Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/02C1FCEBCA7B0671324D050E969C07430540ECA7.mft
File:                     02C1FCEBCA7B0671324D050E969C07430540ECA7.mft (raw, json)
Hash identifier:          YgPd74eTeuT5Z9vCgrQAGTV9XemaxOQqWRbjC03r3oY=
Subject key identifier:   87:4E:26:83:4D:8D:33:88:1E:11:BF:94:05:AA:9F:4A:D5:6C:5A:31
Authority key identifier: 02:C1:FC:EB:CA:7B:06:71:32:4D:05:0E:96:9C:07:43:05:40:EC:A7
Certificate issuer:       /CN=02C1FCEBCA7B0671324D050E969C07430540ECA7
Certificate serial:       3EB81DB016C1C75BF225BCF304C09EC2A9D13D9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02C1FCEBCA7B0671324D050E969C07430540ECA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/02C1FCEBCA7B0671324D050E969C07430540ECA7.mft
Manifest number:          59
Signing time:             Mon 28 Oct 2024 07:46:03 +0000
Manifest this update:     Mon 28 Oct 2024 07:41:03 +0000
Manifest next update:     Tue 29 Oct 2024 10:36:03 +0000
Files and hashes:         1: 02C1FCEBCA7B0671324D050E969C07430540ECA7.crl (hash: MMuaFiDDZzcv0wD3NGLxTqw0XQpaN1ByeJIEV/U8cCs=)
                          2: 323830343a333031343a3a2f33322d313238203d3e20323634393239.roa (hash: UpUN7ScU9MrYdKjd3R3FFaI7Z7BPoKD8iNGrsQJjtHE=)
                          3: 3136382e3232382e3231362e302f32322d3332203d3e20323634393239.roa (hash: L2TUvW/D0I/U9e/bI4topcS0y2I0kfa7VEd0UF/Bgws=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b8:1d:b0:16:c1:c7:5b:f2:25:bc:f3:04:c0:9e:c2:a9:d1:3d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02C1FCEBCA7B0671324D050E969C07430540ECA7
        Validity
            Not Before: Oct 28 07:41:03 2024 GMT
            Not After : Oct 29 10:36:03 2024 GMT
        Subject: CN=874E26834D8D33881E11BF9405AA9F4AD56C5A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:0a:86:c8:96:b7:5d:75:6d:7b:e7:a2:99:
                    96:fd:29:17:ea:fe:4c:c9:d4:f0:28:86:cd:3e:f2:
                    bb:00:2d:3a:de:25:60:28:65:74:54:9d:95:9a:85:
                    ce:04:d2:9c:46:ae:4f:57:af:63:2b:69:11:ea:d6:
                    7e:1f:fa:fe:06:ab:fd:a9:ee:63:1e:8a:99:56:69:
                    3c:fa:56:c7:44:1e:59:64:42:51:35:7e:d9:01:12:
                    fa:a0:20:b5:3a:6a:a7:ae:7e:b9:32:50:fa:3a:9d:
                    f4:fb:e3:af:d1:24:f0:40:e1:88:14:f0:62:54:ca:
                    a7:b8:bc:42:46:ea:88:26:57:fe:72:a9:7a:c6:fa:
                    95:2e:aa:98:2a:18:e8:27:0f:8e:0f:e7:b7:95:1f:
                    d8:6f:c5:21:fc:23:69:f1:99:69:b2:3c:77:66:b5:
                    d0:03:dd:99:d0:ac:5e:7a:2c:94:ac:63:af:cb:e4:
                    e8:46:c5:5c:44:bd:9a:3c:19:15:d0:6f:fb:69:8a:
                    f5:a2:05:bf:82:e4:54:69:f7:9a:b8:5d:97:65:9c:
                    f5:41:ff:76:82:54:25:82:7a:9a:f2:45:75:32:e9:
                    48:07:a2:7b:23:b1:7d:13:f4:d0:21:15:98:25:17:
                    66:5a:40:07:1d:f7:9b:56:70:2b:16:20:e4:43:25:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4E:26:83:4D:8D:33:88:1E:11:BF:94:05:AA:9F:4A:D5:6C:5A:31
            X509v3 Authority Key Identifier:
                keyid:02:C1:FC:EB:CA:7B:06:71:32:4D:05:0E:96:9C:07:43:05:40:EC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/02C1FCEBCA7B0671324D050E969C07430540ECA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02C1FCEBCA7B0671324D050E969C07430540ECA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/02C1FCEBCA7B0671324D050E969C07430540ECA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d4:b6:9b:f0:de:8b:c1:4e:04:84:c2:59:0b:c7:9d:40:d0:
         26:0c:d1:3c:9d:3e:de:4c:dd:3f:bf:17:58:cb:39:9f:3d:4f:
         e6:4e:ba:f2:a0:29:23:af:b9:d4:90:d9:0e:72:4b:cc:41:55:
         12:18:ba:cb:26:23:fa:c0:f2:c5:08:b2:49:87:42:4b:9d:23:
         94:da:05:3c:c9:54:7e:c0:ad:64:99:75:af:5c:28:3b:65:42:
         df:61:44:29:41:55:ae:a9:8f:b5:0d:b7:f0:4a:97:c3:15:91:
         87:28:d8:8a:f1:0e:d3:11:5d:de:dc:87:a6:56:86:15:8e:23:
         b9:0d:ce:30:4b:3d:18:ab:df:eb:5a:b3:4e:a0:42:a9:c0:0e:
         72:e1:ff:94:32:ec:c6:f4:b4:00:3d:c1:3e:d4:65:9d:eb:ea:
         21:f8:54:64:e9:ba:1d:77:ad:38:88:0a:86:2d:aa:3f:82:c9:
         fc:10:aa:18:59:fd:a2:36:dd:84:43:2b:58:d3:ea:1b:77:2f:
         45:4c:06:93:7b:0b:7e:9a:9c:36:d8:67:59:a4:4b:6b:3b:63:
         ae:b0:de:28:13:44:65:8f:8d:ab:05:11:0b:4e:4b:86:de:db:
         2f:5b:08:f8:a3:21:72:59:36:51:35:d3:2c:1b:0e:45:ca:da:
         6c:3a:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----