Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/41907EF2CAB72E8388013A0B12581010B6DF52B3.mft
File:                     41907EF2CAB72E8388013A0B12581010B6DF52B3.mft (raw, json)
Hash identifier:          kfAR2q90lDQxMG7N0hcStGqMoCSllyyZN8CIE3dLsBw=
Subject key identifier:   53:F2:F3:CC:16:1D:37:B3:FF:B5:D6:1F:34:8E:2F:F3:F9:E5:D1:6E
Authority key identifier: 41:90:7E:F2:CA:B7:2E:83:88:01:3A:0B:12:58:10:10:B6:DF:52:B3
Certificate issuer:       /CN=41907EF2CAB72E8388013A0B12581010B6DF52B3
Certificate serial:       12EF9561A05851150264BC122E0912E26BB09501
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41907EF2CAB72E8388013A0B12581010B6DF52B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/41907EF2CAB72E8388013A0B12581010B6DF52B3.mft
Manifest number:          97
Signing time:             Thu 17 Oct 2024 03:27:29 +0000
Manifest this update:     Thu 17 Oct 2024 03:22:29 +0000
Manifest next update:     Fri 18 Oct 2024 03:51:29 +0000
Files and hashes:         1: 41907EF2CAB72E8388013A0B12581010B6DF52B3.crl (hash: /c/xCJngOaA0a1Q5M2dYuK0pCYTmPInkk7jtz8DnJX8=)
                          2: 3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (hash: kNT+MlVD2kTA3inx91Aw6JwWkI908V9Y1t9BqShyy7Y=)
                          3: 323830343a373337303a3a2f33322d313238203d3e20323730393135.roa (hash: kUTHcbBbEJT4rZ5cJDt8K/jKJ3xyDG2HiFB57IIKebg=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ef:95:61:a0:58:51:15:02:64:bc:12:2e:09:12:e2:6b:b0:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41907EF2CAB72E8388013A0B12581010B6DF52B3
        Validity
            Not Before: Oct 17 03:22:29 2024 GMT
            Not After : Oct 18 03:51:29 2024 GMT
        Subject: CN=53F2F3CC161D37B3FFB5D61F348E2FF3F9E5D16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fc:dd:9c:a1:89:9f:ac:55:04:19:bc:bd:8f:
                    6a:0f:99:91:db:18:bd:ba:58:f0:df:3d:7d:fb:9b:
                    7d:60:57:74:62:2a:75:6d:d5:98:e2:e4:91:5c:3e:
                    b4:13:41:d1:54:25:fd:0f:60:77:83:11:81:41:c4:
                    e5:3c:f2:ae:af:93:b1:fe:28:2c:6f:cf:95:ad:cf:
                    00:2a:61:18:69:3c:48:ac:f0:44:96:65:3b:64:fb:
                    b9:b4:07:46:9e:60:c3:39:41:eb:49:ce:2e:e2:93:
                    00:d2:5c:a8:ed:79:10:37:ef:3d:15:e5:98:46:af:
                    0e:e4:fe:01:3c:0a:8f:85:2e:ea:5a:51:64:a2:d4:
                    22:15:ab:d5:3d:18:4c:34:7c:14:a2:f8:e5:b6:3f:
                    1c:2c:2a:82:be:2b:bc:ec:6d:4c:67:0b:cc:94:ea:
                    0b:b4:72:37:b9:54:39:d9:94:df:ce:d7:c4:ae:8b:
                    98:7e:16:b6:f5:34:a1:ec:7d:50:d0:32:76:44:28:
                    c6:96:e2:ec:2a:90:9b:0a:82:2c:23:a0:bc:67:0c:
                    3b:93:fd:63:c0:b9:42:72:e9:f4:c7:cc:d9:86:c8:
                    5e:95:7f:40:20:b5:d2:d6:e6:a3:79:c6:5a:b0:7a:
                    d6:f5:6a:77:25:87:b6:5e:2e:ca:7f:29:57:3d:86:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:F3:CC:16:1D:37:B3:FF:B5:D6:1F:34:8E:2F:F3:F9:E5:D1:6E
            X509v3 Authority Key Identifier:
