Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/9A50767474965B8AC59E304DB2CBB07D10869792.mft
File:                     9A50767474965B8AC59E304DB2CBB07D10869792.mft (raw, json)
Hash identifier:          E/36Ph2dI3il5nnp53aTb3+4eLn5Z3+xVvzCnMKaTdA=
Subject key identifier:   65:78:C6:95:92:04:89:6C:7A:CC:42:CB:D9:21:02:1C:8C:52:24:AA
Authority key identifier: 9A:50:76:74:74:96:5B:8A:C5:9E:30:4D:B2:CB:B0:7D:10:86:97:92
Certificate issuer:       /CN=9A50767474965B8AC59E304DB2CBB07D10869792
Certificate serial:       416AA5217702D7CE38DBE83B6705932F0369D25E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A50767474965B8AC59E304DB2CBB07D10869792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/9A50767474965B8AC59E304DB2CBB07D10869792.mft
Manifest number:          B2
Signing time:             Tue 13 Aug 2024 23:06:07 +0000
Manifest this update:     Tue 13 Aug 2024 23:01:07 +0000
Manifest next update:     Thu 15 Aug 2024 01:32:07 +0000
Files and hashes:         1: 323830343a346130383a3a2f33322d3334203d3e20323637323134.roa (hash: crEbRjzR0ZdrExfANDEN9leTcw9CUzlYmx13uiC7YM0=)
                          2: 9A50767474965B8AC59E304DB2CBB07D10869792.crl (hash: 1kDDwl26nQaVFy1JTwhN+HcnQACZuUDwGj6Bfy7jGCs=)
                          3: 34352e3233302e3136302e302f32322d3234203d3e20323637323134.roa (hash: yIk+0HTw2ANWolZJJD0IOR+lGwTDrYyPFGwhtaNpQQQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6a:a5:21:77:02:d7:ce:38:db:e8:3b:67:05:93:2f:03:69:d2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A50767474965B8AC59E304DB2CBB07D10869792
        Validity
            Not Before: Aug 13 23:01:07 2024 GMT
            Not After : Aug 15 01:32:07 2024 GMT
        Subject: CN=6578C6959204896C7ACC42CBD921021C8C5224AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:20:51:86:58:84:c5:28:dc:33:56:c2:e7:
                    77:64:02:a3:9f:f4:63:d5:3e:9f:f8:c7:3e:29:39:
                    32:f6:74:9f:76:51:20:7d:9e:72:c1:3b:fd:7c:53:
                    84:26:85:b4:e2:53:68:0a:a3:60:f1:0a:14:66:dc:
                    72:bd:b6:04:32:55:19:bd:6c:0e:b4:81:2b:f2:c2:
                    d0:6f:aa:02:15:aa:2e:ca:d1:bd:20:3d:94:41:59:
                    99:ca:99:14:8d:9f:4b:d5:0a:6f:d9:b5:1a:d3:e0:
                    f4:63:b4:dc:4b:48:a1:0a:2d:3e:c6:e2:67:b3:87:
                    04:59:6d:e0:dd:05:79:37:b6:8e:d2:01:c8:e3:fe:
                    dc:4e:55:28:1b:5d:95:bc:47:6b:74:98:bc:37:c7:
                    c1:35:a0:70:72:ca:fa:12:cd:7e:30:ed:3d:ac:2e:
                    89:35:87:3c:d3:89:3e:80:01:42:29:52:d3:6f:a8:
                    ac:86:8d:9b:dc:13:62:c0:ae:3a:b1:69:18:79:0e:
                    5e:b1:a9:6b:9f:d0:7e:b9:31:be:ab:25:24:cf:98:
                    56:f0:88:d3:0a:cc:8f:a6:18:9b:7b:eb:c4:e7:2d:
                    eb:a4:25:b8:20:49:18:ee:52:f3:0b:30:11:80:4d:
                    f7:7b:33:0b:a3:b0:6b:ae:e9:b0:37:ad:08:65:c9:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:78:C6:95:92:04:89:6C:7A:CC:42:CB:D9:21:02:1C:8C:52:24:AA
            X509v3 Authority Key Identifier:
                keyid:9A:50:76:74:74:96:5B:8A:C5:9E:30:4D:B2:CB:B0:7D:10:86:97:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/9A50767474965B8AC59E304DB2CBB07D10869792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A50767474965B8AC59E304DB2CBB07D10869792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/9A50767474965B8AC59E304DB2CBB07D10869792.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:31:b8:b0:14:51:db:77:70:91:29:99:c4:76:2e:b1:a6:4a:
         d4:e8:6e:11:94:93:15:2f:8d:d1:c7:3e:e1:2a:8b:5d:cd:df:
         1d:0e:4e:db:8d:41:fb:65:62:d9:82:c4:32:57:72:c6:76:67:
         b5:a9:57:18:61:31:42:c0:76:a9:08:9b:be:00:df:1d:84:9b:
         4e:37:04:ed:ab:f0:b3:a4:b4:a9:84:6b:36:f6:d0:78:5e:33:
         99:a5:8c:55:35:02:52:fd:fa:6e:bd:01:c6:9c:94:49:6b:05:
         14:0f:b9:13:6b:0f:66:c9:7f:27:a3:f6:dc:ea:60:81:fa:d9:
         7e:15:ca:77:2c:40:22:33:91:31:4b:10:0d:13:36:99:60:47:
         61:3e:07:8a:55:3a:c3:a5:a0:c7:b0:95:eb:79:c2:3a:36:54:
         13:52:ef:b7:da:fc:d3:77:60:63:2d:3c:fa:b3:1b:2c:da:57:
         65:47:76:2d:9d:e2:77:3d:f7:57:ee:98:e4:23:0d:27:e5:b4:
         5a:26:30:9a:25:03:59:42:36:3a:ca:2c:64:1b:8f:18:70:0c:
         79:27:18:82:67:77:e0:ac:8a:ce:c7:9c:05:d7:3a:55:73:8b:
         bf:d0:55:52:a4:3b:3a:7e:e5:af:cd:f7:e8:7e:f6:bc:ed:a1:
         6a:c3:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----