Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.mft
File:                     3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.mft (raw, json)
Hash identifier:          l7nxMcq4uZSzBey/uhwJwbfo3OPJEwnxXn6h4sGkt5g=
Subject key identifier:   0A:4E:7C:B2:58:E0:A2:E4:9C:7A:43:C3:53:AB:34:10:EC:0E:9E:C4
Authority key identifier: 3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D
Certificate issuer:       /CN=3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D
Certificate serial:       645A4DAB3E891E7A975F73E5C38E562E96D1FC86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.mft
Manifest number:          2A
Signing time:             Sun 27 Oct 2024 23:06:04 +0000
Manifest this update:     Sun 27 Oct 2024 23:01:04 +0000
Manifest next update:     Tue 29 Oct 2024 00:02:04 +0000
Files and hashes:         1: 3137302e38312e3132302e302f32332d3234203d3e20323636343036.roa (hash: nG6OJRoSLms7zw+C/sE1zu90KRLuqRoyaYxygeZnHRQ=)
                          2: 3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.crl (hash: RgVXZUFCKad/bXAmRO1DOqAq35ufNJ5oBfgBrh0dyzo=)
                          3: 323830343a333735633a3a2f33322d3634203d3e20323636343036.roa (hash: 36ClnzG08L8P8GHbEdYDzXke1HyMoQmFHCiCub49v/4=)
                          4: 3137302e38312e3132322e302f32332d3234203d3e20323636343036.roa (hash: /dMwDJn4rixyDnMMkzzP+7q4PSDzl/h4JDpbPDJL3oA=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5a:4d:ab:3e:89:1e:7a:97:5f:73:e5:c3:8e:56:2e:96:d1:fc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D
        Validity
            Not Before: Oct 27 23:01:04 2024 GMT
            Not After : Oct 29 00:02:04 2024 GMT
        Subject: CN=0A4E7CB258E0A2E49C7A43C353AB3410EC0E9EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:05:49:f2:a4:f1:29:fa:a2:7f:e2:21:5d:
                    96:c9:e8:49:ae:c1:86:97:b0:99:b8:07:f7:a5:5e:
                    a7:a6:95:29:cf:58:94:19:68:7d:7b:37:38:cb:24:
                    b7:ab:26:1e:30:31:b1:a8:c8:d1:80:22:37:df:8a:
                    67:2e:40:01:e4:34:a1:09:4f:82:29:57:9d:60:6e:
                    c9:7e:61:e7:23:53:f4:55:c7:7e:43:21:d3:86:db:
                    0c:13:28:0b:61:26:22:cc:bb:8b:7a:c3:bd:8a:e6:
                    8e:40:ee:39:9d:d5:40:e6:11:77:a4:6b:d7:35:c3:
                    b6:eb:c1:b5:6d:73:bd:69:67:69:8d:9e:e9:d8:83:
                    63:9c:15:bb:fb:60:0b:c6:65:0f:2b:8c:b9:66:bf:
                    e7:4a:49:ad:8c:f9:8a:2e:69:a1:81:c0:9d:9e:25:
                    a2:c4:02:07:f2:a5:62:90:f8:bf:ac:ee:f1:b8:6d:
                    61:42:f5:7d:3e:56:11:bc:3f:10:a3:77:e2:5c:06:
                    99:7e:9e:3c:a4:d0:db:3d:1a:cd:ca:46:6f:8c:32:
                    87:4e:b9:a6:ee:95:37:34:f0:b4:82:93:5e:c2:ef:
                    90:53:ef:51:14:94:00:89:2f:f9:da:94:db:72:07:
                    19:d1:1d:cb:0b:7c:b9:16:c0:00:a3:4c:90:ac:d7:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4E:7C:B2:58:E0:A2:E4:9C:7A:43:C3:53:AB:34:10:EC:0E:9E:C4