                keyid:41:90:7E:F2:CA:B7:2E:83:88:01:3A:0B:12:58:10:10:B6:DF:52:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/41907EF2CAB72E8388013A0B12581010B6DF52B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41907EF2CAB72E8388013A0B12581010B6DF52B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/41907EF2CAB72E8388013A0B12581010B6DF52B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:a3:d3:a6:1e:30:4d:36:8b:0d:a6:9f:3f:6b:5e:17:b6:
         a5:93:ed:07:1c:13:d4:6c:09:2b:cf:04:d5:bf:ac:d2:03:35:
         58:bf:07:75:ca:1e:6b:49:35:07:a5:1e:27:4f:e6:d9:bf:c5:
         e9:de:bd:0e:66:8b:39:01:72:25:75:06:1b:20:12:59:65:e9:
         d5:40:8e:a1:d4:87:48:46:88:55:d7:ec:f1:3a:b0:b8:ee:bd:
         13:65:0f:4d:be:3e:b9:c9:a2:25:49:03:3d:62:7e:44:10:5c:
         13:b4:62:5e:1b:9a:a6:ee:af:13:c8:06:7b:94:c1:39:b7:ff:
         ed:53:88:05:e6:7f:2a:e1:8e:f0:37:81:35:76:27:ee:dc:81:
         9d:34:92:55:8f:2f:99:a9:7d:1f:3d:78:0e:98:65:0d:ef:d6:
         24:4a:11:45:9d:49:bf:fe:a5:21:d2:9f:f6:18:08:b1:65:02:
         e8:cb:38:3d:75:27:c5:1c:e7:47:b6:08:56:ed:c5:57:89:6a:
         32:26:93:98:4b:fe:3d:35:e2:62:b8:cf:29:20:89:4d:6f:71:
         5e:99:77:4c:e3:51:5b:b1:b1:c0:66:dc:58:4f:64:45:e2:0f:
         a8:01:16:3f:9e:da:61:30:f4:71:a2:7d:57:04:2c:75:ae:fa:
         42:d8:82:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEu+VYaBYURUCZLwSLgkS4muwlQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE5MDdFRjJDQUI3MkU4Mzg4MDEzQTBCMTI1ODEwMTBC
NkRGNTJCMzAeFw0yNDEwMTcwMzIyMjlaFw0yNDEwMTgwMzUxMjlaMDMxMTAvBgNV
BAMTKDUzRjJGM0NDMTYxRDM3QjNGRkI1RDYxRjM0OEUyRkYzRjlFNUQxNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/N2coYmfrFUEGby9j2oPmZHb
GL26WPDfPX37m31gV3RiKnVt1Zji5JFcPrQTQdFUJf0PYHeDEYFBxOU88q6vk7H+
KCxvz5WtzwAqYRhpPEis8ESWZTtk+7m0B0aeYMM5QetJzi7ikwDSXKjteRA37z0V
5ZhGrw7k/gE8Co+FLupaUWSi1CIVq9U9GEw0fBSi+OW2PxwsKoK+K7zsbUxnC8yU
6gu0cje5VDnZlN/O18Sui5h+Frb1NKHsfVDQMnZEKMaW4uwqkJsKgiwjoLxnDDuT
/WPAuUJy6fTHzNmGyF6Vf0AgtdLW5qN5xlqwetb1anclh7ZeLsp/KVc9htmtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUU/LzzBYdN7P/tdYfNI4v8/nl0W4wHwYDVR0j
BBgwFoAUQZB+8sq3LoOIAToLElgQELbfUrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVdCUFBNMW9tRU00SGYzRlpUeThMWEJkQTZRZ0xmcVBkcDVlWDNxOERX
a1UvMC80MTkwN0VGMkNBQjcyRTgzODgwMTNBMEIxMjU4MTAxMEI2REY1MkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxOTA3RUYyQ0FCNzJFODM4
ODAxM0EwQjEyNTgxMDEwQjZERjUyQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVdCUFBNMW9tRU00SGYzRlpUeThMWEJkQTZRZ0xmcVBkcDVlWDNxOERXa1UvMC80
MTkwN0VGMkNBQjcyRTgzODgwMTNBMEIxMjU4MTAxMEI2REY1MkIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANLmj06YeME02iw2mnz9rXhe2pZPtBxwT1GwJK88E1b+s0gM1WL8Hdcoea0k1
B6UeJ0/m2b/F6d69DmaLOQFyJXUGGyASWWXp1UCOodSHSEaIVdfs8TqwuO69E2UP
Tb4+ucmiJUkDPWJ+RBBcE7RiXhuapu6vE8gGe5TBObf/7VOIBeZ/KuGO8DeBNXYn
7tyBnTSSVY8vmal9Hz14DphlDe/WJEoRRZ1Jv/6lIdKf9hgIsWUC6Ms4PXUnxRzn
R7YIVu3FV4lqMiaTmEv+PTXiYrjPKSCJTW9xXpl3TONRW7GxwGbcWE9kReIPqAEW
P57aYTD0caJ9VwQsda76QtiCfg==
-----END CERTIFICATE-----