Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft
File:                     DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft (raw, json)
Hash identifier:          d9pK3d6w0wauGPscZdkOFu4kwLILJNBTpTfVI56rB7o=
Subject key identifier:   79:59:F9:7A:23:BA:2C:15:E3:F8:F7:79:33:B7:D5:1F:2C:BD:6D:0E
Authority key identifier: DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5
Certificate issuer:       /CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
Certificate serial:       406EF38F3F91BA1F93D67BD92FB7EEB4F475286F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft
Manifest number:          E8
Signing time:             Fri 27 Sep 2024 15:04:44 +0000
Manifest this update:     Fri 27 Sep 2024 14:59:44 +0000
Manifest next update:     Sat 28 Sep 2024 17:52:44 +0000
Files and hashes:         1: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: BRIX8CHGyFlfH9JtWXjqQIN3WWPiPdHeuKYX+FUzxak=)
                          2: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: iEzqNd19l3t5Wdk3u/dZl3HqoY74l8/stdODsp3vEk4=)
                          3: 3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa (hash: 2SgcxUBlY8iXxm+1OmtjeikUXEcxemZ4FlXZUn+AV3Y=)
                          4: 3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa (hash: 38nKtQ/8mjsA5rvZn/sn9r72T0pgmqFFGmAe/dew88o=)
                          5: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: Hqjs/PbFSDkxrybRCxZeEVTtm2o+USDMcS3p7EQ5D5w=)
                          6: 3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa (hash: a7yY2V06TQfCGjqsfLquqpljtY7Kox1ZNuldpZEhSys=)
                          7: 3133322e3235352e3137382e302f32342d3234203d3e203533303438.roa (hash: UrdPQLoa0TxMXLjMzh8CwFjpvtKMiVPhO6Co2Vh7lmQ=)
                          8: DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl (hash: CJ1NapTGAtBIG/AdknTglnh79ObcXHpgzZmWb8KNu5g=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6e:f3:8f:3f:91:ba:1f:93:d6:7b:d9:2f:b7:ee:b4:f4:75:28:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
        Validity
            Not Before: Sep 27 14:59:44 2024 GMT
            Not After : Sep 28 17:52:44 2024 GMT
        Subject: CN=7959F97A23BA2C15E3F8F77933B7D51F2CBD6D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:fb:43:79:3e:ff:3c:e3:6f:f2:20:d1:14:
                    84:44:d4:32:da:92:8b:c8:2f:09:cd:79:d6:94:43:
                    c4:cf:cd:cf:01:bf:f7:c7:a1:9e:03:01:fc:ce:7a:
                    7a:d0:d0:5d:fc:5a:0f:5b:62:fd:46:ff:25:04:ea:
                    66:a7:75:05:88:ac:a9:16:13:57:9f:7e:b9:01:0b:
                    6e:be:6c:50:9b:79:27:4a:ff:b0:ec:b2:f7:33:a3:
                    8a:e3:84:a9:9e:04:ad:be:2f:5e:8d:3e:48:b8:24:
                    aa:3e:67:0e:44:20:61:d8:89:35:98:45:a3:d7:e0:
                    08:0b:65:63:42:9d:6e:3e:c1:12:67:da:65:0f:33:
                    8d:07:a0:ce:25:48:36:cd:19:16:3c:e8:4e:17:10:
                    55:c8:ef:7c:ef:2a:93:64:80:32:f2:11:8e:7c:6d:
                    73:b6:8e:8c:d9:77:80:8e:f5:82:48:18:79:be:63:
                    f9:39:92:61:e1:d5:18:ce:7b:05:40:df:df:8b:05:
                    2a:2e:17:02:41:81:ee:35:2b:22:4a:2c:28:4f:ea:
                    fb:23:43:c0:b4:7b:2d:04:de:e8:b5:a4:b1:ff:f2:
                    58:ac:00:cb:31:a5:d1:5b:4d:03:82:c0:74:f4:d3:
                    71:2b:67:4e:80:66:e2:92:e2:62:a0:c6:5a:91:6e:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:F9:7A:23:BA:2C:15:E3:F8:F7:79:33:B7:D5:1F:2C:BD:6D:0E
            X509v3 Authority Key Identifier:
                keyid:DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:20:8e:7a:ab:0c:00:54:37:2d:eb:d5:14:67:69:60:8b:08:
         e1:fd:8f:8e:81:d9:58:5f:85:da:ba:c0:e5:eb:3b:b0:ec:94:
         bc:af:b1:f3:d6:27:d2:e5:d2:8e:f4:9f:a2:02:e6:1f:9c:89:
         58:3a:a5:b8:01:6f:55:c4:d8:62:27:77:3b:35:56:17:63:82:
         71:cc:3b:3d:3e:a0:e5:b5:86:20:bc:20:8b:2c:df:44:5e:eb:
         d1:b5:59:77:72:f1:cd:53:37:46:99:f3:97:f2:47:a7:b1:4d:
         69:2d:78:6e:25:51:0b:d1:ba:f6:14:22:53:e2:7f:21:e8:36:
         aa:17:82:1e:95:5d:01:3c:e3:e4:a7:b1:58:46:2c:4c:ba:9b:
         53:20:51:6e:0c:d1:c5:79:1f:bd:f5:2a:9c:1d:71:9b:b3:36:
         5b:f2:b6:34:55:6c:07:70:68:c8:fa:9b:ad:a5:bc:1b:e5:fc:
         47:54:c6:aa:00:17:74:70:3b:f7:85:f1:27:19:76:02:81:d3:
         a2:b4:3f:b7:e7:fa:ae:0a:e1:5c:3b:9e:a1:de:b3:c3:8f:2c:
         9b:e3:a9:e4:ec:c3:f5:52:02:83:06:fd:b9:ab:39:49:19:a8:
         b1:9b:e2:b2:68:d9:e8:7f:50:46:b9:d1:54:84:81:fd:54:0d:
         4a:cb:f6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----