Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.mft
File:                     D60A5069594F9BB626A3332DFE16DD7A74DE61A0.mft (raw, json)
Hash identifier:          Hhx1OVSPAiF5jWkBb8xtkkE6atqXiJRq74lsL/dKIsw=
Subject key identifier:   53:68:CC:C0:99:D7:48:DA:7C:38:4E:FC:2D:D4:08:FD:8E:1E:35:AA
Authority key identifier: D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
Certificate issuer:       /CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Certificate serial:       660F42606360C60367EEC9CE49C19699FB6570A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.mft
Manifest number:          27
Signing time:             Tue 15 Oct 2024 14:56:49 +0000
Manifest this update:     Tue 15 Oct 2024 14:51:49 +0000
Manifest next update:     Wed 16 Oct 2024 17:49:49 +0000
Files and hashes:         1: 34352e37302e3230352e302f32342d3234203d3e20323637353836.roa (hash: RBoyYYOxCsSKTTmMOBucsKpHUR2fj2Jr2RHGwtAS9TE=)
                          2: 34352e37302e3230342e302f32322d3232203d3e20323637353836.roa (hash: Xy3CbGw2vMMX2Ozo4YxeMrgpdVMSSekoaJApkX3Rj90=)
                          3: 34352e37302e3230372e302f32342d3234203d3e20323637353836.roa (hash: PCE+kTKGfmGjMVxR3R9bURqzFH1WovU54JkMdEu4R4Q=)
                          4: 34352e37302e3230362e302f32332d3233203d3e20323637353836.roa (hash: 0gkfR12F03pVtlMp9xC9/QSetaW0pXalQxRuYGinCr8=)
                          5: 34352e37302e3230342e302f32332d3233203d3e20323637353836.roa (hash: wpspLbvnyGimWWEuskxjTITKhztbXa1KzdHD6qOxCJo=)
                          6: 34352e37302e3230342e302f32342d3234203d3e20323637353836.roa (hash: EnvmYxpD3vDmYz7Hhx7LsnEU9wgQnvkJUCiQpgzLUDE=)
                          7: 34352e37302e3230362e302f32342d3234203d3e20323637353836.roa (hash: Vdb4t1xuI41i6n4ezObXkInajGa3kxNbBKGgKK/UA1s=)
                          8: D60A5069594F9BB626A3332DFE16DD7A74DE61A0.crl (hash: +v9ecPU7tp+BlEgW6W0Sx9pqgV08OaWCmZMQN3BEm0M=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0f:42:60:63:60:c6:03:67:ee:c9:ce:49:c1:96:99:fb:65:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
        Validity
            Not Before: Oct 15 14:51:49 2024 GMT
            Not After : Oct 16 17:49:49 2024 GMT
        Subject: CN=5368CCC099D748DA7C384EFC2DD408FD8E1E35AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:65:a2:64:04:b2:c0:e5:92:70:54:6c:e0:
                    1f:e4:17:14:01:d5:01:48:e7:f1:c7:49:72:d9:d9:
                    75:f1:d2:8c:d6:b0:b4:d2:29:c2:d5:70:d5:f0:0f:
                    73:18:76:81:85:8e:82:6a:10:9a:5c:a5:d2:f6:f7:
                    f4:23:4a:ba:a0:fd:86:ee:e8:67:2a:82:a9:5d:a6:
                    01:9e:36:d8:8a:8c:cd:7a:28:8f:f4:a4:20:ab:13:
                    40:c4:71:c8:10:2e:47:76:7d:45:7e:27:9a:16:cd:
                    a2:af:55:a4:5e:31:15:df:18:c4:44:1d:e1:4f:f0:
                    3b:48:ab:5d:62:2d:c9:01:4e:e7:31:c5:b8:af:92:
                    19:47:e4:10:84:16:83:08:87:ec:3b:b3:73:e9:56:
                    83:a6:66:e8:b3:d7:68:e4:23:fd:a6:ee:da:f7:53:
                    26:c3:ec:bf:83:48:1f:0b:e0:67:64:cf:7a:21:36:
                    d5:46:3b:d8:2c:e1:a0:d9:9e:e1:26:22:89:57:e0:
                    7b:1b:83:8b:ec:0b:33:52:18:40:9c:a3:c7:05:27:
