Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/31A34383E0EDF59913E3F81F7606FE38AE7264F0.mft
File:                     31A34383E0EDF59913E3F81F7606FE38AE7264F0.mft (raw, json)
Hash identifier:          IXb0Yv99zZTzWzBovzGYQAn9OlTiWLv31Rc52R2vA1o=
Subject key identifier:   0B:DF:55:46:09:F4:50:80:AF:C3:A4:0A:62:DA:35:51:B1:41:22:4F
Authority key identifier: 31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0
Certificate issuer:       /CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
Certificate serial:       409764CCBFA8EA41B4BC7978C0B26E0EFA6FAEDD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/31A34383E0EDF59913E3F81F7606FE38AE7264F0.mft
Manifest number:          5E
Signing time:             Sat 24 Aug 2024 08:17:58 +0000
Manifest this update:     Sat 24 Aug 2024 08:12:58 +0000
Manifest next update:     Sun 25 Aug 2024 11:29:58 +0000
Files and hashes:         1: 3137372e38362e382e302f32312d3231203d3e203532353537.roa (hash: bRV0wuMs6HLu01zCyHTskJRReVzNhtN7BMWp1jLPoIw=)
                          2: 3137372e38362e382e302f32322d3232203d3e203532353537.roa (hash: kB3yFp+cumIK8xo1qZKXd88oA05jhMWOACGyQjW8K+0=)
                          3: 323830343a6364303a3a2f33322d3332203d3e203532353537.roa (hash: xul9vGKKW9JDOE0fUldvbs17jgZOlQj7pA7bYvqUq4M=)
                          4: 323830343a6364303a3a2f33332d3333203d3e203532353537.roa (hash: r/sCZ6A53xrEQQU9Cu3MpeIL4ehde0wVIv+r344geSA=)
                          5: 323830343a6364303a383030303a3a2f33332d3333203d3e203532353537.roa (hash: kNzVIPLCO8ChSl6kawnMZ1wxCDPpa+f9KnivbJyxwok=)
                          6: 31A34383E0EDF59913E3F81F7606FE38AE7264F0.crl (hash: MnqNmAW/wX679ahNfezxDVwUcOUN6zc9Glpde+3UJRE=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:97:64:cc:bf:a8:ea:41:b4:bc:79:78:c0:b2:6e:0e:fa:6f:ae:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
        Validity
            Not Before: Aug 24 08:12:58 2024 GMT
            Not After : Aug 25 11:29:58 2024 GMT
        Subject: CN=0BDF554609F45080AFC3A40A62DA3551B141224F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:a5:fa:19:55:93:27:ef:96:d6:2e:17:54:
                    93:4a:57:b8:49:67:e6:23:74:99:90:57:97:ba:44:
                    4d:a4:a0:cb:e7:c5:88:2e:72:43:52:78:11:5b:f1:
                    5f:ca:48:41:47:95:a4:35:04:35:e2:ff:83:a8:00:
                    1e:fd:05:aa:cc:cb:63:1d:e8:ab:e9:99:97:19:33:
                    d8:bb:e5:38:c7:9d:c7:c3:0a:73:b7:56:3b:2a:42:
                    d4:35:ad:68:c6:60:8a:75:8c:71:33:40:62:ea:b6:
                    e8:48:e9:1f:e3:90:cc:92:b0:61:40:9b:33:0a:69:
                    66:e2:09:c4:94:de:db:85:6b:d1:ae:3d:00:20:ce:
                    7e:11:31:ec:a2:8a:f0:35:e2:3a:7a:8e:66:5e:15:
                    bf:39:3e:15:ad:00:11:50:b6:67:87:cd:58:e5:d6:
                    9a:94:df:d4:2f:b8:26:22:c2:a0:dd:6f:c5:c4:6a:
                    cb:a5:8c:50:20:f0:d2:3f:d5:33:43:c2:c4:8a:8a:
                    1f:28:c9:23:9f:59:1f:43:9a:a8:aa:4f:ed:f0:e2:
                    cb:ca:a2:47:04:e5:ef:99:ee:9f:ee:c9:01:70:10:
                    1c:dc:73:1f:ca:74:78:54:05:38:25:6a:70:7e:c9:
                    f1:27:d5:95:13:d5:00:d2:a3:4b:5a:cb:28:c8:88:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DF:55:46:09:F4:50:80:AF:C3:A4:0A:62:DA:35:51:B1:41:22:4F
            X509v3 Authority Key Identifier:
                keyid:31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/31A34383E0EDF59913E3F81F7606FE38AE7264F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/31A34383E0EDF59913E3F81F7606FE38AE7264F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2c:6a:23:36:c8:d7:d9:46:a2:71:f1:8e:df:c8:e5:b2:7e:
         54:26:85:36:ee:8c:c0:f3:52:4f:e3:49:8f:66:85:f4:7b:f6:
         66:72:81:86:39:25:77:ba:8b:fb:78:f0:31:a4:94:f3:55:34:
         80:0b:81:13:c9:91:32:ab:48:b7:75:75:cf:6e:14:63:5c:15:
         3b:85:73:93:a8:ce:ec:ab:e3:d2:8a:81:bc:8a:f6:6f:07:0f:
         22:03:0b:ac:03:f1:25:f5:3b:f5:94:d3:bf:b9:f6:1b:e6:7f:
         23:6e:5e:fc:4a:b5:4b:50:cc:ae:55:83:90:85:10:08:81:3c:
         a3:17:70:b9:ba:86:22:59:db:85:f3:e5:3d:7e:93:0a:54:4c:
         4f:1b:e4:fb:c0:80:a5:a6:eb:84:fd:a0:7d:48:b9:1a:18:7f:
         0a:0c:35:24:fa:c7:61:af:35:ce:59:ec:2a:1d:b2:cc:67:a3:
         7a:ee:64:2e:59:02:44:eb:1b:26:14:ec:99:6e:08:48:e1:7d:
         cd:7d:86:6e:99:71:60:64:0d:dc:97:16:ca:dd:36:f4:1e:c3:
         ca:ae:1b:3e:1c:9c:0f:ab:65:24:98:05:6a:dc:f2:e7:79:c8:
         34:75:f1:16:ae:9b:ba:72:59:ad:2b:1e:8a:b0:12:29:a2:ce:
         ed:83:14:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 08:33:59 2024 by rpki-client on console-fra.rpki-client.org