Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/B9E4398A743EA34CEC8FA290BDAF336470A1020E.mft
File:                     B9E4398A743EA34CEC8FA290BDAF336470A1020E.mft (raw, json)
Hash identifier:          LwPKojF9FVcOQOF/eGXdttUy4cXljb9OSRkB39jB9/w=
Subject key identifier:   07:C8:DB:0D:B3:FE:C1:00:6A:55:1F:41:0A:1B:EB:EB:5D:D3:EC:03
Authority key identifier: B9:E4:39:8A:74:3E:A3:4C:EC:8F:A2:90:BD:AF:33:64:70:A1:02:0E
Certificate issuer:       /CN=B9E4398A743EA34CEC8FA290BDAF336470A1020E
Certificate serial:       65901276BD560FF17290EE45BDDFCD58262C0B82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9E4398A743EA34CEC8FA290BDAF336470A1020E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/B9E4398A743EA34CEC8FA290BDAF336470A1020E.mft
Manifest number:          0122
Signing time:             Fri 29 Dec 2023 19:54:54 +0000
Manifest this update:     Fri 29 Dec 2023 19:49:54 +0000
Manifest next update:     Sat 30 Dec 2023 21:44:54 +0000
Files and hashes:         1: 323830343a376332303a3a2f33322d3334203d3e20323731343737.roa (hash: 2hBDVFFARL85aeomOi7aqombAPgTrflXgy8DMYW3y7Y=)
                          2: B9E4398A743EA34CEC8FA290BDAF336470A1020E.crl (hash: KnhC0X+vIFjActM+30h5xOczAHxyMi7T9qdH/6JtNPM=)
                          3: 3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa (hash: uHNEKUQTIY1/mk4l97pW4RESzcE2gm8kt/VcbkNpm4Y=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:90:12:76:bd:56:0f:f1:72:90:ee:45:bd:df:cd:58:26:2c:0b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E4398A743EA34CEC8FA290BDAF336470A1020E
        Validity
            Not Before: Dec 29 19:49:54 2023 GMT
            Not After : Dec 30 21:44:54 2023 GMT
        Subject: CN=07C8DB0DB3FEC1006A551F410A1BEBEB5DD3EC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:6f:c4:98:93:38:48:8b:cf:6d:63:35:fc:
                    6c:6f:f0:c9:74:5a:6d:08:f7:ec:c9:14:59:35:61:
                    41:f1:10:cf:cf:30:50:e0:92:79:33:25:7d:f7:3e:
                    d3:8f:d8:8e:eb:e6:81:84:99:60:6b:1d:6e:65:00:
                    04:19:98:d1:4a:7e:7f:08:1f:20:1d:7f:2e:d8:e8:
                    37:10:63:49:c8:97:85:63:ac:d5:56:10:4f:32:c6:
                    1a:15:6f:a5:84:ea:aa:6d:d6:8e:77:49:7f:48:63:
                    9e:a8:94:99:c1:02:20:e2:c9:b4:98:52:03:fd:9b:
                    7c:d3:65:4e:02:bb:3d:d8:39:e6:cf:d4:fe:03:db:
                    45:6a:53:f8:ca:97:7f:6a:b4:e3:51:0b:ae:12:eb:
                    d6:07:6e:27:98:c3:35:5a:3d:09:9e:c4:66:da:56:
                    84:87:7e:e8:83:5e:7c:0e:13:40:fa:64:c0:a1:11:
                    76:84:37:25:8e:81:26:90:d5:63:05:3a:91:c8:95:
                    07:89:fd:03:93:90:df:7e:76:cd:7f:da:69:18:dd:
                    0c:36:9f:1a:c8:cf:c9:cc:c1:8e:bd:1f:25:4b:0d:
                    7a:d8:51:32:58:a6:4f:5d:d7:d1:1e:be:16:a1:49:
                    d8:9d:21:24:fc:d2:89:63:3a:08:98:1b:2f:59:1c:
                    76:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C8:DB:0D:B3:FE:C1:00:6A:55:1F:41:0A:1B:EB:EB:5D:D3:EC:03
