Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/287D3948CD018DC083CEF786858DF019B1D3111B.mft
File:                     287D3948CD018DC083CEF786858DF019B1D3111B.mft (raw, json)
Hash identifier:          iE/lovlxaXtCDG0sGBS2Vkq7gq+2fhdvHG5oY2BOUL4=
Subject key identifier:   41:42:CE:AA:86:8B:80:1B:EA:E6:36:A1:58:7B:2F:74:5D:45:BD:0C
Authority key identifier: 28:7D:39:48:CD:01:8D:C0:83:CE:F7:86:85:8D:F0:19:B1:D3:11:1B
Certificate issuer:       /CN=287D3948CD018DC083CEF786858DF019B1D3111B
Certificate serial:       28324AEF387947593407E9A12DCAA2FE147D9765
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/287D3948CD018DC083CEF786858DF019B1D3111B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/287D3948CD018DC083CEF786858DF019B1D3111B.mft
Manifest number:          0108
Signing time:             Thu 17 Oct 2024 21:56:48 +0000
Manifest this update:     Thu 17 Oct 2024 21:51:48 +0000
Manifest next update:     Sat 19 Oct 2024 00:12:48 +0000
Files and hashes:         1: 287D3948CD018DC083CEF786858DF019B1D3111B.crl (hash: U7GB1rT2zHPfOY/g4G2qUmg3NRHGQOFX71YVSmPHNwM=)
                          2: 323830343a343137633a3a2f33322d3438203d3e20323637343336.roa (hash: btcOiueTmT+veK8Kwus2MVXuTdIxZ8/IHDEJqYpveM0=)
                          3: 3138312e3139312e302e302f32322d3234203d3e20323637343336.roa (hash: hwOOEwQupTvwJNcts4pJU/NfjDjZ/xiWRUrjToumYss=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:32:4a:ef:38:79:47:59:34:07:e9:a1:2d:ca:a2:fe:14:7d:97:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=287D3948CD018DC083CEF786858DF019B1D3111B
        Validity
            Not Before: Oct 17 21:51:48 2024 GMT
            Not After : Oct 19 00:12:48 2024 GMT
        Subject: CN=4142CEAA868B801BEAE636A1587B2F745D45BD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:56:a4:15:fc:59:5f:ee:16:74:b7:6f:2c:bc:
                    33:a4:6f:7e:36:d4:cd:88:1e:0d:7d:7d:30:56:9f:
                    e8:69:98:de:4a:62:d6:22:50:8a:92:7f:29:29:5f:
                    0e:54:29:7a:34:94:7d:26:dd:e5:e7:4c:74:b1:8a:
                    68:12:c1:84:5d:6c:19:98:b1:43:6f:57:e5:61:c0:
                    30:1b:da:bb:2b:0f:1c:bc:ac:09:63:26:b5:08:0e:
                    58:ff:46:d0:2e:b9:e1:36:3b:d7:5b:3f:34:99:58:
                    94:f8:a9:90:a8:e9:00:01:7c:e9:9e:33:4a:bd:ea:
                    e8:4e:63:06:3c:34:72:65:d8:01:86:12:2c:01:1f:
                    45:2e:5c:c2:d6:09:1e:a4:13:27:e5:15:00:d7:38:
                    c9:e4:07:69:ad:55:3b:d2:b9:1f:06:ee:12:7f:93:
                    24:e4:af:fe:32:19:d0:09:89:6b:c5:8a:08:66:92:
                    a6:bd:e0:ec:75:47:02:1b:17:b6:dc:17:4e:d5:6a:
                    39:f3:97:34:c0:ef:50:55:27:ef:29:ee:dc:b9:d4:
                    9e:10:5c:a9:64:73:59:18:e9:52:c2:e4:79:4b:0c:
                    f3:b0:56:31:68:0f:16:5f:5a:5b:e8:82:b4:e9:3f:
                    16:7b:31:6c:2b:e6:77:4b:81:27:d4:be:59:fc:83:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:42:CE:AA:86:8B:80:1B:EA:E6:36:A1:58:7B:2F:74:5D:45:BD:0C
            X509v3 Authority Key Identifier:
                keyid:28:7D:39:48:CD:01:8D:C0:83:CE:F7:86:85:8D:F0:19:B1:D3:11:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/287D3948CD018DC083CEF786858DF019B1D3111B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/287D3948CD018DC083CEF786858DF019B1D3111B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/287D3948CD018DC083CEF786858DF019B1D3111B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1b:c7:8f:a1:c3:43:c1:04:0d:e1:c5:76:0a:8f:89:3b:7d:
         59:65:1d:87:4d:63:30:d3:ed:87:88:a8:9f:ac:fb:bf:a9:99:
         4b:38:22:9b:48:f0:df:f5:3c:c8:3d:b9:bc:61:b3:72:a3:72:
         b0:49:00:e5:86:eb:68:27:4f:7e:44:1c:cf:e8:ea:b7:65:bf:
         94:1a:db:5d:e7:69:b5:f5:68:11:8a:05:cd:d7:8b:5d:fe:63:
         8c:b8:8a:fc:15:ad:c3:e5:c6:97:63:ab:de:92:c5:04:f2:89:
         7d:bf:68:7e:21:a5:77:05:28:e3:84:18:87:d5:ff:d6:d4:39:
         81:bf:1d:b4:0d:dc:0a:c1:af:82:e9:2b:95:2c:e8:5c:ed:d5:
         22:cc:fa:79:55:00:6b:8b:08:93:a6:f0:8c:62:35:35:6e:41:
         45:f5:88:72:fc:7b:08:99:44:fa:c7:78:dd:6f:f0:65:65:fb:
         3e:9c:4e:36:98:a7:9c:c8:d5:9b:6b:c5:7d:35:50:f9:7b:8f:
         5e:b2:74:8e:a6:17:1c:68:30:73:70:61:3e:f0:b0:b5:f3:58:
         f1:7a:08:72:57:8c:3b:cd:89:dc:ef:af:ea:9d:4f:79:b8:c8:
         60:f2:af:62:d7:21:14:96:76:53:e4:cd:4d:2f:c2:36:75:62:
         6a:af:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----