Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/18618F879C5032BBDFB90E728C39A0F51272E3E3.mft
File:                     18618F879C5032BBDFB90E728C39A0F51272E3E3.mft (raw, json)
Hash identifier:          jebU+a7wDcOdODNMO/N/Q9NeGUuGBlwC1LzJUrfpRiI=
Subject key identifier:   E4:E7:C4:C5:9A:BE:FE:40:A1:00:7C:70:D0:7A:6C:BC:55:5A:63:9F
Authority key identifier: 18:61:8F:87:9C:50:32:BB:DF:B9:0E:72:8C:39:A0:F5:12:72:E3:E3
Certificate issuer:       /CN=18618F879C5032BBDFB90E728C39A0F51272E3E3
Certificate serial:       06A4A8097728841463A755F1761E2E5FA1D731FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18618F879C5032BBDFB90E728C39A0F51272E3E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/18618F879C5032BBDFB90E728C39A0F51272E3E3.mft
Manifest number:          03
Signing time:             Fri 25 Oct 2024 13:03:39 +0000
Manifest this update:     Fri 25 Oct 2024 12:58:39 +0000
Manifest next update:     Sat 26 Oct 2024 17:00:39 +0000
Files and hashes:         1: 18618F879C5032BBDFB90E728C39A0F51272E3E3.crl (hash: VlPUwPC9VpRMh9viMKmGVXozeIFp3pHwJ+DbrM2pHes=)
                          2: 323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (hash: AiEWQIZTpKVXr+AB4HIc71YMFw1roTH13DF1BjnmHTA=)
                          3: 3230302e3132342e38342e302f32322d3332203d3e20323730323734.roa (hash: NbyvHS76fY4ePwO80aQX02kPdvcUARTNb3mDE1GRvy8=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a4:a8:09:77:28:84:14:63:a7:55:f1:76:1e:2e:5f:a1:d7:31:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18618F879C5032BBDFB90E728C39A0F51272E3E3
        Validity
            Not Before: Oct 25 12:58:39 2024 GMT
            Not After : Oct 26 17:00:39 2024 GMT
        Subject: CN=E4E7C4C59ABEFE40A1007C70D07A6CBC555A639F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:36:24:7a:4d:e5:fe:d4:e6:1e:a9:5c:75:64:
                    e4:92:c9:30:e6:07:18:b6:76:5e:06:de:f1:6f:7e:
                    e0:f7:cb:6e:78:5f:a5:68:ee:27:85:0b:be:a2:e6:
                    c7:51:84:b1:7e:7d:fd:42:ee:c5:47:4b:6c:2b:a8:
                    ef:99:7b:45:69:da:61:f4:e0:16:9e:cf:dd:8a:60:
                    d8:f0:61:07:9a:80:ac:68:b1:c5:70:c2:38:04:5d:
                    67:be:56:b5:4a:3d:66:29:aa:77:f1:75:f1:ce:64:
                    70:dc:56:94:5a:93:22:e9:8b:80:e5:6c:08:d4:e8:
                    2f:96:1e:81:1b:41:f3:ad:31:4f:4d:5a:b6:96:9b:
                    10:b5:ff:69:53:17:dc:09:83:89:2d:89:73:92:22:
                    0a:75:9e:24:b4:c8:94:df:c3:c5:45:66:7e:8a:e6:
                    7a:c7:2b:ca:47:72:69:35:6d:57:ad:dc:91:75:da:
                    68:9d:66:7a:18:2a:4d:b6:b6:ed:01:6f:c6:66:90:
                    b5:50:ed:50:92:49:4f:0b:7a:29:f5:5f:b2:e8:3b:
                    62:24:75:7f:b1:33:19:aa:54:1b:72:0e:dc:26:8d:
                    eb:15:89:97:0a:c7:8d:bd:c6:4d:8e:7a:ad:e7:73:
                    d7:a2:a3:e3:d3:02:3e:f1:a1:c2:68:f0:94:7b:cd:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E7:C4:C5:9A:BE:FE:40:A1:00:7C:70:D0:7A:6C:BC:55:5A:63:9F
            X509v3 Authority Key Identifier:
                keyid:18:61:8F:87:9C:50:32:BB:DF:B9:0E:72:8C:39:A0:F5:12:72:E3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/18618F879C5032BBDFB90E728C39A0F51272E3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18618F879C5032BBDFB90E728C39A0F51272E3E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/18618F879C5032BBDFB90E728C39A0F51272E3E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:18:35:0e:3c:bc:e8:c6:2d:74:2d:f9:f4:15:0c:1f:0b:89:
         05:ed:4a:2f:2e:f7:a4:7f:cf:25:d5:54:e0:37:bb:d6:5b:af:
         16:75:bd:e6:6e:63:84:34:8b:ae:67:fa:e1:d6:3d:7d:84:f0:
         16:86:b5:bd:dc:14:4d:e4:9b:78:27:06:15:96:fe:ee:ec:42:
         2f:63:ad:53:aa:2c:8e:82:2c:e3:63:88:ae:06:bf:9c:44:0d:
         36:1c:c8:0a:a6:f3:2a:3b:2a:b6:37:35:35:d0:fc:0f:10:2c:
         f5:b8:96:b3:d9:07:28:ac:c5:2a:b5:cc:27:e6:cf:70:ab:9a:
         b4:44:1c:e6:f4:9e:bb:3f:a4:ef:52:9b:03:e7:0b:37:e7:68:
         47:94:5d:a1:64:02:9f:9f:6b:af:20:47:03:0c:19:f9:e1:a8:
         5c:a7:0b:15:6b:c7:ba:ad:1b:2e:bd:c8:f8:12:e3:46:8d:37:
         f6:08:b4:88:ea:6b:8e:44:66:1d:6d:01:ff:de:f3:f7:de:c9:
         d4:57:f4:03:31:0b:6a:33:f2:9d:10:1b:34:c0:95:6c:65:ce:
         f8:bb:34:d2:dd:d7:ee:e3:eb:20:8c:13:c5:8e:fe:14:fd:ff:
         85:fc:71:21:0a:9e:31:af:93:b9:6d:2b:6b:e7:f6:b5:80:03:
         32:3d:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----