            X509v3 Authority Key Identifier:
                keyid:B9:E4:39:8A:74:3E:A3:4C:EC:8F:A2:90:BD:AF:33:64:70:A1:02:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/B9E4398A743EA34CEC8FA290BDAF336470A1020E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9E4398A743EA34CEC8FA290BDAF336470A1020E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/B9E4398A743EA34CEC8FA290BDAF336470A1020E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:c8:cc:83:5e:0f:4d:fc:a5:8a:3f:78:6c:5d:42:fd:f3:
         79:38:c3:72:a2:7b:55:b8:98:11:ec:bc:e0:3c:48:ed:0d:f7:
         5c:14:60:c1:f6:85:c1:c3:73:aa:7f:86:7e:67:bf:37:a1:81:
         b3:3b:e8:0c:e4:76:53:1c:44:10:e7:95:3e:06:2d:10:3b:02:
         7c:5f:61:13:9d:7e:59:0c:ea:e8:4f:d4:cb:cb:f3:47:1a:50:
         83:d1:7f:a5:22:9c:da:c8:88:79:e4:56:ed:9f:6d:ad:04:b6:
         5e:c6:3d:46:7c:8c:46:87:f5:5b:71:d2:fd:ef:c6:be:85:47:
         3b:84:14:fd:19:d6:2d:c2:2a:45:b9:90:00:7b:be:39:20:d0:
         43:c9:51:6d:cc:95:eb:c2:16:91:21:13:01:b4:09:6f:82:ae:
         29:fc:18:8e:ea:17:2e:99:56:b9:20:f6:82:3d:3f:a7:ca:6d:
         23:ea:37:f2:2f:70:87:60:c2:56:a1:d7:50:74:89:a4:62:db:
         61:48:06:fa:31:e3:df:64:bf:81:32:17:fa:ff:5b:01:70:7e:
         d8:7f:e3:1c:ac:6c:04:b3:52:7e:34:ca:66:90:6c:31:e9:0f:
         a1:f1:f1:99:b0:fc:e9:fa:6b:fc:27:56:91:6a:25:d8:19:53:
         fa:33:9b:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZZASdr1WD/FykO5Fvd/NWCYsC4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlFNDM5OEE3NDNFQTM0Q0VDOEZBMjkwQkRBRjMzNjQ3
MEExMDIwRTAeFw0yMzEyMjkxOTQ5NTRaFw0yMzEyMzAyMTQ0NTRaMDMxMTAvBgNV
BAMTKDA3QzhEQjBEQjNGRUMxMDA2QTU1MUY0MTBBMUJFQkVCNUREM0VDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUn2/EmJM4SIvPbWM1/Gxv8Ml0
Wm0I9+zJFFk1YUHxEM/PMFDgknkzJX33PtOP2I7r5oGEmWBrHW5lAAQZmNFKfn8I
HyAdfy7Y6DcQY0nIl4VjrNVWEE8yxhoVb6WE6qpt1o53SX9IY56olJnBAiDiybSY
UgP9m3zTZU4Cuz3YOebP1P4D20VqU/jKl39qtONRC64S69YHbieYwzVaPQmexGba
VoSHfuiDXnwOE0D6ZMChEXaENyWOgSaQ1WMFOpHIlQeJ/QOTkN9+ds1/2mkY3Qw2
nxrIz8nMwY69HyVLDXrYUTJYpk9d19EevhahSdidIST80oljOgiYGy9ZHHZpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUB8jbDbP+wQBqVR9BChvr613T7AMwHwYDVR0j
BBgwFoAUueQ5inQ+o0zsj6KQva8zZHChAg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdXSmZXZ0d3QzY2M2JlNVBBV1pkRUo4dG43S3kyN3BtTFg0NFNIMUtR
UVYvMC9COUU0Mzk4QTc0M0VBMzRDRUM4RkEyOTBCREFGMzM2NDcwQTEwMjBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5RTQzOThBNzQzRUEzNENF
QzhGQTI5MEJEQUYzMzY0NzBBMTAyMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODdXSmZXZ0d3QzY2M2JlNVBBV1pkRUo4dG43S3kyN3BtTFg0NFNIMUtRUVYvMC9C
OUU0Mzk4QTc0M0VBMzRDRUM4RkEyOTBCREFGMzM2NDcwQTEwMjBFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf97IzINeD038pYo/eGxdQv3zeTjDcqJ7VbiYEey84DxI7Q33XBRgwfaFwcNz
qn+Gfme/N6GBszvoDOR2UxxEEOeVPgYtEDsCfF9hE51+WQzq6E/Uy8vzRxpQg9F/
pSKc2siIeeRW7Z9trQS2XsY9RnyMRof1W3HS/e/GvoVHO4QU/RnWLcIqRbmQAHu+
OSDQQ8lRbcyV68IWkSETAbQJb4KuKfwYjuoXLplWuSD2gj0/p8ptI+o38i9wh2DC
VqHXUHSJpGLbYUgG+jHj32S/gTIX+v9bAXB+2H/jHKxsBLNSfjTKZpBsMekPofHx
mbD86fpr/CdWkWol2BlT+jOb5Q==
-----END CERTIFICATE-----