Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/D0C52D0E299830DE070523F88C9F14FF2DAB2F25.mft
File:                     D0C52D0E299830DE070523F88C9F14FF2DAB2F25.mft (raw, json)
Hash identifier:          UXnhjnccJBvdH5HPfaQIKzJyjeCGqWgPM8xRVnyv0ek=
Subject key identifier:   AB:E3:45:55:29:8A:3C:F9:6F:41:5A:65:03:55:B7:2B:18:31:94:F8
Authority key identifier: D0:C5:2D:0E:29:98:30:DE:07:05:23:F8:8C:9F:14:FF:2D:AB:2F:25
Certificate issuer:       /CN=D0C52D0E299830DE070523F88C9F14FF2DAB2F25
Certificate serial:       4C5FD14A569C43575535E9427E8190B47B929139
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C52D0E299830DE070523F88C9F14FF2DAB2F25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/D0C52D0E299830DE070523F88C9F14FF2DAB2F25.mft
Manifest number:          19
Signing time:             Sat 24 Aug 2024 21:27:28 +0000
Manifest this update:     Sat 24 Aug 2024 21:22:28 +0000
Manifest next update:     Mon 26 Aug 2024 00:24:28 +0000
Files and hashes:         1: 323830343a356637383a3a2f33322d313238203d3e20323639313032.roa (hash: Lia6f8vsQOFM97igbm///Maz5ZIlOB2n/eqb5f3RbAo=)
                          2: 34352e3137382e3233362e302f32322d3232203d3e20323639313032.roa (hash: CHUK+fBnIwuoL8vICSPMYAMuTNuWT+MtWVqpUDuVeMo=)
                          3: D0C52D0E299830DE070523F88C9F14FF2DAB2F25.crl (hash: q1zw8kUb8QfWvnERn/gQurviPRoH6jJdI5vd2KfPooI=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5f:d1:4a:56:9c:43:57:55:35:e9:42:7e:81:90:b4:7b:92:91:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C52D0E299830DE070523F88C9F14FF2DAB2F25
        Validity
            Not Before: Aug 24 21:22:28 2024 GMT
            Not After : Aug 26 00:24:28 2024 GMT
        Subject: CN=ABE34555298A3CF96F415A650355B72B183194F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f5:12:99:1a:90:a9:dd:11:c9:92:9f:fc:b3:
                    5f:79:13:d4:aa:2f:4d:23:cd:44:d5:85:2c:87:f3:
                    dd:a8:b6:6c:2c:f4:99:53:66:1e:8a:ba:e5:f6:40:
                    e7:03:c1:23:d9:75:73:d1:37:88:83:3d:88:ee:2e:
                    fa:d4:a0:9f:04:ee:55:8e:fa:36:a6:db:13:85:a6:
                    fd:0b:2d:77:c4:96:1e:cc:96:70:85:79:d1:a6:21:
                    49:29:36:30:19:9c:bc:c7:61:26:d6:41:84:38:12:
                    b0:43:98:f2:a4:8d:67:a3:a9:b9:ef:b0:e8:a8:25:
                    1c:b1:4d:b4:05:79:61:66:6b:7b:53:44:d4:36:9b:
                    47:f1:3d:f9:fa:50:3a:bd:c6:66:fc:36:b6:89:11:
                    6e:ea:36:e2:8f:8e:fa:a1:62:50:1c:4c:d1:d8:70:
                    cf:7a:ac:c5:88:82:58:2f:c6:cf:06:e8:86:fa:d8:
                    d0:40:71:ac:fd:d6:09:1b:67:08:56:a7:bb:12:b9:
                    f2:77:33:28:f4:17:6d:d2:5d:a4:ab:4b:67:91:a9:
                    17:bb:aa:e4:64:2c:62:7a:bc:fe:7e:0a:5e:e6:03:
                    03:11:ad:11:e9:4e:2b:f9:2c:ee:08:4b:2a:eb:ee:
                    6e:90:76:2e:ad:75:b0:c8:0f:ab:43:95:00:b6:24:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E3:45:55:29:8A:3C:F9:6F:41:5A:65:03:55:B7:2B:18:31:94:F8
            X509v3 Authority Key Identifier:
                keyid:D0:C5:2D:0E:29:98:30:DE:07:05:23:F8:8C:9F:14:FF:2D:AB:2F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/D0C52D0E299830DE070523F88C9F14FF2DAB2F25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C52D0E299830DE070523F88C9F14FF2DAB2F25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/D0C52D0E299830DE070523F88C9F14FF2DAB2F25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:4e:20:10:00:fd:c8:a0:59:9d:14:df:0f:47:5c:8e:95:
         45:8f:bd:f4:ef:9d:3c:0a:3c:98:ca:cc:c2:9a:9c:f1:29:ce:
         c5:8a:56:15:b5:b4:f8:eb:44:77:a3:dd:da:ea:36:df:2d:09:
         3e:6d:63:59:ea:c4:3a:c7:95:ff:0a:2d:4d:eb:68:15:14:23:
         b3:aa:02:a6:68:93:c6:6c:b0:b8:76:fa:5e:f5:70:48:f0:0b:
         89:4b:4d:6b:45:9d:a1:67:71:ac:06:50:af:05:e2:1c:24:48:
         f3:fd:4b:75:05:16:c1:3d:bf:10:26:e0:58:d3:b4:29:45:29:
         6b:6c:4f:d3:31:22:a5:ad:52:3c:60:52:28:e2:11:58:dd:c4:
         21:6a:7a:95:73:9e:b7:b5:a2:a6:94:b2:06:fd:8f:fc:4e:5b:
         4f:b4:78:3b:f5:98:03:f7:85:ed:38:5e:f1:63:cd:03:36:29:
         6d:b2:ad:1b:32:6c:be:20:5e:08:9e:c1:69:70:69:1f:66:15:
         85:7f:38:53:ae:4f:79:a9:d8:79:eb:ef:32:9a:65:0b:82:7e:
         31:6b:b0:54:f3:d5:38:82:44:ea:65:3e:23:72:dc:c6:43:de:
         c8:26:57:f8:14:cd:24:49:b3:d3:84:6b:f7:fc:2b:16:8d:2a:
         16:63:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----