Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.mft
File:                     18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.mft (raw, json)
Hash identifier:          umoPwQuAX8K6mA1/DULT3AezOV4Al+s/jHSkfGJzftw=
Subject key identifier:   AE:02:80:EC:14:60:03:76:8B:8E:38:13:A6:7F:95:34:A2:64:B8:34
Authority key identifier: 18:AA:0D:33:FE:0A:97:DC:3C:A2:85:6B:9A:CB:2E:74:8A:11:81:CA
Certificate issuer:       /CN=18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA
Certificate serial:       34BB850EF494DDB6AE2B0DDF4C9E2816114A9C53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.mft
Manifest number:          04
Signing time:             Fri 25 Oct 2024 09:15:29 +0000
Manifest this update:     Fri 25 Oct 2024 09:10:29 +0000
Manifest next update:     Sat 26 Oct 2024 12:07:29 +0000
Files and hashes:         1: 3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa (hash: OQFWxQ3WTi+WF2uOt2BbpQ6u2uDXbkZCBV3da1sIGho=)
                          2: 18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.crl (hash: UTGypLmR28+BGR6+yR5IJxEYvMfIALAYw8qBw5qn9q8=)
                          3: 323830343a333934303a3a2f33322d313238203d3e20323636303231.roa (hash: Z2XDXvCqR+R5WgD526SnWeiFi927fhbWJXAy5CIIMlc=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bb:85:0e:f4:94:dd:b6:ae:2b:0d:df:4c:9e:28:16:11:4a:9c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA
        Validity
            Not Before: Oct 25 09:10:29 2024 GMT
            Not After : Oct 26 12:07:29 2024 GMT
        Subject: CN=AE0280EC146003768B8E3813A67F9534A264B834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:5f:c6:22:06:16:7c:7f:10:71:5c:ad:ca:
                    76:77:5e:9e:d4:5e:a0:8a:a5:bb:fc:a0:52:01:8b:
                    63:b1:3b:81:70:cb:33:e7:c3:37:f5:82:23:b7:90:
                    10:b1:73:ab:d4:fa:2f:dd:f3:ff:40:f8:93:69:b9:
                    18:eb:08:1e:3b:be:48:8f:ea:db:9e:78:c5:39:4e:
                    3d:0e:98:80:58:f9:3b:23:2d:7e:01:b1:f3:75:8c:
                    83:44:e5:43:5f:1e:0c:d2:fd:05:e7:3a:ed:a6:d3:
                    af:1c:03:89:e3:45:16:9a:e2:e6:3e:0a:07:5d:2c:
                    e2:35:4d:45:fc:33:81:8b:86:be:53:4b:78:80:90:
                    34:6a:93:ec:ca:63:c9:33:82:39:8b:0f:56:ee:5c:
                    d2:ed:76:bd:f1:0b:aa:4b:38:42:08:78:37:5d:c3:
                    5e:70:12:45:4a:72:2f:1f:6c:b9:2e:70:40:b5:10:
                    f5:e5:5a:ff:c0:98:c8:31:00:2f:27:d6:2c:2a:fe:
                    46:26:b4:3d:be:3f:a7:c2:aa:98:e6:01:05:12:ff:
                    fd:88:cc:58:ad:ef:b9:a5:0d:ad:e6:fa:14:82:95:
                    bd:1c:ee:20:28:e4:71:1f:aa:5d:e5:10:29:91:41:
                    8c:34:54:6f:75:91:31:03:ef:96:e0:a2:0b:3d:f3:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:02:80:EC:14:60:03:76:8B:8E:38:13:A6:7F:95:34:A2:64:B8:34
            X509v3 Authority Key Identifier:
                keyid:18:AA:0D:33:FE:0A:97:DC:3C:A2:85:6B:9A:CB:2E:74:8A:11:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/18AA0D33FE0A97DC3CA2856B9ACB2E748A1181CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:66:63:8b:64:ba:f9:4a:ad:f5:35:f6:7b:cb:ff:4e:c4:bf:
         61:47:15:1b:36:cc:07:b5:32:26:80:09:bd:3e:6f:cf:87:6d:
         2b:87:a3:1e:28:c3:9e:c2:41:af:a7:3f:d9:98:99:5b:2d:9f:
         0a:b7:50:ee:48:09:83:d1:03:2f:02:83:75:c6:45:2e:61:64:
         4f:13:6f:42:a3:31:c9:c5:51:13:44:f5:fa:d4:4c:d7:4c:a0:
         f5:3a:01:15:80:f4:82:b6:93:a0:78:44:f6:dc:7d:44:a7:44:
         9c:fa:b4:26:c8:d1:4e:58:57:cc:0b:41:fb:b3:97:c6:03:f1:
         b3:09:77:ad:66:31:f0:a1:93:51:a9:0a:0a:fc:85:d7:0f:e9:
         c7:69:95:af:79:78:29:6f:56:e2:6b:d8:34:a9:75:53:b8:0e:
         3d:36:c5:87:e9:7c:93:dd:17:86:ec:07:71:0f:6b:e8:78:07:
         bb:09:75:39:45:01:25:a1:f2:6b:66:39:97:88:df:61:ec:95:
         e6:8a:15:4e:9e:a2:82:44:8f:14:24:3b:7b:31:bb:3d:0c:c3:
         dd:28:29:77:be:af:88:2e:6b:ca:0b:ee:95:0e:47:72:44:7a:
         78:04:bc:9e:70:c0:d2:c2:88:b1:e0:46:67:f4:e1:f5:70:ae:
         bb:02:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----