Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.mft
File:                     C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.mft (raw, json)
Hash identifier:          N44Uyxx8ai+3UtcWLRyqREzyCBVdCE/OdBLBa4GTFyM=
Subject key identifier:   B7:8D:1B:7B:80:AA:14:F1:17:33:56:70:3C:D6:63:65:4D:3A:E6:44
Authority key identifier: C5:22:49:F9:D4:3C:52:D0:B5:EC:A6:B4:1B:52:90:8B:B9:4A:C9:D4
Certificate issuer:       /CN=C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4
Certificate serial:       051FA36E80D32ACD75E40C80EDBE0598708DCB39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.mft
Manifest number:          01FC
Signing time:             Wed 17 Jan 2024 18:24:58 +0000
Manifest this update:     Wed 17 Jan 2024 18:19:58 +0000
Manifest next update:     Thu 18 Jan 2024 21:24:58 +0000
Files and hashes:         1: C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.crl (hash: RuRhgveG7ZkrKLoLmN5Li06GQc2Va8IFJ4fryHLUe+U=)
                          2: 34352e3233392e302e302f32322d3234203d3e20323638333438.roa (hash: 83fdiTLInIBqUT62ArkK2IXJqqaQpUXANR4vUQCAgZE=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1f:a3:6e:80:d3:2a:cd:75:e4:0c:80:ed:be:05:98:70:8d:cb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4
        Validity
            Not Before: Jan 17 18:19:58 2024 GMT
            Not After : Jan 18 21:24:58 2024 GMT
        Subject: CN=B78D1B7B80AA14F1173356703CD663654D3AE644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:b3:6f:76:c0:39:53:86:f4:0c:79:bd:64:
                    01:f3:ce:96:1c:f8:84:24:de:7a:94:69:26:a2:db:
                    f4:71:e4:49:ed:7e:87:de:1d:4f:2f:de:ab:15:7f:
                    32:92:50:b2:36:86:ba:b9:4f:a9:2d:d3:5e:ee:c6:
                    f2:18:81:96:d6:42:4e:66:72:15:b3:93:73:7b:d0:
                    3c:17:60:95:1b:71:83:49:82:84:05:77:10:54:b8:
                    8e:4f:d0:fb:86:dc:a8:e8:09:1d:d7:2c:90:3b:0b:
                    cd:19:90:c7:e3:77:5d:f6:8b:b5:3f:55:ee:e8:0f:
                    3f:d9:7e:fa:73:72:74:47:df:9e:26:b6:eb:12:56:
                    8e:0b:4e:53:1a:42:54:2a:de:97:0d:bb:8c:5e:84:
                    3d:1a:fc:63:a7:93:fd:b2:18:42:14:9f:73:68:96:
                    30:ba:41:58:53:4c:b6:af:76:64:ee:24:23:f0:7f:
                    c6:b6:af:46:83:27:31:44:09:2a:bf:55:6a:d4:a2:
                    60:1b:35:5b:e1:48:7b:62:9b:11:28:42:3b:35:b2:
                    4e:ab:b4:4a:01:59:9a:b1:05:f8:60:10:27:91:b5:
                    d2:71:0a:59:28:6f:c2:dc:2e:39:0d:06:45:64:53:
                    95:21:79:71:9c:e4:62:0c:41:6b:4e:c7:f1:95:2f:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8D:1B:7B:80:AA:14:F1:17:33:56:70:3C:D6:63:65:4D:3A:E6:44
