Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/3527C81195C988EFF7060EA7D132610EE10C1F91.mft
File:                     3527C81195C988EFF7060EA7D132610EE10C1F91.mft (raw, json)
Hash identifier:          TrBuFyI96axtyOh6NAnfJFwNsCLYzDHvab4e8gGrrlE=
Subject key identifier:   04:23:BC:A1:65:12:FB:76:60:B9:65:02:DB:70:86:26:00:CA:6F:C4
Authority key identifier: 35:27:C8:11:95:C9:88:EF:F7:06:0E:A7:D1:32:61:0E:E1:0C:1F:91
Certificate issuer:       /CN=3527C81195C988EFF7060EA7D132610EE10C1F91
Certificate serial:       2ED3C85982502AFAC6A81429B2C15DB0F1C768F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3527C81195C988EFF7060EA7D132610EE10C1F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/3527C81195C988EFF7060EA7D132610EE10C1F91.mft
Manifest number:          5B
Signing time:             Tue 25 Jun 2024 18:58:59 +0000
Manifest this update:     Tue 25 Jun 2024 18:53:59 +0000
Manifest next update:     Wed 26 Jun 2024 22:18:59 +0000
Files and hashes:         1: 3527C81195C988EFF7060EA7D132610EE10C1F91.crl (hash: qnyZUq+vE8/AR8al3kA8llL9/9qtxnJixbelnuNngzE=)
                          2: 323830343a326538383a3a2f33322d313238203d3e20323635333531.roa (hash: zw3RxZvslsPiOcPEzEt07CJpw+6PDtD1YsUMe4u2VnE=)
                          3: 3136382e3138312e3233362e302f32322d3332203d3e20323635333531.roa (hash: VoDTwwXrStF+VKLtYbv73OcMB9Fn+rmQRdSPvVJ2YBc=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d3:c8:59:82:50:2a:fa:c6:a8:14:29:b2:c1:5d:b0:f1:c7:68:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3527C81195C988EFF7060EA7D132610EE10C1F91
        Validity
            Not Before: Jun 25 18:53:59 2024 GMT
            Not After : Jun 26 22:18:59 2024 GMT
        Subject: CN=0423BCA16512FB7660B96502DB70862600CA6FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:a8:61:54:d4:a7:39:ec:bc:60:78:49:b1:
                    a4:f5:b5:5a:65:65:a1:09:ac:be:e4:76:fd:ed:ed:
                    2d:56:b4:fa:82:5d:65:37:10:3f:4d:18:79:f6:ab:
                    83:68:71:ba:69:10:fe:e2:bb:9f:32:36:bc:61:94:
                    4a:d7:4b:43:70:d6:7d:68:f1:90:db:49:d1:d2:3f:
                    bb:a6:ac:f4:f3:1d:ff:16:18:0c:87:83:5a:fd:76:
                    bc:68:62:03:60:bf:1a:b8:ed:b1:d8:74:9b:72:a8:
                    17:2c:03:f5:99:8f:e6:61:62:2b:7a:5c:2f:83:5d:
                    e0:00:aa:e2:a5:c0:71:27:4c:9e:95:a9:17:9c:cf:
                    09:73:5e:0e:73:89:79:c9:82:46:e9:8f:e0:c6:9e:
                    81:23:6a:13:5e:cc:42:e6:56:37:98:40:aa:98:56:
                    4a:fe:dc:8f:cc:6a:00:21:d8:86:c8:ba:68:12:42:
                    b6:38:38:b5:64:4e:c5:b5:b1:29:a3:15:66:25:b3:
                    3a:de:1e:57:5f:68:35:e7:66:96:9f:cc:71:b9:b8:
                    b5:d1:d6:4b:8c:ba:b7:97:6a:d6:fc:c3:dd:a1:5a:
                    6f:6b:cf:32:57:00:e8:d9:25:48:00:97:6c:a2:ac:
                    3e:3e:9a:ee:e9:58:38:b2:95:f5:ce:c6:47:a6:98:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:23:BC:A1:65:12:FB:76:60:B9:65:02:DB:70:86:26:00:CA:6F:C4
            X509v3 Authority Key Identifier:
                keyid:35:27:C8:11:95:C9:88:EF:F7:06:0E:A7:D1:32:61:0E:E1:0C:1F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/3527C81195C988EFF7060EA7D132610EE10C1F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3527C81195C988EFF7060EA7D132610EE10C1F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/3527C81195C988EFF7060EA7D132610EE10C1F91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:2f:32:3b:dc:cc:43:46:3d:63:2b:1e:cc:ab:50:3d:37:
         21:b8:28:01:4b:3c:1f:02:99:b7:88:a7:28:15:5f:61:23:90:
         66:2c:a9:47:d6:7b:a8:9e:b0:0c:7e:2f:78:01:f3:e9:57:56:
         38:79:0b:c1:92:18:53:e8:8f:c5:c9:73:ec:38:f2:b9:56:eb:
         ec:c0:c6:3c:ef:2b:40:21:e0:9c:c0:22:d2:b7:70:2c:c9:0e:
         c7:11:8a:c5:8b:a5:e3:0f:7f:05:af:1b:92:ed:df:6a:77:fe:
         24:06:8b:75:3d:96:3d:eb:87:0d:76:cc:9d:bf:bb:bb:75:2f:
         1e:eb:66:54:52:d4:f0:40:de:43:9d:d9:bc:f2:ea:4b:1b:2b:
         f9:a8:ca:48:0e:a7:f1:20:36:8a:b3:05:15:8a:bc:8d:b8:56:
         83:62:0d:ef:00:c2:77:ca:b4:ed:51:19:ca:f6:59:14:48:87:
         40:2d:54:8f:0d:27:0b:68:89:06:82:de:30:76:b9:f4:59:92:
         22:a4:c8:00:09:3c:91:d8:d6:ad:b6:75:4a:83:ff:ed:6d:87:
         9e:ce:97:3e:30:c5:2e:fa:71:ea:cc:61:c1:e3:ce:14:cc:10:
         0f:7f:e3:ce:e0:3b:03:72:71:34:c5:16:78:09:63:09:cc:d2:
         25:64:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----