Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5sA4ukuPhb6pKPNMdniWpmbXfL2hSa65K3kF7MhcDfXL/1/7485A8735254825AA7C0284910695CEFB9003CC0.mft
File:                     7485A8735254825AA7C0284910695CEFB9003CC0.mft (raw, json)
Hash identifier:          B5xZTAfRf0kQ+CbB5hJnbR70kLIvY4DCdSoKPPDZmBE=
Subject key identifier:   7F:33:35:C3:04:F7:34:88:A9:BF:2E:84:94:1C:04:4C:95:FD:4B:DF
Authority key identifier: 74:85:A8:73:52:54:82:5A:A7:C0:28:49:10:69:5C:EF:B9:00:3C:C0
Certificate issuer:       /CN=7485A8735254825AA7C0284910695CEFB9003CC0
Certificate serial:       410263451562FE87C158485159C422CC463FD674
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7485A8735254825AA7C0284910695CEFB9003CC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sA4ukuPhb6pKPNMdniWpmbXfL2hSa65K3kF7MhcDfXL/1/7485A8735254825AA7C0284910695CEFB9003CC0.mft
Manifest number:          B0
Signing time:             Mon 29 Jul 2024 11:40:00 +0000
Manifest this update:     Mon 29 Jul 2024 11:35:00 +0000
Manifest next update:     Tue 30 Jul 2024 11:40:00 +0000
Files and hashes:         1: 7485A8735254825AA7C0284910695CEFB9003CC0.crl (hash: m5OStR26uGKxFeYc9e23KKqWkELFFPcpmiz24yRnX74=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:02:63:45:15:62:fe:87:c1:58:48:51:59:c4:22:cc:46:3f:d6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7485A8735254825AA7C0284910695CEFB9003CC0
        Validity
            Not Before: Jul 29 11:35:00 2024 GMT
            Not After : Aug  5 11:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:fc:ef:f3:07:9c:f3:04:01:0b:3e:53:f8:
                    3a:49:59:9b:a1:1b:8f:5e:48:a9:c2:46:03:1a:eb:
                    19:34:fb:ba:d1:c0:06:05:e8:fa:f0:b8:79:c7:3f:
                    1b:86:f8:70:1f:8d:22:46:e8:16:d8:a9:9c:fe:93:
                    78:a5:1e:35:d9:4c:38:41:3b:bf:e6:e3:94:bc:ec:
                    57:c5:22:26:f0:d2:95:0c:8c:c1:06:f8:24:c4:dd:
                    a3:6f:44:ea:68:c3:80:93:f0:71:ab:88:b3:d4:46:
                    ff:9d:6e:17:99:6f:08:cc:fa:9c:43:14:f2:16:c7:
                    d1:d3:02:0f:7b:fe:57:50:f8:dc:17:59:aa:24:67:
                    9c:95:d2:62:9b:f8:07:f1:ae:a3:e9:00:f3:19:c1:
                    87:18:e4:df:84:b7:4d:d5:19:63:0c:48:7c:46:ff:
                    0d:69:78:da:f1:17:b7:02:df:fc:38:e6:9a:fb:4d:
                    71:4b:89:5b:96:64:7c:65:08:47:52:03:a3:8c:8e:
                    df:cd:0b:49:b2:1d:d5:41:a3:79:8c:27:7e:f8:57:
                    2c:42:59:d9:16:e3:5c:fc:e6:c1:fc:7b:cc:20:5c:
                    a1:4e:8d:14:5c:ee:98:3f:49:8e:6d:bc:1a:78:39:
                    4e:55:e8:a3:7e:67:9d:0d:41:07:f9:f5:ac:40:e4:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:33:35:C3:04:F7:34:88:A9:BF:2E:84:94:1C:04:4C:95:FD:4B:DF
            X509v3 Authority Key Identifier:
                keyid:74:85:A8:73:52:54:82:5A:A7:C0:28:49:10:69:5C:EF:B9:00:3C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sA4ukuPhb6pKPNMdniWpmbXfL2hSa65K3kF7MhcDfXL/1/7485A8735254825AA7C0284910695CEFB9003CC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7485A8735254825AA7C0284910695CEFB9003CC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sA4ukuPhb6pKPNMdniWpmbXfL2hSa65K3kF7MhcDfXL/1/7485A8735254825AA7C0284910695CEFB9003CC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:62:50:9b:4d:44:78:06:ab:4c:11:a4:78:5a:9e:ba:bb:9e:
         0c:49:c3:20:60:36:b8:af:14:46:08:02:60:24:94:00:2e:c7:
         37:e2:7b:85:79:a5:ac:b8:fa:27:03:fb:70:a9:50:4d:04:7b:
         32:55:28:89:08:f3:ab:98:44:db:4c:3b:70:fd:15:d3:46:67:
         16:5f:90:ea:0d:94:51:76:0b:b2:47:27:ad:ae:f0:9c:17:39:
         72:29:bb:a9:b1:8e:f6:71:a4:e4:d1:e1:40:e8:76:50:d5:cf:
         1f:75:9f:ff:8c:5f:66:13:1e:06:4c:d0:9e:d8:dd:e6:ab:3f:
         2c:f9:c7:fb:a3:6b:f0:6d:7e:91:7d:0d:86:ae:8f:3e:19:e5:
         a5:90:68:e4:9c:99:a0:fc:82:8b:bd:aa:83:d0:44:61:02:c8:
         9f:cb:c9:95:b5:e7:d9:e4:78:50:c8:f5:fc:dc:6d:32:a4:9e:
         87:12:fe:46:70:ad:5e:d7:ab:ab:c4:d4:6f:8b:70:9f:32:6a:
         5a:4b:99:8f:80:65:0b:47:9b:d3:68:25:0c:cd:66:70:0c:ab:
         73:10:58:75:cd:67:66:58:0d:da:82:5a:d4:53:70:c3:11:87:
         e9:f2:14:c0:cd:b3:36:ee:fc:25:8e:88:cd:c6:2e:87:f9:f1:
         d8:7f:5f:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----