Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.mft
File:                     17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.mft (raw, json)
Hash identifier:          PGKRRMC/XWdH5ICBXqmPRjevlBAIaO/ZpFOqIb5SA8Y=
Subject key identifier:   F7:6F:1D:7D:99:1B:9B:02:6C:2B:0E:FD:E1:77:25:2B:57:E9:C0:28
Authority key identifier: 17:AA:C2:C7:68:11:E8:BF:20:B2:E3:55:DA:EC:5D:CB:34:01:F7:80
Certificate issuer:       /CN=17AAC2C76811E8BF20B2E355DAEC5DCB3401F780
Certificate serial:       5F6979CFD5186E4837E09B8130D428A0941DA105
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.mft
Manifest number:          1A
Signing time:             Tue 16 Jan 2024 07:55:20 +0000
Manifest this update:     Tue 16 Jan 2024 07:50:20 +0000
Manifest next update:     Wed 17 Jan 2024 10:11:20 +0000
Files and hashes:         1: 3230302e35332e342e302f32322d3332203d3e20323730323633.roa (hash: uySSbpIMpHbQj7A9DrwV644TFkvh5BosFX9uyXWrfso=)
                          2: 323830343a363935343a3a2f33322d313238203d3e20323730323633.roa (hash: ipgyLAIKeYfhLIkvmh08v6G9T59IZRosXdxdl/3gJvs=)
                          3: 17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.crl (hash: An3+Gw1F2Av6KvmVPmMS5WmZFQzMKrhEbqAPg0kE3qg=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:69:79:cf:d5:18:6e:48:37:e0:9b:81:30:d4:28:a0:94:1d:a1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17AAC2C76811E8BF20B2E355DAEC5DCB3401F780
        Validity
            Not Before: Jan 16 07:50:20 2024 GMT
            Not After : Jan 17 10:11:20 2024 GMT
        Subject: CN=F76F1D7D991B9B026C2B0EFDE177252B57E9C028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:0e:6e:04:bb:5d:3a:e5:a4:47:8b:10:65:
                    82:8d:77:93:67:54:45:3a:c6:db:ca:c7:cf:3b:5e:
                    b8:29:df:d9:1a:15:72:14:c2:e0:25:1b:d7:b2:4a:
                    6e:1d:e0:4e:28:2e:fa:4b:4b:cd:1b:b1:5a:c7:51:
                    93:aa:6f:5e:1a:e1:2a:20:db:51:83:49:d9:c4:87:
                    6f:5f:cf:5c:42:60:bf:70:d7:f3:1c:f7:5e:fc:ff:
                    f1:c5:ce:c9:c9:e4:0b:77:27:fc:bb:b5:22:8e:01:
                    5e:4f:83:12:e3:bc:a6:a2:a2:8e:4c:13:d6:58:de:
                    3d:cf:a3:b0:f6:af:28:05:a0:06:db:91:29:80:1e:
                    74:4a:3e:6f:39:6b:43:c6:a9:7f:6d:23:2f:ce:67:
                    77:65:c2:58:db:e5:58:e8:28:32:39:14:57:ca:be:
                    b1:80:b5:71:45:d7:83:fc:28:fd:d5:73:b3:cc:22:
                    10:1b:c7:9c:83:53:3a:2b:6e:a7:82:42:72:8e:34:
                    5c:e3:0e:c4:9c:7f:ac:c5:9d:82:de:da:0f:8e:15:
                    dc:bb:1c:0c:e4:c7:b9:fb:21:ae:06:fe:d7:79:fe:
                    26:8d:8c:22:1a:6c:12:5b:c5:b1:b4:d2:24:36:dd:
                    78:d7:d6:3d:cb:0d:a9:bb:22:4c:3a:58:13:56:45:
                    93:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:1D:7D:99:1B:9B:02:6C:2B:0E:FD:E1:77:25:2B:57:E9:C0:28
            X509v3 Authority Key Identifier:
                keyid:17:AA:C2:C7:68:11:E8:BF:20:B2:E3:55:DA:EC:5D:CB:34:01:F7:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:fd:52:3d:e8:57:ff:8c:07:c0:8f:ed:ee:1e:b3:0d:0e:
         a1:fd:a9:0a:e5:95:42:45:dc:98:3a:33:a4:9b:a6:1a:e4:f3:
         44:48:b6:79:15:04:b5:dc:a9:1f:ad:06:86:c2:29:b9:f4:41:
         ae:83:ff:30:58:86:12:48:78:b8:d3:19:d8:93:47:d2:ea:b7:
         c5:99:12:24:bb:48:0d:76:91:b7:be:2f:19:05:f2:70:ee:0a:
         cb:16:aa:f9:f2:6d:bb:3e:51:51:0d:f8:8f:14:b1:5a:c5:0c:
         5c:9f:96:57:75:f8:17:b9:03:46:52:dd:f5:3f:00:38:24:7a:
         9c:ec:4f:e2:09:ae:30:59:07:d7:81:82:78:e2:99:73:12:af:
         b0:2f:2a:2f:58:7f:35:c7:e2:a2:f0:0f:21:0b:46:fc:1c:7f:
         ae:6d:e3:af:2a:31:30:cf:c6:b4:58:73:ce:bd:9e:61:ed:50:
         6c:7a:5f:a5:1b:36:7d:d2:a0:38:e9:61:1d:50:7f:a3:25:bc:
         1f:22:43:59:bd:d5:50:ac:9a:3e:8f:2f:b3:79:32:61:e8:9d:
         82:0e:cf:29:1f:85:ba:0a:d8:5a:5f:b2:a0:ea:09:a1:fe:10:
         fd:71:2f:5d:d5:02:08:1d:f1:de:eb:e9:21:23:c3:42:d0:64:
         76:22:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----