Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/C9806DFCD282E64362277DA77EA3B9A9606ABAF0.mft
File:                     C9806DFCD282E64362277DA77EA3B9A9606ABAF0.mft (raw, json)
Hash identifier:          8kLDrnMkPHsDZHPclpHsvT9ERwuJ92H/uve3Erh/mzQ=
Subject key identifier:   4A:FD:4B:AE:73:93:8C:7B:5A:FD:EC:93:5D:DB:42:E4:52:FB:FC:AF
Authority key identifier: C9:80:6D:FC:D2:82:E6:43:62:27:7D:A7:7E:A3:B9:A9:60:6A:BA:F0
Certificate issuer:       /CN=C9806DFCD282E64362277DA77EA3B9A9606ABAF0
Certificate serial:       77E5835D9F829766F141F4102A48A5AA13A56EED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9806DFCD282E64362277DA77EA3B9A9606ABAF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/C9806DFCD282E64362277DA77EA3B9A9606ABAF0.mft
Manifest number:          79
Signing time:             Sat 10 Aug 2024 12:13:43 +0000
Manifest this update:     Sat 10 Aug 2024 12:08:43 +0000
Manifest next update:     Sun 11 Aug 2024 16:06:43 +0000
Files and hashes:         1: 3133312e37322e35322e302f32322d3332203d3e20323733343734.roa (hash: WGKjD7JChB8o8LoxrC9wy5ZZFPMMdMrisZ84+em8Dfc=)
                          2: C9806DFCD282E64362277DA77EA3B9A9606ABAF0.crl (hash: FY5T/r3jFIB/RmpC9BJCit12glk0cxLeNgME6HCghXA=)
                          3: 323830343a386633303a3a2f33322d313238203d3e20323733343734.roa (hash: KvASYfBz2Cca1c2IMgrPy9E5ALUhe5UrkohsavRYm0U=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e5:83:5d:9f:82:97:66:f1:41:f4:10:2a:48:a5:aa:13:a5:6e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9806DFCD282E64362277DA77EA3B9A9606ABAF0
        Validity
            Not Before: Aug 10 12:08:43 2024 GMT
            Not After : Aug 11 16:06:43 2024 GMT
        Subject: CN=4AFD4BAE73938C7B5AFDEC935DDB42E452FBFCAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:41:55:20:a8:2a:25:8e:4e:f0:b9:55:89:
                    b6:6a:94:1f:48:2b:9a:f0:e7:18:f8:b2:0c:20:aa:
                    53:05:3e:78:19:cc:aa:a2:74:98:20:b5:1c:1d:01:
                    8c:3a:af:fe:7e:a5:bf:c1:95:20:2d:79:f7:66:a2:
                    b1:34:8f:09:af:2a:24:d8:17:e2:45:fa:46:b5:da:
                    4c:6a:e1:29:e9:6a:b5:17:cf:03:ca:53:e8:9b:2e:
                    91:dc:70:c8:21:32:66:cb:2c:81:24:32:4a:d7:b7:
                    c8:9a:f7:6e:b5:b4:47:1e:2f:2d:23:d4:4d:6b:b3:
                    d7:a8:d3:2b:80:e7:d0:f6:61:aa:53:38:db:94:86:
                    89:3d:ec:dc:0b:c4:06:ec:d3:94:9c:6c:15:c7:87:
                    86:00:06:a3:17:b5:29:fa:5e:a7:ac:6a:3c:7e:82:
                    ea:bb:7b:f6:ba:e5:5e:9c:25:77:09:b4:9a:d8:09:
                    2a:f5:cf:4e:71:3b:86:b8:ce:42:60:84:50:4f:00:
                    f3:59:1e:e5:7b:ac:f0:39:83:d7:4f:83:d6:ae:4f:
                    ef:82:06:8a:06:7d:28:46:45:ad:f1:09:1f:52:1e:
                    8b:4c:68:9e:09:0f:ef:f8:6e:e6:71:c6:16:69:de:
                    85:0f:d3:c9:75:02:79:f0:bd:17:36:a1:06:20:96:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FD:4B:AE:73:93:8C:7B:5A:FD:EC:93:5D:DB:42:E4:52:FB:FC:AF
            X509v3 Authority Key Identifier:
