Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.mft
File:                     CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.mft (raw, json)
Hash identifier:          F3D7AVAWcyPghRqHlf+EUDfNWjS9vrVGVHBQM1JnzZg=
Subject key identifier:   6B:59:02:8A:36:1D:B3:C5:4D:67:90:8A:2B:B0:45:73:D9:21:A1:78
Authority key identifier: CC:74:D7:FF:ED:D2:2B:46:45:90:B8:FA:9A:13:BF:3A:A1:AE:12:23
Certificate issuer:       /CN=CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223
Certificate serial:       A3E0F1D6D69D545EA964E120A774A9C92088EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.mft
Manifest number:          5D
Signing time:             Wed 12 Jun 2024 09:42:22 +0000
Manifest this update:     Wed 12 Jun 2024 09:37:22 +0000
Manifest next update:     Thu 13 Jun 2024 10:31:22 +0000
Files and hashes:         1: 34352e3137352e3234302e302f32322d3332203d3e20323638393336.roa (hash: zaw41lMTAxbVyFjSggSiDAXDX6E4HT+MheB99v/X/iY=)
                          2: CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.crl (hash: AQlWRxDdQBeYTAbmglTbV+n7WPm/W8m+G9JlKus7Tiw=)
                          3: 323830343a356365303a3a2f33322d313238203d3e20323638393336.roa (hash: TknChNhBxXskujiGW4d/Tlxer9K6d/g+ImNS5+xK4JU=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:e0:f1:d6:d6:9d:54:5e:a9:64:e1:20:a7:74:a9:c9:20:88:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223
        Validity
            Not Before: Jun 12 09:37:22 2024 GMT
            Not After : Jun 13 10:31:22 2024 GMT
        Subject: CN=6B59028A361DB3C54D67908A2BB04573D921A178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:5f:e7:70:6c:08:02:4c:3b:f6:c5:36:e2:
                    ca:81:78:1b:51:67:94:72:75:db:87:bc:b7:eb:49:
                    5f:c7:81:66:6f:d1:93:8b:e9:01:4c:b2:d4:43:ab:
                    5c:0c:27:4c:a2:b2:85:2d:05:6a:32:5c:99:00:9a:
                    ed:0c:d5:4f:8f:47:a7:24:e1:43:75:5b:ef:98:06:
                    24:3f:df:86:cd:4b:cc:09:38:52:42:10:8a:f0:1b:
                    e2:ff:d7:4f:71:7d:b7:77:02:3b:28:13:f3:45:9f:
                    ae:2f:b6:40:d8:cb:d3:2f:97:9a:e0:81:a9:80:df:
                    5b:a0:24:da:eb:02:c2:4b:cd:73:95:13:31:4b:75:
                    31:c3:40:06:8f:18:2e:18:66:28:7b:74:a1:0f:20:
                    5e:0b:34:c7:4f:35:51:6a:b1:c1:bc:a6:23:e5:ec:
                    25:76:9b:ff:3f:6b:bc:40:39:b9:2a:a6:00:17:be:
                    f5:a5:1c:82:c6:29:e4:3e:98:32:b5:b3:dd:4f:ec:
                    da:17:83:98:cb:a6:7e:92:62:3e:8c:f5:e5:79:a3:
                    52:10:2c:62:4c:78:58:ca:ee:13:64:35:a5:71:65:
                    12:35:35:7c:87:a6:a4:ad:26:87:35:e9:b3:10:9d:
                    60:2a:af:90:22:5b:fc:45:94:27:c0:25:1a:9c:20:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:02:8A:36:1D:B3:C5:4D:67:90:8A:2B:B0:45:73:D9:21:A1:78
            X509v3 Authority Key Identifier:
                keyid:CC:74:D7:FF:ED:D2:2B:46:45:90:B8:FA:9A:13:BF:3A:A1:AE:12:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7e:f2:d2:63:0c:30:1b:bc:7c:88:6e:d2:da:59:49:74:ee:
         73:d7:dd:65:a2:c1:5d:bd:95:05:94:cd:6b:10:c1:12:97:0c:
         6d:99:28:39:c5:42:b4:e3:6c:1d:28:c8:00:b0:d1:79:c3:1a:
         1f:2d:27:aa:70:14:77:d6:9e:d3:53:e5:ae:7b:57:09:c3:ef:
         3b:67:1c:16:d6:a0:94:82:4d:4c:ed:db:8f:8a:38:09:be:44:
         49:53:44:8a:46:b5:bd:12:34:6f:0c:b5:27:a7:57:d8:b6:7a:
         31:f8:57:66:15:1b:3e:06:89:97:4d:ee:ad:41:76:ae:78:1d:
         6f:b8:94:c9:02:67:50:a2:ec:05:19:e8:d3:2b:85:0c:87:3c:
         ee:93:12:50:7c:3f:74:9e:9c:ef:6e:1b:74:70:bc:b7:37:0f:
         79:82:01:fc:d0:44:e0:a3:59:6b:0b:76:6a:4f:21:65:ae:cf:
         45:c7:3b:4f:4b:69:ef:3e:d5:db:3b:e0:78:b1:0f:82:6b:72:
         05:88:35:9c:b0:e8:b8:6e:21:b1:67:f2:71:2b:46:ed:25:f9:
         7a:3e:59:b0:a2:cb:a0:75:42:87:ed:c5:23:5c:7a:bc:7f:b7:
         bc:98:61:8d:20:e8:e6:15:d1:36:8c:ab:91:88:9d:e7:24:a5:
         db:7c:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----