Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/4417B3EA45310F3C91C9F7E679B64B99325E5386.mft
File:                     4417B3EA45310F3C91C9F7E679B64B99325E5386.mft (raw, json)
Hash identifier:          229HRW9kNCN6UFjmbJOTODIF967Oj2A9sruUJXuFmpQ=
Subject key identifier:   CF:71:4F:D9:C4:67:90:B3:32:0C:35:C6:9D:8A:73:0F:06:21:D1:B2
Authority key identifier: 44:17:B3:EA:45:31:0F:3C:91:C9:F7:E6:79:B6:4B:99:32:5E:53:86
Certificate issuer:       /CN=4417B3EA45310F3C91C9F7E679B64B99325E5386
Certificate serial:       48F25BCDBE4C29CBE45496518E0897998B789BC7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4417B3EA45310F3C91C9F7E679B64B99325E5386.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/4417B3EA45310F3C91C9F7E679B64B99325E5386.mft
Manifest number:          07
Signing time:             Mon 24 Jun 2024 20:59:08 +0000
Manifest this update:     Mon 24 Jun 2024 20:54:08 +0000
Manifest next update:     Tue 25 Jun 2024 22:02:08 +0000
Files and hashes:         1: 4417B3EA45310F3C91C9F7E679B64B99325E5386.crl (hash: k56nDv3hZjJGUTGTmg/tJ9Xl7lIMAe1JyxflPj0B8ls=)
                          2: 323830343a376363343a3a2f33322d313238203d3e20323731353137.roa (hash: XwhIVawGzXS9RAk6tQTo6KuSEWH5yOS5dEzDpJ8bvGM=)
                          3: 3138312e3233322e3232342e302f32322d3332203d3e20323731353137.roa (hash: orWL9prbY4y4P/PC+AY9X4awMOt5j29rFUM599/XvrQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f2:5b:cd:be:4c:29:cb:e4:54:96:51:8e:08:97:99:8b:78:9b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4417B3EA45310F3C91C9F7E679B64B99325E5386
        Validity
            Not Before: Jun 24 20:54:08 2024 GMT
            Not After : Jun 25 22:02:08 2024 GMT
        Subject: CN=CF714FD9C46790B3320C35C69D8A730F0621D1B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:60:9e:d5:f1:85:2a:65:09:e1:d5:f1:45:
                    02:63:8a:39:14:49:3c:c7:20:c9:63:09:38:7d:77:
                    83:48:aa:ae:f8:e4:57:c9:13:7f:57:54:18:dc:a7:
                    21:16:a3:cd:ba:96:f0:0d:38:df:a1:2b:de:4a:43:
                    3c:cc:a1:38:85:4b:ec:a1:ac:41:9b:fc:34:7b:31:
                    5f:80:18:aa:9f:d3:fd:8d:7d:6a:d4:8a:c7:80:6c:
                    e5:9d:50:ec:0c:80:9c:24:ec:fe:23:03:1e:1d:bb:
                    54:d9:ba:69:54:35:5d:5d:0b:d9:7d:9d:54:30:cd:
                    1b:8c:26:5b:7e:c7:37:5b:00:73:68:a6:13:41:4a:
                    3d:7d:8b:02:d4:65:eb:b6:49:44:84:fd:e4:d6:af:
                    49:29:49:ed:fe:04:79:13:b9:fe:b5:4b:78:ae:1a:
                    8b:0d:0b:cb:be:fb:8c:46:61:a1:ec:51:c2:84:24:
                    ac:f7:5c:10:ab:04:82:64:53:14:61:87:25:f9:bd:
                    dc:22:02:6d:89:e2:21:42:74:fd:0e:61:28:2d:17:
                    f0:8d:39:72:6c:1f:fb:87:de:28:bf:ba:c9:d4:3d:
                    39:d8:88:2b:63:f0:f0:85:0c:f0:e0:0a:76:c7:a0:
                    f2:a1:e8:61:ae:fc:e1:0a:f9:35:d6:4f:ca:7e:a5:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:4F:D9:C4:67:90:B3:32:0C:35:C6:9D:8A:73:0F:06:21:D1:B2
            X509v3 Authority Key Identifier:
                keyid:44:17:B3:EA:45:31:0F:3C:91:C9:F7:E6:79:B6:4B:99:32:5E:53:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/4417B3EA45310F3C91C9F7E679B64B99325E5386.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4417B3EA45310F3C91C9F7E679B64B99325E5386.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/4417B3EA45310F3C91C9F7E679B64B99325E5386.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:39:7c:89:04:b9:9b:81:c4:e8:a6:8a:a6:e1:5e:e7:fe:dc:
         9c:82:d3:a9:97:60:7b:d4:23:9a:12:94:d2:67:2d:3e:b0:78:
         05:f2:81:ef:89:9f:ea:c0:7a:f3:0b:b5:b6:d2:a5:d9:b0:f2:
         e1:c9:f5:e4:63:ff:73:27:1a:67:7b:49:fe:03:45:87:d0:6d:
         44:5a:9d:be:34:af:be:ee:06:54:e7:fe:23:75:ae:95:91:16:
         89:3b:b9:99:90:07:23:d3:9e:5a:65:6b:94:6a:19:8c:cd:20:
         c6:f0:e0:11:3c:fe:32:a1:2c:4e:09:88:57:9e:fc:01:b2:60:
         69:08:6a:47:a9:ba:37:9e:e1:ce:ea:06:f9:eb:75:92:87:cf:
         72:fc:bd:08:76:c3:3f:07:06:80:de:61:48:ca:aa:c9:f2:ae:
         a6:50:bc:36:ee:5c:df:30:e9:9b:02:67:f5:9a:f7:c5:4f:43:
         4a:a2:21:57:aa:a1:50:b1:32:fc:4a:33:5c:16:bc:6c:59:e8:
         a3:c2:51:da:28:ff:02:42:62:c8:b1:31:b1:31:94:53:0a:aa:
         cb:53:73:6b:57:c1:02:14:82:fe:f9:f3:3b:1a:b5:fa:8e:41:
         11:40:dc:67:4f:2c:40:3a:b1:f8:69:d8:cb:42:74:10:06:a1:
         a9:ca:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----