Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.mft
File:                     7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.mft (raw, json)
Hash identifier:          Lm20ScSzM4pKpnvmhMODFYSJFVsRKOsRuVCd1he5C9Y=
Subject key identifier:   8A:35:FF:CF:8B:B7:76:16:DE:FD:2A:6A:08:44:29:3A:44:98:2C:E2
Authority key identifier: 7C:4A:4C:09:FB:CA:8A:29:24:76:25:F2:4E:72:95:E6:AC:20:4F:F4
Certificate issuer:       /CN=7C4A4C09FBCA8A29247625F24E7295E6AC204FF4
Certificate serial:       1086C5EB068DF78B46632339DAFD575AAF8FBF75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.mft
Manifest number:          5D
Signing time:             Tue 11 Jun 2024 13:19:44 +0000
Manifest this update:     Tue 11 Jun 2024 13:14:44 +0000
Manifest next update:     Wed 12 Jun 2024 14:40:44 +0000
Files and hashes:         1: 34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa (hash: fAFRGIQCMZvwSTeXKaVkaZc0rvN9f6g9KGv+tT8f5fs=)
                          2: 323830343a356530383a3a2f33322d3536203d3e20323639303037.roa (hash: cGdDwBPIxYjJo5Re5eF6qD9fMOd689pwRdrMnj4He4g=)
                          3: 7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.crl (hash: /749QPvmh2y/5WaOJ/jph0PDdh4n+HItud4e68rokHQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:86:c5:eb:06:8d:f7:8b:46:63:23:39:da:fd:57:5a:af:8f:bf:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4A4C09FBCA8A29247625F24E7295E6AC204FF4
        Validity
            Not Before: Jun 11 13:14:44 2024 GMT
            Not After : Jun 12 14:40:44 2024 GMT
        Subject: CN=8A35FFCF8BB77616DEFD2A6A0844293A44982CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:2e:63:78:88:ff:05:da:14:af:70:8d:23:
                    4f:1f:3c:a1:65:ac:54:af:4a:49:c6:d7:b4:53:de:
                    7e:9c:32:d1:7b:52:fa:30:de:09:b3:7b:46:3c:20:
                    e7:65:dc:4a:a8:b9:6e:cb:33:a3:20:ea:cd:06:21:
                    4c:e1:e3:1e:4f:92:a4:4c:d3:0a:7a:03:b7:69:b0:
                    c4:a2:fb:08:fb:33:88:98:0b:09:9f:b5:aa:1b:f2:
                    3b:24:1b:07:64:cb:01:b9:26:ac:23:55:09:57:48:
                    7c:73:6d:5d:2e:99:0a:4a:38:80:4b:df:19:98:ee:
                    eb:70:19:df:2f:85:a8:d0:2e:29:cb:54:ee:10:54:
                    dc:dd:cd:de:40:73:8d:96:8a:6d:a4:98:27:95:ff:
                    77:bf:fe:d3:3d:08:8d:29:17:1a:7b:31:f7:a7:59:
                    b9:1b:45:a1:62:86:dd:6d:2d:c8:d6:09:8a:5b:9f:
                    42:06:92:cf:30:12:c1:f4:95:78:36:b1:88:48:d2:
                    6b:0a:3b:90:34:cf:3d:47:3a:26:4d:71:5d:05:eb:
                    8f:9a:b7:24:d7:70:55:37:cd:00:c3:78:04:51:fd:
                    e8:9b:51:5d:7b:1e:e9:11:39:45:68:0e:6c:c3:47:
                    e9:57:5c:6e:64:8c:b4:ab:ac:ee:e7:46:a0:a6:d6:
                    9e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:35:FF:CF:8B:B7:76:16:DE:FD:2A:6A:08:44:29:3A:44:98:2C:E2
            X509v3 Authority Key Identifier:
                keyid:7C:4A:4C:09:FB:CA:8A:29:24:76:25:F2:4E:72:95:E6:AC:20:4F:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:82:a4:26:e4:77:60:8a:1c:f9:09:e7:93:be:77:3a:7f:f4:
         79:58:1b:46:63:27:95:d6:70:0b:39:91:2b:cb:e1:c3:a8:66:
         b9:f3:91:83:26:ce:00:b8:ec:c0:f8:15:ee:00:a9:5b:ea:fc:
         8d:90:69:dc:2c:04:b9:50:70:53:2d:7d:ed:cc:d0:32:c9:c0:
         59:f7:8d:74:f0:76:2c:26:d3:03:92:91:56:2e:8d:45:08:a1:
         ad:44:59:d4:4d:5e:f0:b2:15:23:00:ae:a6:62:ff:2f:ea:82:
         24:88:92:a5:9e:cd:f2:a0:3e:22:c8:d1:22:26:b4:3b:aa:2d:
         a9:cf:b6:10:17:ca:69:c8:86:6a:c4:9b:5a:4d:f3:64:0a:f2:
         f8:ee:8e:40:40:da:f4:09:a5:48:13:ff:27:78:3e:02:09:c2:
         c3:a7:50:36:7e:24:6a:29:a3:ef:24:b0:83:1c:40:f1:c3:7c:
         3d:10:fc:95:e0:c1:7c:10:ec:37:e9:6a:3f:15:ff:cb:32:f6:
         87:aa:86:b9:8a:8e:3d:b1:f7:35:57:31:07:f6:76:fd:7e:8f:
         8f:fe:15:d8:c8:86:62:31:70:32:53:fc:b9:c2:45:02:da:ea:
         69:90:45:4b:b4:f2:ce:79:63:48:b4:92:40:1d:f3:d0:36:69:
         eb:23:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----