Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.mft
File:                     8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.mft (raw, json)
Hash identifier:          l63w3wgsqnf73ygb5EUdnwqihTyf7xTvUADY8YXn044=
Subject key identifier:   19:5D:68:4F:2D:F3:57:A1:63:F0:5D:33:6B:C6:48:DC:EE:3B:66:30
Authority key identifier: 80:06:B3:3C:CA:A0:FE:17:1A:BB:82:4C:41:3C:4D:E8:4E:66:DA:A7
Certificate issuer:       /CN=8006B33CCAA0FE171ABB824C413C4DE84E66DAA7
Certificate serial:       666F0680190556C632C4FC63C28CAC111C6BA0EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.mft
Manifest number:          38
Signing time:             Fri 23 Aug 2024 13:09:12 +0000
Manifest this update:     Fri 23 Aug 2024 13:04:12 +0000
Manifest next update:     Sat 24 Aug 2024 14:56:12 +0000
Files and hashes:         1: 8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.crl (hash: otMcH86J7QRY+0G/jpnpejVfvqzszsUT814+5v+qM+s=)
                          2: 323830343a313138343a3a2f33322d3438203d3e203631383935.roa (hash: qx5mGj7AYKuhsjdnSUHSngXDFadvKY+M9L49/OSPiBk=)
                          3: 3137372e39312e31362e302f32302d3234203d3e203631383935.roa (hash: agAZunivxuD5AJsh7cqkjuytPS9pe5HoWi1rO1O87Mk=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6f:06:80:19:05:56:c6:32:c4:fc:63:c2:8c:ac:11:1c:6b:a0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8006B33CCAA0FE171ABB824C413C4DE84E66DAA7
        Validity
            Not Before: Aug 23 13:04:12 2024 GMT
            Not After : Aug 24 14:56:12 2024 GMT
        Subject: CN=195D684F2DF357A163F05D336BC648DCEE3B6630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:29:1f:6a:e9:b0:a5:63:c3:e0:ad:a2:71:
                    ea:d6:03:b2:c0:0a:75:94:72:04:a0:a7:dd:65:15:
                    ce:7e:25:67:5e:41:4e:d3:f2:e8:fa:bc:7e:4a:ac:
                    8c:c1:92:79:bb:95:de:38:39:e9:b9:9d:08:13:eb:
                    54:6b:87:26:8b:4d:c7:c8:63:1c:9d:9b:3e:2d:c5:
                    c6:2f:22:e1:eb:dd:2b:2d:e9:77:f5:66:6d:ac:49:
                    7a:db:6f:20:9f:1e:ae:cf:4b:c1:c7:5a:08:8e:d6:
                    87:ab:a0:ef:b3:a7:8b:a4:b6:78:fb:9f:15:a6:54:
                    e9:76:47:ed:7c:51:bc:e0:4c:5e:76:67:52:3b:f5:
                    02:89:d8:72:81:57:90:33:c4:c0:28:ae:31:f3:a0:
                    b1:cb:dd:6c:b5:62:2c:e2:54:e2:df:89:90:56:a5:
                    ed:5c:4f:66:22:3b:ed:c8:fa:50:65:51:82:0b:02:
                    90:d9:bd:c7:bc:59:c6:98:9f:58:f1:f2:88:78:0a:
                    9a:a3:4c:e5:39:17:91:61:be:cb:16:7b:83:52:b8:
                    57:a1:95:90:43:21:5a:ce:73:bc:02:a6:bc:cb:55:
                    57:35:eb:06:9d:f3:bd:b2:f0:a6:2c:ac:33:00:09:
                    68:24:fb:4e:a8:02:a5:73:15:03:9b:91:31:cb:4d:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5D:68:4F:2D:F3:57:A1:63:F0:5D:33:6B:C6:48:DC:EE:3B:66:30
            X509v3 Authority Key Identifier:
                keyid:80:06:B3:3C:CA:A0:FE:17:1A:BB:82:4C:41:3C:4D:E8:4E:66:DA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/8006B33CCAA0FE171ABB824C413C4DE84E66DAA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:cb:bf:51:8c:e6:fa:54:8f:3d:2b:05:74:4f:78:2b:c6:
         d9:13:22:81:31:70:f5:5a:e4:aa:43:d6:e9:ae:47:0f:95:f4:
         a0:b7:3b:7d:39:92:22:30:c4:58:ec:ab:c1:7c:4c:6a:bd:50:
         5f:4c:96:7c:c8:f9:7b:62:e3:55:6f:1f:00:2f:48:95:bc:b5:
         4c:0a:b2:18:e7:a5:76:c5:55:df:5b:99:bb:9c:3f:bc:7c:23:
         81:1d:8a:29:93:ee:f7:1c:21:5f:bd:05:07:05:57:64:9a:33:
         3f:61:05:3d:3a:1b:f7:61:8c:23:ea:6a:53:aa:fa:6c:25:dc:
         66:30:83:3c:ae:45:b8:f2:92:79:00:af:31:a7:fb:98:e8:6e:
         c0:46:a7:88:76:84:58:5d:7f:94:29:cf:c9:c2:7a:cc:63:a5:
         84:c2:52:18:0a:28:84:a9:16:c1:76:3c:fe:53:82:db:fc:24:
         fd:68:4a:b5:53:d4:64:34:a6:bd:fe:7b:8b:35:7e:db:05:04:
         55:27:61:9d:08:38:6e:3e:88:e4:16:53:e2:58:7f:1a:d8:60:
         db:4f:33:2c:a5:b8:91:e4:f8:3d:c7:08:eb:f3:38:dc:e7:af:
         71:30:f8:c4:3d:ef:7f:09:62:4e:f2:b7:36:71:83:17:70:4c:
         d0:ef:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----