            X509v3 Authority Key Identifier:
                keyid:C5:22:49:F9:D4:3C:52:D0:B5:EC:A6:B4:1B:52:90:8B:B9:4A:C9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:38:83:31:25:ff:6b:4e:bc:0c:91:e2:54:ae:c9:92:53:
         04:e7:80:91:b2:91:6c:46:88:7d:49:21:0e:dc:41:8d:32:18:
         eb:7e:ca:cc:7b:8f:1a:99:fb:c7:5f:fe:eb:22:54:c9:44:ea:
         c6:91:ce:3d:80:d7:cf:b1:5a:4c:bb:5e:1d:fd:44:ef:58:d0:
         5e:c2:fb:39:f9:2d:67:72:b8:aa:10:6b:10:f1:59:3d:61:b6:
         80:91:47:c1:42:9c:5e:53:67:02:f8:f0:cb:b9:d5:56:55:97:
         0a:cf:a3:78:cb:42:5d:6f:b1:b8:86:19:d6:6c:df:a1:71:9e:
         4e:c7:0a:36:fb:db:4b:ab:bf:87:42:8d:90:7a:03:e1:f5:bb:
         8e:96:df:20:e2:e1:f1:7b:92:80:fb:c5:c2:f8:0e:74:ac:9f:
         34:f2:24:56:3b:42:81:62:62:53:11:38:d6:f0:bf:89:c6:ac:
         68:d2:2f:04:0e:92:a9:a6:3c:b3:30:dc:a0:78:8b:24:91:32:
         50:bc:ca:f5:e1:88:bf:bc:c3:ca:44:bd:ae:b9:f3:ca:97:fc:
         57:64:a1:13:30:10:ff:e0:e5:46:4f:b1:c4:c0:7c:28:68:24:
         e5:1d:76:a0:7c:b2:07:f2:f7:7d:26:95:20:f9:c2:ed:8d:75:
         13:e2:73:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBR+jboDTKs115AyA7b4FmHCNyzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyMjQ5RjlENDNDNTJEMEI1RUNBNkI0MUI1MjkwOEJC
OTRBQzlENDAeFw0yNDAxMTcxODE5NThaFw0yNDAxMTgyMTI0NThaMDMxMTAvBgNV
BAMTKEI3OEQxQjdCODBBQTE0RjExNzMzNTY3MDNDRDY2MzY1NEQzQUU2NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbLNvdsA5U4b0DHm9ZAHzzpYc
+IQk3nqUaSai2/Rx5EntfofeHU8v3qsVfzKSULI2hrq5T6kt017uxvIYgZbWQk5m
chWzk3N70DwXYJUbcYNJgoQFdxBUuI5P0PuG3KjoCR3XLJA7C80ZkMfjd132i7U/
Ve7oDz/ZfvpzcnRH354mtusSVo4LTlMaQlQq3pcNu4xehD0a/GOnk/2yGEIUn3No
ljC6QVhTTLavdmTuJCPwf8a2r0aDJzFECSq/VWrUomAbNVvhSHtimxEoQjs1sk6r
tEoBWZqxBfhgECeRtdJxClkob8LcLjkNBkVkU5UheXGc5GIMQWtOx/GVL16ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUt40be4CqFPEXM1ZwPNZjZU065kQwHwYDVR0j
BBgwFoAUxSJJ+dQ8UtC17Ka0G1KQi7lKydQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01V
eFQvMC9DNTIyNDlGOUQ0M0M1MkQwQjVFQ0E2QjQxQjUyOTA4QkI5NEFDOUQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MjI0OUY5RDQzQzUyRDBC
NUVDQTZCNDFCNTI5MDhCQjk0QUM5RDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01VeFQvMC9D
NTIyNDlGOUQ0M0M1MkQwQjVFQ0E2QjQxQjUyOTA4QkI5NEFDOUQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJv04gzEl/2tOvAyR4lSuyZJTBOeAkbKRbEaIfUkhDtxBjTIY637KzHuPGpn7
x1/+6yJUyUTqxpHOPYDXz7FaTLteHf1E71jQXsL7OfktZ3K4qhBrEPFZPWG2gJFH
wUKcXlNnAvjwy7nVVlWXCs+jeMtCXW+xuIYZ1mzfoXGeTscKNvvbS6u/h0KNkHoD
4fW7jpbfIOLh8XuSgPvFwvgOdKyfNPIkVjtCgWJiUxE41vC/icasaNIvBA6SqaY8
szDcoHiLJJEyULzK9eGIv7zDykS9rrnzypf8V2ShEzAQ/+DlRk+xxMB8KGgk5R12
oHyyB/L3fSaVIPnC7Y11E+JzHg==
-----END CERTIFICATE-----