            X509v3 Authority Key Identifier:
                keyid:3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ef:62:2d:e4:ce:99:57:81:fb:6a:db:c7:a0:54:b0:8e:d3:
         52:91:c6:c3:84:7d:51:f1:8c:be:66:7d:41:c1:80:89:03:ee:
         8e:d1:22:91:5c:26:70:1b:f8:d2:bf:42:5b:9a:44:ee:b5:7e:
         cb:1f:b2:59:aa:bd:4c:42:e6:bb:5c:b7:f3:d5:34:04:e8:d6:
         81:53:c1:fc:20:c8:99:ce:63:27:c3:d5:44:ea:c6:e9:59:0c:
         51:13:39:59:2d:4c:a0:d2:0a:29:d2:7d:14:4b:7b:79:ec:f5:
         ee:f1:86:28:8a:c0:f3:8a:b9:e6:7a:a6:be:b4:a9:55:7f:68:
         11:2a:66:4b:cf:05:65:e8:90:c8:d5:f8:bd:35:60:7e:0c:04:
         19:03:59:11:f1:ff:32:e3:a0:80:e1:81:fe:70:b7:13:75:4f:
         cc:9d:75:2e:21:4a:14:68:ea:32:f1:76:2b:42:8b:06:f1:47:
         2b:3d:e0:5e:c4:a9:b1:87:df:f4:2e:87:02:78:86:12:bb:fa:
         d8:83:2a:0f:3e:9c:56:fa:d7:19:21:ff:cc:9f:05:e1:a3:24:
         de:19:13:75:3f:34:d4:d1:3c:2c:a1:7c:b4:cb:18:6e:38:77:
         68:95:85:30:b5:73:25:82:be:9e:a2:49:f4:7a:0f:1a:f7:8e:
         50:8b:a2:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZFpNqz6JHnqXX3Plw45WLpbR/IYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UzMkZCMEVBMTRDNjZEM0FFMDcxREJFMDc2RjUzREND
RjU4RTExRDAeFw0yNDEwMjcyMzAxMDRaFw0yNDEwMjkwMDAyMDRaMDMxMTAvBgNV
BAMTKDBBNEU3Q0IyNThFMEEyRTQ5QzdBNDNDMzUzQUIzNDEwRUMwRTlFQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobQVJ8qTxKfqif+IhXZbJ6Emu
wYaXsJm4B/elXqemlSnPWJQZaH17NzjLJLerJh4wMbGoyNGAIjffimcuQAHkNKEJ
T4IpV51gbsl+YecjU/RVx35DIdOG2wwTKAthJiLMu4t6w72K5o5A7jmd1UDmEXek
a9c1w7brwbVtc71pZ2mNnunYg2OcFbv7YAvGZQ8rjLlmv+dKSa2M+YouaaGBwJ2e
JaLEAgfypWKQ+L+s7vG4bWFC9X0+VhG8PxCjd+JcBpl+njyk0Ns9Gs3KRm+MModO
uabulTc08LSCk17C75BT71EUlACJL/nalNtyBxnRHcsLfLkWwACjTJCs1+AnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCk58sljgouScekPDU6s0EOwOnsQwHwYDVR0j
BBgwFoAUPjL7DqFMZtOuBx2+B29T3M9Y4R0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlppUUdkNnVFM29pYnByeVk1NFNhZ25QaGdwc1dickh5dVh5N3Z3enlC
bXIvMS8zRTMyRkIwRUExNEM2NkQzQUUwNzFEQkUwNzZGNTNEQ0NGNThFMTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMzJGQjBFQTE0QzY2RDNB
RTA3MURCRTA3NkY1M0RDQ0Y1OEUxMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MlppUUdkNnVFM29pYnByeVk1NFNhZ25QaGdwc1dickh5dVh5N3Z3enlCbXIvMS8z
RTMyRkIwRUExNEM2NkQzQUUwNzFEQkUwNzZGNTNEQ0NGNThFMTFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe+9iLeTOmVeB+2rbx6BUsI7TUpHGw4R9UfGMvmZ9QcGAiQPujtEikVwmcBv4
0r9CW5pE7rV+yx+yWaq9TELmu1y389U0BOjWgVPB/CDImc5jJ8PVROrG6VkMURM5
WS1MoNIKKdJ9FEt7eez17vGGKIrA84q55nqmvrSpVX9oESpmS88FZeiQyNX4vTVg
fgwEGQNZEfH/MuOggOGB/nC3E3VPzJ11LiFKFGjqMvF2K0KLBvFHKz3gXsSpsYff
9C6HAniGErv62IMqDz6cVvrXGSH/zJ8F4aMk3hkTdT801NE8LKF8tMsYbjh3aJWF
MLVzJYK+nqJJ9HoPGveOUIuiHw==
-----END CERTIFICATE-----
Generated at Tue Oct 29 14:31:32 2024 by rpki-client on console-ams.rpki-client.org