Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.mft
File:                     8F22D0F09007A0AB362AFC115EFAF686F131E2E3.mft (raw, json)
Hash identifier:          mpGb1FhzmDoQzNduvGbNnHdrKQMVkKKRouiRPLkuQnU=
Subject key identifier:   08:FB:0E:1B:CE:E3:F1:92:89:D8:7D:4D:7B:5D:67:E4:12:76:B8:AF
Authority key identifier: 8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3
Certificate issuer:       /CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
Certificate serial:       250B50A60DE08D2488D629CBCD973149C4B543B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.mft
Manifest number:          A1
Signing time:             Wed 31 Jul 2024 22:55:22 +0000
Manifest this update:     Wed 31 Jul 2024 22:50:22 +0000
Manifest next update:     Thu 01 Aug 2024 23:33:22 +0000
Files and hashes:         1: 34352e3136302e3231362e302f32342d3332203d3e203631353934.roa (hash: 2dxdeckebN6RaU0sA8czVtqWKlT9oJyFrVSkobi0+P4=)
                          2: 323830343a353130633a3a2f33322d3332203d3e203631353934.roa (hash: PzhWLEZisDul5bnx6v0XPJ7Gc15boTnzi/UV49j/gf8=)
                          3: 34352e3136302e3231372e302f32342d3234203d3e203631353934.roa (hash: F4g8J745Go7dA45Mtf/pKuEkmmT6MsQ8DEU7J/78ucs=)
                          4: 34352e3136302e3231362e302f32322d3232203d3e203631353934.roa (hash: 3EP3dEY0EkBHK0TSojynkeAX8HLSrnALnlM7cFG77c4=)
                          5: 8F22D0F09007A0AB362AFC115EFAF686F131E2E3.crl (hash: x0cMDRpn20iCTwCeO6x7OfkrhLLOZwaeBTNoJCJqtM4=)
                          6: 323830343a353130633a3a2f33332d3334203d3e203631353934.roa (hash: BzlDDOBNyMlzZt6Kwbb+k87iMc7kpO33zKQcTg/sqKg=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0b:50:a6:0d:e0:8d:24:88:d6:29:cb:cd:97:31:49:c4:b5:43:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
        Validity
            Not Before: Jul 31 22:50:22 2024 GMT
            Not After : Aug  1 23:33:22 2024 GMT
        Subject: CN=08FB0E1BCEE3F19289D87D4D7B5D67E41276B8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:85:3a:d8:c5:39:41:fa:a7:7c:b2:18:c9:
                    15:f5:41:fc:18:5d:40:e8:b0:2f:d2:51:48:9d:1f:
                    5c:0a:28:81:27:11:71:9c:bb:b0:23:d5:36:d7:6a:
                    1e:43:c9:99:35:b8:6e:e7:9e:df:0d:78:e9:6e:0b:
                    ed:e5:3f:16:8e:73:1b:d8:cd:d6:36:1b:5e:43:7d:
                    ec:50:be:12:d0:09:0a:fc:6a:68:de:e3:ea:2d:79:
                    6c:7e:fe:66:9c:97:ff:3e:ea:14:24:4e:83:84:7e:
                    e2:05:6f:96:b6:c4:40:d3:a0:47:6a:d2:56:ad:af:
                    32:30:0b:a5:e6:a5:44:bd:7f:a3:fc:09:33:19:20:
                    ee:41:df:ac:20:30:ee:6c:98:9c:a6:30:c3:a4:d8:
                    b8:d6:16:9c:22:90:9b:a5:78:cf:5c:23:50:03:b9:
                    9a:f2:ee:53:a3:b8:cd:fb:50:9c:4c:09:e5:65:ba:
                    b4:69:61:66:99:e1:cb:f9:fc:a0:7e:ac:4f:bc:d4:
                    dc:22:89:05:7b:3d:84:85:5d:1f:bb:f5:e8:99:39:
                    e6:06:b5:de:2a:5a:a7:43:b4:3e:3e:ed:d2:d9:5e:
                    f3:f9:a4:20:bf:fb:3d:0f:1a:e0:f2:ef:c5:04:dc:
                    d9:53:8c:ef:0c:ea:98:a9:3e:f9:df:90:45:e2:3f:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FB:0E:1B:CE:E3:F1:92:89:D8:7D:4D:7B:5D:67:E4:12:76:B8:AF
            X509v3 Authority Key Identifier:
                keyid:8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:e1:0c:95:2f:4e:f8:c3:e5:97:cd:e2:ad:73:b2:b4:c9:0c:
         88:1f:84:d4:f3:a6:68:48:07:52:6a:06:1f:cf:dd:d7:de:ea:
         c7:26:96:6e:fa:9e:dd:63:cf:57:41:89:47:42:58:64:6f:6f:
         7e:fc:e2:82:b5:7e:e3:97:9c:0e:f6:f4:76:35:9c:ea:c8:ad:
         ab:47:4d:f0:a0:ad:94:9f:fa:5e:86:7c:80:80:a9:44:57:7d:
         8d:e6:4b:0f:e6:ac:81:34:58:4e:ad:72:e1:98:d3:d9:b8:43:
         b7:f8:ae:e4:ed:4d:c9:41:d7:d0:87:51:ac:1a:64:4a:75:0c:
         54:8e:10:16:20:6a:1d:bd:43:17:e3:74:ae:3e:57:40:4d:c5:
         04:df:0c:a2:17:c1:d7:2d:be:61:f4:aa:1c:2f:83:32:07:38:
         a0:f9:ba:8d:b0:f2:19:60:6d:7c:76:e4:ed:e1:52:30:8b:d7:
         90:64:f6:7a:72:1f:cb:76:87:a0:e9:d5:2a:9d:b9:78:f0:1c:
         bb:b6:0f:72:74:43:ef:0b:52:52:2e:0a:d6:fa:8c:08:1b:97:
         db:cd:ed:57:d8:a6:7c:6f:40:f3:6e:d4:1b:d7:b9:03:b4:a8:
         66:14:a5:9f:f6:34:e5:d2:10:1b:55:54:4c:86:36:e4:56:52:
         44:df:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----