Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.mft
File:                     3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.mft (raw, json)
Hash identifier:          p9Q2/tY8Od8fbJPb+E/nEobHl8vNcQ+bhC4iWnwzzZY=
Subject key identifier:   5E:7B:E6:B9:B9:FB:F9:45:85:13:93:9B:72:F4:DD:A7:99:EE:32:AE
Authority key identifier: 35:35:B9:22:B6:C4:8D:AC:53:AC:B0:1C:9B:A5:6D:1A:9B:E2:8A:F6
Certificate issuer:       /CN=3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6
Certificate serial:       4160E0973577D326BDE1D1168B5B3D5831872369
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.mft
Manifest number:          E6
Signing time:             Sun 22 Sep 2024 19:33:32 +0000
Manifest this update:     Sun 22 Sep 2024 19:28:32 +0000
Manifest next update:     Mon 23 Sep 2024 23:18:32 +0000
Files and hashes:         1: 3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (hash: 1WhDWdhgDD1XmxTEduJ5YzySeFInBzLbpHjZSrXL/0k=)
                          2: 323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (hash: cxGLlktKEk7FnaZnuEGxkUHRHrdefYVvPQOFn2RKmkk=)
                          3: 3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.crl (hash: oBrNjvFyZJVGBl0fc1M+gzgyfNJdN8nH6Jq2ZegqOR4=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:60:e0:97:35:77:d3:26:bd:e1:d1:16:8b:5b:3d:58:31:87:23:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6
        Validity
            Not Before: Sep 22 19:28:32 2024 GMT
            Not After : Sep 23 23:18:32 2024 GMT
        Subject: CN=5E7BE6B9B9FBF9458513939B72F4DDA799EE32AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:84:b6:e8:0f:c7:85:d8:fb:c8:16:e8:a7:
                    ef:db:9b:6b:37:9e:84:b7:dd:0f:1a:0c:4f:5c:fe:
                    37:e0:f9:ff:37:4b:66:7d:de:dc:84:ae:b2:8e:57:
                    fd:52:95:06:22:7c:60:53:84:2a:e4:7d:7d:62:77:
                    69:48:8c:25:cc:52:90:f2:87:d1:79:c3:29:10:95:
                    ba:96:95:de:bf:9a:8b:2d:09:55:04:a2:1b:5b:98:
                    5f:b9:9f:b1:a7:ea:de:26:36:a9:f9:a3:c8:49:ca:
                    d4:1d:cd:7a:a8:a5:e2:67:ac:06:87:f5:1f:2e:a8:
                    15:ac:23:2f:5f:b8:de:b0:06:f5:c0:a0:5c:83:37:
                    47:71:bb:8e:5f:b9:3b:b4:95:8b:98:eb:f7:c7:7a:
                    fe:cb:6a:c4:62:81:a4:53:16:a9:08:87:6e:44:c5:
                    30:17:bb:87:24:ef:55:63:aa:5d:db:34:27:aa:a5:
                    ff:af:9a:4c:2f:87:0b:da:2e:ed:5d:8e:f4:68:03:
                    2a:ca:c0:92:ae:12:52:1e:73:a4:24:8e:b5:b1:b5:
                    a1:5a:79:6b:4f:c9:81:5f:50:1d:4c:ad:36:c2:12:
                    42:8f:bb:88:e6:14:3c:46:69:22:6d:c9:ce:85:21:
                    51:38:2e:5e:e2:0a:cf:a6:e3:64:27:41:a9:5e:bc:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7B:E6:B9:B9:FB:F9:45:85:13:93:9B:72:F4:DD:A7:99:EE:32:AE
            X509v3 Authority Key Identifier:
                keyid:35:35:B9:22:B6:C4:8D:AC:53:AC:B0:1C:9B:A5:6D:1A:9B:E2:8A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4a:6a:14:4d:9e:30:08:27:d4:70:1f:20:fd:41:93:ed:62:
         92:6c:a5:fe:57:8e:cb:a9:3b:06:e2:e9:a4:53:c4:36:ba:0b:
         6a:42:30:bb:2f:2e:a7:73:16:8d:32:74:db:71:50:ff:7a:52:
         37:0f:06:1c:b3:76:36:fe:df:66:3c:39:7e:cc:a3:c9:7a:24:
         06:5e:b7:2f:a3:ab:eb:35:95:0c:86:ad:8a:19:03:cd:da:60:
         b9:7e:5b:a5:c9:fa:23:2e:d4:92:ac:1a:f2:d3:be:2b:7b:f8:
         27:b3:d4:49:67:75:be:7b:55:10:7e:46:5b:ca:26:71:de:09:
         45:53:4d:d3:6d:ac:ba:51:42:40:d9:c2:51:ec:bb:cb:a7:fc:
         b8:c0:03:09:51:4a:da:6f:e6:55:d1:15:93:d3:37:be:04:64:
         4d:9c:43:75:17:8d:6c:9f:59:4b:fc:d8:55:4a:e0:a6:b8:ab:
         ed:5b:64:91:7a:83:df:ff:93:20:6f:83:ef:cf:d7:cf:6c:a1:
         97:f0:68:79:d3:b3:f0:8b:9f:a7:78:42:fe:b0:ab:fe:04:2f:
         34:ff:11:b1:c3:15:40:1c:90:1a:9b:c0:dd:71:ae:c1:ed:ae:
         3d:d8:3e:95:21:00:47:68:44:42:f4:9c:d6:eb:d5:c5:0c:d2:
         50:00:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----