                keyid:C9:80:6D:FC:D2:82:E6:43:62:27:7D:A7:7E:A3:B9:A9:60:6A:BA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/C9806DFCD282E64362277DA77EA3B9A9606ABAF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9806DFCD282E64362277DA77EA3B9A9606ABAF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/C9806DFCD282E64362277DA77EA3B9A9606ABAF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c6:ea:fb:a0:dd:cb:e4:60:17:9e:86:a8:f7:a0:d5:37:cb:
         35:3c:78:0a:cc:1e:c1:3c:5c:f7:cb:4b:5b:e5:7a:cf:88:81:
         99:2a:5b:21:33:25:c6:d9:c0:80:5b:be:49:6a:a1:d6:3d:76:
         89:ec:59:05:48:57:48:08:73:02:3e:49:6c:be:39:8e:b5:a0:
         40:ac:93:d4:42:9d:c8:37:b7:1c:d3:39:b8:e6:ac:e6:1f:bd:
         1f:48:83:89:86:f2:72:17:52:97:b6:3a:f1:0e:e6:cd:fb:6f:
         26:00:0a:d4:fa:fc:89:82:dc:f2:44:a4:c1:78:bb:68:bc:ec:
         e4:14:cc:b4:76:1d:1d:55:e1:8d:ec:e7:cc:ff:bf:b3:78:b8:
         af:89:6a:58:09:f4:06:ea:a5:ed:bc:6f:09:ec:60:f2:f2:c3:
         5c:a7:32:e3:29:c7:ed:8d:d6:1a:09:6e:13:3d:4c:40:0a:22:
         c0:6e:4f:55:db:35:84:fb:d0:08:5a:9b:87:57:db:4e:44:ac:
         db:d4:0a:92:9c:6f:5d:be:60:88:90:89:5c:39:76:0a:0f:a4:
         50:4f:24:65:9a:17:62:cf:5e:93:f9:71:79:d5:33:bc:4a:67:
         4e:51:e5:07:22:97:05:5c:ba:a4:63:ea:02:ec:b9:fd:18:54:
         eb:d8:c3:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd+WDXZ+Cl2bxQfQQKkilqhOlbu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk4MDZERkNEMjgyRTY0MzYyMjc3REE3N0VBM0I5QTk2
MDZBQkFGMDAeFw0yNDA4MTAxMjA4NDNaFw0yNDA4MTExNjA2NDNaMDMxMTAvBgNV
BAMTKDRBRkQ0QkFFNzM5MzhDN0I1QUZERUM5MzVEREI0MkU0NTJGQkZDQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsEFVIKgqJY5O8LlVibZqlB9I
K5rw5xj4sgwgqlMFPngZzKqidJggtRwdAYw6r/5+pb/BlSAtefdmorE0jwmvKiTY
F+JF+ka12kxq4SnparUXzwPKU+ibLpHccMghMmbLLIEkMkrXt8ia9261tEceLy0j
1E1rs9eo0yuA59D2YapTONuUhok97NwLxAbs05ScbBXHh4YABqMXtSn6Xqesajx+
guq7e/a65V6cJXcJtJrYCSr1z05xO4a4zkJghFBPAPNZHuV7rPA5g9dPg9auT++C
BooGfShGRa3xCR9SHotMaJ4JD+/4buZxxhZp3oUP08l1AnnwvRc2oQYglqULAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSv1LrnOTjHta/eyTXdtC5FL7/K8wHwYDVR0j
BBgwFoAUyYBt/NKC5kNiJ32nfqO5qWBquvAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmtiWVlMZ3FXR2oxOUZwMXVnNWZBS2pCYXk5OWRHVDZxTnlRMlV0M3h1
akMvMC9DOTgwNkRGQ0QyODJFNjQzNjIyNzdEQTc3RUEzQjlBOTYwNkFCQUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5ODA2REZDRDI4MkU2NDM2
MjI3N0RBNzdFQTNCOUE5NjA2QUJBRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NmtiWVlMZ3FXR2oxOUZwMXVnNWZBS2pCYXk5OWRHVDZxTnlRMlV0M3h1akMvMC9D
OTgwNkRGQ0QyODJFNjQzNjIyNzdEQTc3RUEzQjlBOTYwNkFCQUYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqMbq+6Ddy+RgF56GqPeg1TfLNTx4CswewTxc98tLW+V6z4iBmSpbITMlxtnA
gFu+SWqh1j12iexZBUhXSAhzAj5JbL45jrWgQKyT1EKdyDe3HNM5uOas5h+9H0iD
iYbychdSl7Y68Q7mzftvJgAK1Pr8iYLc8kSkwXi7aLzs5BTMtHYdHVXhjeznzP+/
s3i4r4lqWAn0Buql7bxvCexg8vLDXKcy4ynH7Y3WGgluEz1MQAoiwG5PVds1hPvQ
CFqbh1fbTkSs29QKkpxvXb5giJCJXDl2Cg+kUE8kZZoXYs9ek/lxedUzvEpnTlHl
ByKXBVy6pGPqAuy5/RhU69jDhA==
-----END CERTIFICATE-----