3e20323731373531.roa (hash: qPlzukgJjMjdcwXwD7cmwdNo9ikKn7z2xELC/1fi/cc=)
                          2: D7CECD4025A2731E62E96333D09FB4C510D5C76D.crl (hash: RxFD+oJ0AmxN9gSbmvgsMTA5xLN+RBNHP8VPJXpgh3Y=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0d:45:da:f3:e9:64:75:ce:6b:04:70:03:4f:24:56:10:36:6a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7CECD4025A2731E62E96333D09FB4C510D5C76D
        Validity
            Not Before: Jan 17 13:40:45 2024 GMT
            Not After : Jan 18 14:23:45 2024 GMT
        Subject: CN=270F38B0408C80DCF417C5A72C5B73FF26E5996F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:6c:34:23:90:f3:0b:26:7a:49:2b:c0:37:
                    d6:46:3c:ac:5d:4c:6c:13:30:97:1a:1b:83:bd:1d:
                    d8:f9:26:64:e1:53:17:d3:2b:36:b9:98:13:0c:e0:
                    de:85:6f:2a:9e:ac:08:8b:88:b1:71:5b:6f:54:4d:
                    ca:32:17:d9:da:30:8b:08:1e:a4:bb:7b:c1:2c:a7:
                    a7:bb:55:22:17:cb:11:93:d3:3b:4c:37:33:6a:52:
                    5b:71:17:14:d0:63:06:18:ff:b1:26:fa:17:01:7b:
                    99:6a:2d:57:39:22:b7:eb:40:54:c8:b0:1d:c1:77:
                    ae:70:aa:95:ba:18:e2:fe:f5:aa:21:a7:40:4d:f4:
                    42:f1:03:92:fa:a1:83:58:72:61:07:de:42:39:9c:
                    0b:25:19:78:ff:8d:34:a4:0a:2f:58:4a:7a:a6:e0:
                    bc:f3:28:25:e3:67:30:1c:cb:b6:a4:ae:ed:33:c9:
                    e4:a1:93:dd:8d:9f:72:d9:74:5c:47:20:c5:87:0c:
                    fe:66:3a:9a:48:b3:a4:77:10:4c:b9:8e:90:35:ac:
                    29:a7:4d:b6:b9:ea:25:8d:50:d6:75:6c:52:ef:fb:
                    71:e2:95:8b:a2:38:63:28:41:bf:2d:d9:61:cb:28:
                    72:d6:09:3a:ec:e2:51:d0:fe:f6:9d:21:5b:cb:8b:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0F:38:B0:40:8C:80:DC:F4:17:C5:A7:2C:5B:73:FF:26:E5:99:6F
            X509v3 Authority Key Identifier:
                keyid:D7:CE:CD:40:25:A2:73:1E:62:E9:63:33:D0:9F:B4:C5:10:D5:C7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:67:a9:71:a4:b9:3b:be:b5:8c:ae:4c:00:1a:0d:b8:40:55:
         9f:b5:48:3c:1e:7b:89:54:96:39:a7:66:b6:d6:e6:7a:c9:1c:
         8d:5d:7d:b2:30:d2:4f:e5:00:08:23:df:e2:34:df:6f:dc:6e:
         3d:92:22:5b:f4:08:cb:cb:39:98:42:62:b2:33:a4:38:c4:ee:
         8e:81:56:c0:74:0d:34:97:9f:af:28:05:63:5f:a4:c6:17:ff:
         cd:5f:6d:5f:b7:99:ca:94:09:61:81:a3:3d:16:08:c8:47:c6:
         62:86:fd:24:a2:fd:96:81:02:39:1a:b2:04:bf:11:74:8c:15:
         c0:a4:15:6f:c5:57:36:40:e5:84:5b:95:ac:8f:44:b2:73:03:
         3b:f6:84:40:88:f9:9c:c3:8f:99:35:43:d7:28:4d:e3:1c:12:
         d0:70:e3:0f:21:50:db:d6:28:f2:4e:d1:2a:79:67:40:67:25:
         aa:1f:00:78:95:1c:6e:13:3b:94:ba:f2:7a:97:7c:62:e2:b3:
         d2:82:73:3c:b4:cf:2c:f0:6e:bf:6a:20:5c:00:15:c4:61:83:
         67:c1:00:66:d4:47:af:8e:ef:d3:c3:42:f7:ed:7e:ae:0b:a7:
         76:e1:a2:5c:c4:dd:ab:db:55:7a:7f:44:31:c4:62:c3:4e:32:
         89:13:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----