                    2e:d5:3e:0f:c6:5f:e6:1a:e6:0e:5c:73:03:06:d8:
                    cb:7d:0e:a3:19:72:df:33:08:53:aa:43:d8:d5:c5:
                    39:b7:03:63:e5:c7:aa:43:ff:a6:f0:d6:1b:29:e4:
                    a7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:68:CC:C0:99:D7:48:DA:7C:38:4E:FC:2D:D4:08:FD:8E:1E:35:AA
            X509v3 Authority Key Identifier:
                keyid:D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:4f:a2:5b:59:da:77:5e:dc:c0:89:16:71:e4:ba:e5:ec:
         67:d4:10:b5:1a:09:5d:d7:6f:0d:ed:88:bf:d8:0d:41:3e:e3:
         7c:5d:dd:a1:1d:3f:6d:da:2d:10:ef:28:c6:4d:78:d9:32:87:
         a6:59:6e:bc:fa:07:30:51:ab:c4:b0:ce:64:17:07:73:f4:85:
         9f:61:24:e2:04:ec:4c:81:82:53:fa:df:48:56:84:4e:f8:73:
         51:c0:44:e6:03:4f:f2:54:4f:f7:70:1e:73:07:6e:47:27:64:
         46:7f:d2:d6:b0:dd:e7:4f:bf:02:fa:0d:da:4e:6f:35:df:89:
         70:43:dc:8e:29:5f:92:5b:be:2e:aa:4d:51:31:33:db:0d:68:
         30:29:bb:60:30:2e:33:cf:53:79:21:16:bd:ba:6d:49:bc:3f:
         0a:6c:7d:1e:c3:0d:4b:c0:39:ba:b9:8a:ef:87:4f:f5:6c:f0:
         ad:6f:1c:9f:1b:47:47:9f:b4:61:d4:e0:92:a0:d0:33:d6:88:
         4f:44:7c:18:b4:0e:98:0f:1c:b4:4f:2f:b9:68:7a:bc:cc:41:
         77:8f:02:86:30:88:e4:a6:5c:e8:86:b5:2a:cb:10:d0:0c:dc:
         b6:45:8d:d1:41:a0:b3:d5:85:33:f3:56:c8:8a:4b:b2:d7:ec:
         49:0a:32:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZg9CYGNgxgNn7snOScGWmftlcKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwQTUwNjk1OTRGOUJCNjI2QTMzMzJERkUxNkREN0E3
NERFNjFBMDAeFw0yNDEwMTUxNDUxNDlaFw0yNDEwMTYxNzQ5NDlaMDMxMTAvBgNV
BAMTKDUzNjhDQ0MwOTlENzQ4REE3QzM4NEVGQzJERDQwOEZEOEUxRTM1QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIWWiZASywOWScFRs4B/kFxQB
1QFI5/HHSXLZ2XXx0ozWsLTSKcLVcNXwD3MYdoGFjoJqEJpcpdL29/QjSrqg/Ybu
6GcqgqldpgGeNtiKjM16KI/0pCCrE0DEccgQLkd2fUV+J5oWzaKvVaReMRXfGMRE
HeFP8DtIq11iLckBTucxxbivkhlH5BCEFoMIh+w7s3PpVoOmZuiz12jkI/2m7tr3
UybD7L+DSB8L4Gdkz3ohNtVGO9gs4aDZnuEmIolX4Hsbg4vsCzNSGECco8cFJy7V
Pg/GX+Ya5g5ccwMG2Mt9DqMZct8zCFOqQ9jVxTm3A2Plx6pD/6bw1hsp5KfpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUU2jMwJnXSNp8OE78LdQI/Y4eNaowHwYDVR0j
BBgwFoAU1gpQaVlPm7YmozMt/hbdenTeYaAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVGTm9YSjdQRVJ1QUtidjl1YndyN1N3d1dDTFFtdjR4ZllYSEVRTW4z
RnIvMC9ENjBBNTA2OTU5NEY5QkI2MjZBMzMzMkRGRTE2REQ3QTc0REU2MUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MEE1MDY5NTk0RjlCQjYy
NkEzMzMyREZFMTZERDdBNzRERTYxQTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFVGTm9YSjdQRVJ1QUtidjl1YndyN1N3d1dDTFFtdjR4ZllYSEVRTW4zRnIvMC9E
NjBBNTA2OTU5NEY5QkI2MjZBMzMzMkRGRTE2REQ3QTc0REU2MUEwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb8pPoltZ2nde3MCJFnHkuuXsZ9QQtRoJXddvDe2Iv9gNQT7jfF3doR0/bdot
EO8oxk142TKHplluvPoHMFGrxLDOZBcHc/SFn2Ek4gTsTIGCU/rfSFaETvhzUcBE
5gNP8lRP93AecwduRydkRn/S1rDd50+/AvoN2k5vNd+JcEPcjilfklu+LqpNUTEz
2w1oMCm7YDAuM89TeSEWvbptSbw/Cmx9HsMNS8A5urmK74dP9WzwrW8cnxtHR5+0
YdTgkqDQM9aIT0R8GLQOmA8ctE8vuWh6vMxBd48ChjCI5KZc6Ia1KssQ0AzctkWN
0UGgs9WFM/NWyIpLstfsSQoyvA==
-----END CERTIFICATE-----
Generated at Mon Oct 21 09:40:13 2024 by rpki-client on console-fra.rpki-client.org