Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/2/925B8F8224E56C52328DBA2BF6E15ED609A821E4.mft
File:                     925B8F8224E56C52328DBA2BF6E15ED609A821E4.mft (raw, json)
Hash identifier:          OydUdFkZJm8lIQiidzSgbAjJjrvJikRbGKrCkYBjaeg=
Subject key identifier:   51:87:8C:49:6E:7E:CE:51:8F:07:69:C2:91:81:32:94:D7:27:62:FA
Authority key identifier: 92:5B:8F:82:24:E5:6C:52:32:8D:BA:2B:F6:E1:5E:D6:09:A8:21:E4
Certificate issuer:       /CN=925B8F8224E56C52328DBA2BF6E15ED609A821E4
Certificate serial:       1617423346E3BD0AB260F5BCFEB54C3D5AAFC11B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B8F8224E56C52328DBA2BF6E15ED609A821E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/2/925B8F8224E56C52328DBA2BF6E15ED609A821E4.mft
Manifest number:          5D
Signing time:             Tue 11 Jun 2024 15:45:15 +0000
Manifest this update:     Tue 11 Jun 2024 15:40:15 +0000
Manifest next update:     Wed 12 Jun 2024 16:16:15 +0000
Files and hashes:         1: 3137392e3130382e32342e302f32312d3234203d3e20323633323637.roa (hash: GUc6F8FAkoVYnvOCA2h4N8+G2wqzh7WHAm//vUMKVQA=)
                          2: 925B8F8224E56C52328DBA2BF6E15ED609A821E4.crl (hash: GhZlWfak0MTVEmPQIoAing+MhTKIr//B2WOoq58mTbE=)
                          3: 323830343a313631383a3a2f33322d3536203d3e20323633323637.roa (hash: xac0fOTBvjYEBR7ITZHpLKHIeEwVQERMXKqpCgAHJGM=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:17:42:33:46:e3:bd:0a:b2:60:f5:bc:fe:b5:4c:3d:5a:af:c1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925B8F8224E56C52328DBA2BF6E15ED609A821E4
        Validity
            Not Before: Jun 11 15:40:15 2024 GMT
            Not After : Jun 12 16:16:15 2024 GMT
        Subject: CN=51878C496E7ECE518F0769C291813294D72762FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:67:3a:46:83:bf:17:94:2d:e9:2d:28:f7:
                    ab:98:36:ec:7e:5a:e8:29:ac:f7:5b:63:50:10:e8:
                    3b:bf:d8:b7:a1:b9:58:95:97:e9:c3:0b:27:0d:80:
                    4d:0a:d4:94:d9:f9:4d:76:a5:45:00:bb:80:77:b2:
                    aa:43:24:98:05:73:85:96:f6:6e:e5:55:3f:20:71:
                    84:5e:9f:0e:27:3b:a8:fc:32:77:d5:87:85:a3:d8:
                    a0:f8:d7:b3:05:33:50:d4:18:1e:2d:2c:c3:07:d7:
                    e2:49:cc:87:40:a8:a9:dc:1c:62:3c:72:29:e5:89:
                    97:aa:35:b3:79:53:94:b3:e4:36:7f:1c:59:4e:7b:
                    eb:20:ef:17:ff:17:94:ab:5a:93:93:e2:d3:ef:56:
                    a2:72:06:5a:fb:29:30:4a:79:e2:ba:45:66:3f:b3:
                    35:6f:a0:10:72:bb:15:a5:0b:18:d0:32:84:9a:ee:
                    56:1a:9d:62:3f:b2:a4:62:6e:f1:ce:42:3d:16:58:
                    00:0e:57:2a:d4:b3:a4:e4:02:13:9f:55:db:d8:13:
                    c5:52:1b:0d:6f:92:56:1c:3c:86:6b:42:0c:f4:cc:
                    9e:07:a1:03:9c:6f:0e:5d:97:d0:c9:75:c1:4a:c0:
                    51:5d:07:25:16:e7:98:d5:d3:94:fa:e9:ec:95:a0:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:87:8C:49:6E:7E:CE:51:8F:07:69:C2:91:81:32:94:D7:27:62:FA
            X509v3 Authority Key Identifier:
                keyid:92:5B:8F:82:24:E5:6C:52:32:8D:BA:2B:F6:E1:5E:D6:09:A8:21:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/2/925B8F8224E56C52328DBA2BF6E15ED609A821E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B8F8224E56C52328DBA2BF6E15ED609A821E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/2/925B8F8224E56C52328DBA2BF6E15ED609A821E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:10:12:f3:14:e4:c8:46:ff:14:b4:13:12:6d:5d:dd:f1:
         8c:b1:3e:8d:b8:6e:a8:42:8b:65:21:2e:bb:b5:87:69:9f:96:
         21:42:ab:fb:7b:ba:12:f7:80:33:04:5d:0d:d8:5d:98:b0:75:
         60:16:73:8f:fa:f0:7d:48:f3:25:10:02:7e:af:38:2b:82:ca:
         08:96:db:26:d0:19:ee:df:e2:1b:6f:32:99:58:e8:c0:a7:20:
         ad:ea:c1:e9:7a:61:0c:85:58:5f:25:08:af:f1:7a:c5:b1:00:
         4a:ab:ac:29:22:3d:6b:ab:31:54:31:fb:7f:cc:9d:03:3f:30:
         bf:d3:37:17:66:5e:73:cf:fa:9c:c6:e9:f4:33:1b:d9:7b:12:
         10:e2:15:44:8f:65:fd:6d:f3:dd:8e:6c:34:8d:fa:42:b8:4c:
         19:1a:3e:ef:49:af:e3:ad:be:b3:06:f6:87:39:99:64:e9:15:
         8d:73:e7:f1:6a:d7:22:4d:e8:da:85:10:14:9c:b7:b7:38:30:
         b6:b5:31:90:47:f1:21:ed:50:5f:d3:7c:e2:0c:4d:cb:ca:20:
         29:0a:b4:03:56:57:45:29:a1:8f:bc:9d:6e:61:3f:a9:d4:f5:
         17:0c:a6:f8:96:f1:96:2d:e6:1d:15:ba:a2:51:c9:8e:e7:11:
         42:2e:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----