Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft
File:                     295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft (raw, json)
Hash identifier:          ylDgsb+CcwgAeC93EnGEgwfoaBfDpi//8mzRAlIBO1I=
Subject key identifier:   1A:78:28:FE:F8:81:C0:2B:BF:43:41:5C:9B:FD:28:D8:32:82:1C:E4
Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20
Certificate issuer:       /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
Certificate serial:       77642A585E3486D14B3AB6FE3AFFC6099E719635
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft
Manifest number:          54
Signing time:             Wed 05 Jun 2024 08:22:39 +0000
Manifest this update:     Wed 05 Jun 2024 08:17:39 +0000
Manifest next update:     Thu 06 Jun 2024 11:58:39 +0000
Files and hashes:         1: 323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (hash: Yg+XIfQmBqcJ1Gn7zaDrEs8LKx+WyBzBkR8oQcGtEcA=)
                          2: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl (hash: YS8VeZm02DgRLk+TV/4UNWGQ0CNuwkSJKn6ojFK/wNA=)
                          3: 34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (hash: c/ugvokmJlaV/FJR5qOJhkhNbIPikznS3w+XDbe3kj4=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:64:2a:58:5e:34:86:d1:4b:3a:b6:fe:3a:ff:c6:09:9e:71:96:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
        Validity
            Not Before: Jun  5 08:17:39 2024 GMT
            Not After : Jun  6 11:58:39 2024 GMT
        Subject: CN=1A7828FEF881C02BBF43415C9BFD28D832821CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:60:4d:29:2d:9d:d4:0a:39:55:a5:9a:22:
                    5d:ca:a6:3b:a8:fe:c8:91:8e:ba:8c:5c:f4:f7:1f:
                    e9:be:12:15:f5:f1:33:6a:8b:58:0f:6d:1f:9f:30:
                    01:01:05:02:b4:7a:76:1c:9d:31:fb:c6:6c:f3:da:
                    d9:16:0b:d7:9a:cb:ed:da:40:96:83:f3:c9:30:9f:
                    55:9d:05:52:00:89:dd:9a:d6:b9:ee:68:51:59:d8:
                    70:20:83:1e:c7:63:03:fb:45:f8:56:fb:c8:ab:33:
                    fa:ce:3f:b9:60:94:56:20:bf:9b:2e:31:8f:1c:99:
                    b1:3b:a6:58:71:7a:cc:9e:16:7d:79:8a:4c:54:4a:
                    5e:01:de:74:41:8b:d6:0c:00:ed:f8:67:a7:c8:da:
                    96:a8:06:2f:da:1f:b6:60:eb:32:4c:1d:bb:3d:f5:
                    04:4d:e0:10:75:8b:47:26:2d:09:6d:15:86:da:1e:
                    39:36:7f:9f:df:fb:7b:04:34:ee:0d:5d:8d:f7:9f:
                    a0:29:04:b1:60:c1:3f:e7:cc:aa:33:4a:5b:9f:bf:
                    e3:1c:8c:9d:f1:c9:c3:98:a7:c9:36:b6:a3:27:27:
                    53:8d:4d:21:2f:94:7d:29:ec:1f:12:5d:19:fc:cb:
                    29:3f:49:12:07:c4:ea:72:45:02:6f:40:0b:74:d5:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:78:28:FE:F8:81:C0:2B:BF:43:41:5C:9B:FD:28:D8:32:82:1C:E4
            X509v3 Authority Key Identifier:
                keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:67:7b:9e:75:e2:72:19:d5:d8:c7:6c:50:41:70:47:ba:96:
         82:3c:55:29:51:be:2c:f8:e7:c6:84:5b:19:f6:ec:52:ce:cb:
         99:ad:38:87:5b:1b:d4:0f:23:82:90:3e:f5:04:06:23:52:b7:
         bb:fe:de:08:b6:b0:19:0c:25:a4:48:0b:de:74:c9:46:91:91:
         1d:19:f2:27:c4:6e:36:79:9d:8a:6c:64:fe:06:a2:ac:99:d3:
         23:af:b6:a9:5b:1a:5d:7c:60:ae:95:5b:9e:9b:68:a3:3c:51:
         10:df:6f:63:26:cf:f6:c2:3c:8f:b6:34:80:82:d1:89:5b:70:
         84:f2:17:54:bb:86:14:5f:00:b7:a3:f6:a1:14:cd:09:50:46:
         04:01:3b:ba:74:88:b5:5a:42:9b:f5:fa:90:f3:60:0f:cb:d3:
         06:1c:6f:4c:73:29:49:b0:09:47:39:7e:60:e6:1f:33:35:c1:
         28:e5:18:ca:98:1e:d3:56:e9:df:1d:fe:bb:e0:92:f8:f9:39:
         8c:fd:90:40:14:de:99:8b:1c:c7:f1:84:6c:45:3e:6e:ce:4b:
         0f:c5:5e:71:49:3d:25:89:8c:6c:8e:b8:3c:bc:cb:d1:54:b1:
         61:a0:91:c4:75:95:2c:11:bf:94:38:d2:0a:5f:f4:cc:de:5d:
         1f:e1:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----