Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.mft
File:                     3F175E66F2E0A76812C6FE5AFEDA9159214458CB.mft (raw, json)
Hash identifier:          Jk2BiIfLrt+bv3D0F7y0bcSCWfGNeJYWnQg366BNpnI=
Subject key identifier:   C6:BE:FE:70:63:AC:E6:D3:74:11:CE:35:A8:64:72:95:38:DD:D6:86
Authority key identifier: 3F:17:5E:66:F2:E0:A7:68:12:C6:FE:5A:FE:DA:91:59:21:44:58:CB
Certificate issuer:       /CN=3F175E66F2E0A76812C6FE5AFEDA9159214458CB
Certificate serial:       75A89963FA4D4B8CE68130982FBDB52FC9EDB86E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.mft
Manifest number:          03
Signing time:             Fri 23 Aug 2024 17:45:00 +0000
Manifest this update:     Fri 23 Aug 2024 17:40:00 +0000
Manifest next update:     Sat 24 Aug 2024 21:15:00 +0000
Files and hashes:         1: 323830343a343364343a3a2f33322d3333203d3e20323637353933.roa (hash: x7IUs9ib2PPnhm8jjhhHAlJieGGi8fISNAXY5yZF1rw=)
                          2: 3F175E66F2E0A76812C6FE5AFEDA9159214458CB.crl (hash: Oq8s6dSKpMbmrboWnCT/5Rkbxg82+mxwrCDeAAEg+Rk=)
                          3: 34352e37302e38342e302f32322d3234203d3e20323637353933.roa (hash: xKdaoycTqe9RpUozMF8KC8KV0Ygdat0178zo+Iggbbg=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a8:99:63:fa:4d:4b:8c:e6:81:30:98:2f:bd:b5:2f:c9:ed:b8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F175E66F2E0A76812C6FE5AFEDA9159214458CB
        Validity
            Not Before: Aug 23 17:40:00 2024 GMT
            Not After : Aug 24 21:15:00 2024 GMT
        Subject: CN=C6BEFE7063ACE6D37411CE35A864729538DDD686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:57:cc:29:4e:d7:7f:01:a2:98:93:fc:b7:
                    69:f0:59:cc:69:1a:51:1f:18:70:49:4e:6a:84:41:
                    32:33:61:8c:3d:7f:fb:14:fd:3e:ac:40:0b:1e:77:
                    4a:77:cb:63:e2:fc:b1:5a:15:6f:c9:0f:79:a1:e0:
                    41:c8:a7:92:66:82:75:45:1b:92:8b:be:eb:fa:2e:
                    c2:92:12:bb:bc:ac:ba:93:c8:e3:8e:d2:7f:e2:33:
                    ee:48:c2:2a:64:fd:f9:9a:56:d4:09:6a:1c:ae:59:
                    2f:73:6a:05:b3:31:57:ee:03:d7:53:24:46:b8:10:
                    73:e7:bb:ad:2f:13:b7:d6:be:5d:a4:99:cd:af:6a:
                    d0:8a:e9:02:c8:12:7a:93:ed:be:a8:52:0a:c0:a8:
                    ca:77:4e:df:e0:b8:5e:da:af:ee:79:71:1a:eb:05:
                    7c:70:19:13:4f:bc:b6:16:f3:94:7c:2f:57:94:03:
                    60:9a:e8:02:7e:25:16:ca:99:d6:9b:87:6d:79:b7:
                    98:52:42:0c:9e:33:0a:1f:08:c6:b7:b0:6f:ac:c6:
                    d8:51:6f:dd:b2:0b:47:80:13:01:f6:f0:e2:44:26:
                    f3:93:f1:fc:d8:ba:aa:94:10:b5:95:61:0a:52:7e:
                    c4:7a:b5:6b:18:06:ec:4e:bf:7b:44:00:f1:d3:3e:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BE:FE:70:63:AC:E6:D3:74:11:CE:35:A8:64:72:95:38:DD:D6:86
            X509v3 Authority Key Identifier:
                keyid:3F:17:5E:66:F2:E0:A7:68:12:C6:FE:5A:FE:DA:91:59:21:44:58:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:12:74:e5:7d:02:f1:cb:bb:84:e4:ba:3d:45:07:81:d5:1c:
         c0:26:d4:1d:4f:90:9d:94:b4:cc:16:69:51:7a:48:e4:5c:a0:
         ee:8a:83:cc:13:ee:1c:a3:dc:46:ce:c4:cb:e2:c8:2d:86:27:
         e4:c8:d6:e8:89:ec:73:4f:67:d1:7f:69:45:6b:f1:fc:b9:13:
         61:26:82:6d:2f:fd:88:5d:5a:ba:b6:a8:d3:c7:1e:06:e9:df:
         0e:0f:9f:45:94:d9:90:3d:f4:2c:c1:1f:f9:af:2d:c3:8c:25:
         2b:14:81:7b:8c:87:69:72:57:1a:b7:47:a6:f1:d5:ed:68:b0:
         a2:51:38:f5:41:85:45:ba:4a:55:4f:98:1d:91:8a:5c:55:ae:
         ca:f5:89:3e:08:ab:1a:6d:1e:0b:9c:7a:d4:38:10:65:7b:65:
         fd:b9:03:0a:49:b9:31:17:69:72:39:0b:16:cd:0d:7a:f9:75:
         68:f6:75:52:f1:4b:3a:16:de:a9:8a:a3:9b:7a:7a:8f:4e:36:
         66:f3:44:79:47:10:01:87:20:b0:af:1d:19:aa:bc:18:b2:c7:
         97:3f:48:2e:b2:86:f9:45:95:6b:7e:0a:fe:c8:6d:4b:e9:a2:
         83:46:d0:51:35:51:bd:e9:72:7e:7e:b7:39:48:56:cb:e4:37:
         2a:3d:f3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----