Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.mft
File:                     82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.mft (raw, json)
Hash identifier:          0FSn6RZcW5xO435Eq75+CC87asEeioMP0N44nLIEUUU=
Subject key identifier:   86:2E:51:58:7B:E5:96:B6:DC:37:FC:7D:66:16:A6:D5:A7:70:E4:51
Authority key identifier: 82:AA:2A:44:58:71:43:03:9E:CC:7B:4D:4C:30:99:B1:E3:FA:EB:64
Certificate issuer:       /CN=82AA2A44587143039ECC7B4D4C3099B1E3FAEB64
Certificate serial:       4600DA6A7C42785ACEBA8D75B0AE1F1221F824A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.mft
Manifest number:          19
Signing time:             Mon 28 Oct 2024 11:08:02 +0000
Manifest this update:     Mon 28 Oct 2024 11:03:02 +0000
Manifest next update:     Tue 29 Oct 2024 12:49:02 +0000
Files and hashes:         1: 82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.crl (hash: 3X6Ul3v+F+dAac6TMCXS7N7aAS0YJcrbPbQweWQZ9qk=)
                          2: 3137372e35342e31362e302f32302d3332203d3e20323632343437.roa (hash: IguqbgjDKOI5Z1r84QtJSBImGrjJ6R9rb9URebXJ0T0=)
                          3: 323830343a3438383a3a2f33322d313238203d3e20323632343437.roa (hash: mLCzib9YrxM1ZOaZCMbuk/vXAwTGAngwrYbVd/wvu5A=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:00:da:6a:7c:42:78:5a:ce:ba:8d:75:b0:ae:1f:12:21:f8:24:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82AA2A44587143039ECC7B4D4C3099B1E3FAEB64
        Validity
            Not Before: Oct 28 11:03:02 2024 GMT
            Not After : Oct 29 12:49:02 2024 GMT
        Subject: CN=862E51587BE596B6DC37FC7D6616A6D5A770E451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:ac:e6:e8:75:ef:44:93:f8:01:21:2b:92:
                    ad:bd:47:2b:6a:83:5b:fe:65:a1:6c:d3:b0:f2:31:
                    20:aa:29:ab:c9:ec:1b:0b:9a:46:1a:1c:f9:28:76:
                    74:13:2f:f6:6e:4b:23:99:e9:c6:5e:ad:92:50:9c:
                    f9:2b:08:c1:ec:94:c3:c6:e5:75:19:94:f7:a9:c6:
                    15:dc:3c:88:81:20:c8:c0:8f:ad:29:0e:67:07:68:
                    6e:68:8b:a3:44:0c:10:14:51:62:8c:f6:86:cb:eb:
                    fc:46:c8:67:53:5a:e5:6b:ff:e4:12:e7:d3:d0:3c:
                    05:61:17:db:8a:2a:db:4b:60:46:e4:46:63:25:fc:
                    73:17:20:26:f8:37:a5:4e:20:92:ae:86:93:b2:77:
                    0c:4e:91:f6:ea:aa:c4:0e:a9:d2:fc:2e:c4:4a:d6:
                    48:47:a6:ff:1d:2d:34:3a:e6:92:8a:ab:f2:d8:fa:
                    8b:63:92:48:56:59:8f:a3:14:89:fa:44:f7:d3:b9:
                    2e:18:5d:07:de:de:a3:5b:7b:90:ff:68:39:be:44:
                    e2:b0:75:22:76:2f:7b:b7:7f:65:e0:39:fa:bb:b6:
                    00:f7:2d:54:1b:be:60:9c:d6:fc:73:c7:bd:77:53:
                    b1:c9:bc:13:38:3f:10:81:b9:56:16:ce:13:c3:db:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2E:51:58:7B:E5:96:B6:DC:37:FC:7D:66:16:A6:D5:A7:70:E4:51
            X509v3 Authority Key Identifier:
                keyid:82:AA:2A:44:58:71:43:03:9E:CC:7B:4D:4C:30:99:B1:E3:FA:EB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:a7:56:26:f4:78:50:61:95:fb:f8:97:aa:55:54:9e:3b:
         9b:52:c1:d0:84:72:b6:0b:4c:6a:2c:7d:be:bd:27:aa:cb:bb:
         00:79:24:2d:34:f6:82:d8:67:ea:b6:25:4f:b8:85:23:eb:d9:
         31:ae:f8:40:7b:6d:fd:8b:0d:e0:c4:8f:fa:d8:d0:57:e7:be:
         0f:d6:a0:34:74:d1:68:66:0f:13:6e:83:74:42:82:f7:67:c4:
         75:f0:08:a9:f4:3e:64:dc:a0:58:8c:e7:30:3f:d9:c4:ee:34:
         c1:e4:df:44:d0:c8:96:5a:c8:51:b2:33:4c:a6:ed:09:cf:18:
         92:77:9c:59:68:25:c9:6f:9b:19:aa:f4:ab:22:ba:05:13:01:
         cb:0e:8a:fc:d4:40:dc:8e:12:5d:1f:6a:cb:33:74:e5:2b:59:
         db:ea:f9:ac:9d:12:22:fa:1c:ef:72:60:9c:80:ac:d3:c4:07:
         a7:06:f2:0d:38:de:88:d0:a1:3a:5a:07:10:e4:eb:df:c2:f8:
         9a:cc:02:28:f4:13:ae:45:13:c7:66:f1:b0:c4:b1:82:33:5e:
         6b:3f:e8:02:81:fc:36:89:dd:d7:1b:39:19:e8:60:5f:9c:c2:
         7b:e3:27:70:39:ff:47:53:f0:35:e9:56:31:44:91:f1:62:f4:
         1d:0c:3e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----