Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/D9E853F23912A999E8A8BB82B4CF91C9593F0717.mft
File:                     D9E853F23912A999E8A8BB82B4CF91C9593F0717.mft (raw, json)
Hash identifier:          otbsa7g/Lsh9MM8uk7nLK6IqX31W63p+Uew8RJnIk8w=
Subject key identifier:   E2:32:7A:EF:CD:BF:9E:E5:41:12:B8:3F:DB:CF:54:CC:3D:AE:B3:1D
Authority key identifier: D9:E8:53:F2:39:12:A9:99:E8:A8:BB:82:B4:CF:91:C9:59:3F:07:17
Certificate issuer:       /CN=D9E853F23912A999E8A8BB82B4CF91C9593F0717
Certificate serial:       624F8019FB74C61CA1B2B2221760A2898BE5530A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E853F23912A999E8A8BB82B4CF91C9593F0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/D9E853F23912A999E8A8BB82B4CF91C9593F0717.mft
Manifest number:          0D
Signing time:             Tue 27 Feb 2024 16:29:27 +0000
Manifest this update:     Tue 27 Feb 2024 16:24:27 +0000
Manifest next update:     Wed 28 Feb 2024 20:02:27 +0000
Files and hashes:         1: 3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa (hash: zF4VLPu7Mj7QzJ89eSKtiVoig1zanceEf3wVD5pwrmA=)
                          2: 323830343a376332303a3a2f33322d3334203d3e20323731343737.roa (hash: lcnS0eyc5ygyw56T7C1xNZJY5GnBLBYPPtQes7Rb/OY=)
                          3: D9E853F23912A999E8A8BB82B4CF91C9593F0717.crl (hash: R5dOG0a6sVWOZCLp37qca7LQX4C9oszr5lb3PCOExEQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4f:80:19:fb:74:c6:1c:a1:b2:b2:22:17:60:a2:89:8b:e5:53:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9E853F23912A999E8A8BB82B4CF91C9593F0717
        Validity
            Not Before: Feb 27 16:24:27 2024 GMT
            Not After : Feb 28 20:02:27 2024 GMT
        Subject: CN=E2327AEFCDBF9EE54112B83FDBCF54CC3DAEB31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:5e:ed:3c:61:48:b8:34:40:7c:de:58:be:
                    e0:39:01:9e:7d:7c:61:96:4a:4f:4b:27:e1:12:49:
                    df:4d:1c:0d:f4:93:04:db:93:5d:ed:c3:65:df:a9:
                    18:92:f1:7e:70:df:08:c7:69:1f:24:b3:07:e9:a4:
                    05:74:ac:6d:61:0f:05:02:88:35:12:7a:12:74:e1:
                    54:ee:fb:e1:02:5e:99:bc:05:da:f2:5e:5d:6a:3c:
                    e5:d9:f5:c8:27:99:5a:aa:f2:b1:e7:55:b0:41:f8:
                    e9:fd:6a:27:74:30:85:af:44:c4:a9:c2:10:32:f9:
                    8e:20:e4:c1:8a:68:9c:ae:dc:53:f4:47:d5:af:bf:
                    aa:3b:19:93:00:ee:24:83:0b:e0:73:83:fc:19:9a:
                    8b:ac:e4:49:03:b2:d8:4c:ef:77:9f:96:f2:88:60:
                    ee:59:b5:a4:04:ac:4f:1a:53:52:84:a0:f0:7e:a1:
                    0d:f3:80:07:9a:9a:fa:d2:fa:56:e7:05:64:dc:61:
                    38:06:74:a1:6a:f2:78:45:0b:97:04:ec:bf:e6:9e:
                    b8:85:06:19:27:ee:15:c1:6a:85:56:fa:7b:75:30:
                    48:a1:de:8f:0d:cb:6d:fc:38:95:99:ee:95:08:f0:
                    50:3a:03:df:a5:8f:51:9c:ab:11:35:a2:f8:47:38:
                    04:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:32:7A:EF:CD:BF:9E:E5:41:12:B8:3F:DB:CF:54:CC:3D:AE:B3:1D
            X509v3 Authority Key Identifier:
                keyid:D9:E8:53:F2:39:12:A9:99:E8:A8:BB:82:B4:CF:91:C9:59:3F:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/D9E853F23912A999E8A8BB82B4CF91C9593F0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E853F23912A999E8A8BB82B4CF91C9593F0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/D9E853F23912A999E8A8BB82B4CF91C9593F0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:df:d8:c2:b5:f4:a0:fd:fa:44:e2:60:58:ea:9d:4e:03:8d:
         5c:58:e6:44:b5:99:68:36:e5:a9:a3:4b:d5:62:7d:8c:b5:76:
         79:ad:f6:13:5b:46:c5:96:e7:e4:8d:b4:f1:96:cd:de:79:5a:
         2b:0d:3b:ff:a5:17:4d:f4:98:4a:be:70:94:79:53:ac:ac:9f:
         da:7c:26:7d:5b:52:db:4d:19:6d:2e:24:74:99:fc:89:f3:5a:
         87:88:07:cb:94:77:04:e5:21:e1:0f:a8:36:47:67:e1:91:05:
         23:df:71:2a:9d:44:06:a4:8a:e8:55:b6:84:cc:71:0e:e1:64:
         52:d1:e9:a7:88:f4:54:fd:09:66:51:ee:01:cb:08:91:b8:f4:
         c7:1c:aa:69:e9:e3:c5:95:cc:89:e8:73:19:91:7c:a6:73:8d:
         2c:fa:5c:93:c3:d0:fb:05:f1:1f:34:48:6e:39:bf:13:19:61:
         bc:33:ab:c7:65:3e:29:cf:d3:c8:23:46:d5:1e:e3:69:e0:bb:
         f7:90:4b:0c:de:5f:83:f0:5f:fc:dc:9a:91:f0:b6:cb:d7:5e:
         2f:59:80:7c:28:05:cf:cd:90:8e:5c:de:e5:22:4b:ac:af:2f:
         4a:2a:c6:1f:15:5f:5f:17:cd:61:f8:1c:da:50:59:06:46:cd:
         fe:5c:f7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----