Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.mft
File:                     197DE4B6180FCA095E69FF5F4203DADC224DBFB6.mft (raw, json)
Hash identifier:          YLSDWw9pWgqRj8bzfVIVrt90LMV9WdXYtjzktH5nKyE=
Subject key identifier:   7E:5C:C5:B3:CF:5F:26:38:1E:76:B8:DB:79:86:C7:2A:5F:53:3B:F5
Authority key identifier: 19:7D:E4:B6:18:0F:CA:09:5E:69:FF:5F:42:03:DA:DC:22:4D:BF:B6
Certificate issuer:       /CN=197DE4B6180FCA095E69FF5F4203DADC224DBFB6
Certificate serial:       140381BF60B207171B8404EAC98549CCE7F5D50E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.mft
Manifest number:          32
Signing time:             Thu 29 Aug 2024 10:28:51 +0000
Manifest this update:     Thu 29 Aug 2024 10:23:51 +0000
Manifest next update:     Fri 30 Aug 2024 13:07:51 +0000
Files and hashes:         1: 197DE4B6180FCA095E69FF5F4203DADC224DBFB6.crl (hash: zJC6UDL+9HQK0bBkvXOpwjSTKxFwtdr34re8Y8SMA8o=)
                          2: 323830343a353039383a3a2f33322d313238203d3e20323638333938.roa (hash: YX8eLQ8oI8ORX5sp7cQ9aWZIorW8i4IKFYBxLv7gT+U=)
                          3: 34352e3136302e32342e302f32322d3332203d3e20323638333938.roa (hash: pNVcL7P8PGTW/mfWatjUapdJSu/SSrFnua3PluD/qdI=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:03:81:bf:60:b2:07:17:1b:84:04:ea:c9:85:49:cc:e7:f5:d5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197DE4B6180FCA095E69FF5F4203DADC224DBFB6
        Validity
            Not Before: Aug 29 10:23:51 2024 GMT
            Not After : Aug 30 13:07:51 2024 GMT
        Subject: CN=7E5CC5B3CF5F26381E76B8DB7986C72A5F533BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:30:e7:b9:8b:31:9e:c4:79:ab:4a:e7:82:
                    2f:60:ac:e5:80:ca:34:0c:03:ee:bf:b8:f8:a6:40:
                    55:6c:d7:1a:71:68:4b:7b:cc:ff:4a:a0:f7:cf:0e:
                    32:74:21:8f:b6:d9:96:59:00:16:64:4e:4a:3c:4c:
                    42:73:f6:8d:2e:7f:b5:4f:01:a4:58:a3:1e:7f:e6:
                    72:e5:f6:54:f1:61:ba:f7:d7:03:a8:ba:1e:72:6b:
                    ed:00:b4:72:75:c7:9d:4c:5a:c6:05:fb:b8:42:99:
                    a0:c5:95:11:2d:c8:2a:d8:15:8e:45:a8:ac:c8:2e:
                    91:64:5c:75:e7:9c:6c:19:20:6e:29:da:8d:aa:f0:
                    4f:cd:51:bd:17:63:3a:e7:75:bf:a6:20:9e:31:9b:
                    eb:a7:86:92:cb:b0:24:58:b3:f4:8d:5a:71:60:56:
                    28:61:89:59:a3:f9:90:4f:2f:0a:b9:5d:5a:2e:07:
                    ab:5a:85:e0:a9:9d:41:f3:fe:2d:4d:5a:88:78:f7:
                    4e:7d:3e:bf:9e:99:97:a4:03:a7:c7:bb:c5:ae:d3:
                    e9:5c:33:b2:f1:3f:9d:c0:e8:29:1b:3c:97:b5:15:
                    c7:42:14:a5:2a:ef:a2:54:2f:4f:b0:d8:f5:d5:bb:
                    83:8c:16:0d:79:cc:07:30:4d:54:07:3e:42:3f:85:
                    a0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:C5:B3:CF:5F:26:38:1E:76:B8:DB:79:86:C7:2A:5F:53:3B:F5
            X509v3 Authority Key Identifier:
                keyid:19:7D:E4:B6:18:0F:CA:09:5E:69:FF:5F:42:03:DA:DC:22:4D:BF:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:38:a9:be:76:8b:f4:ed:74:7d:89:5e:c2:3a:35:e7:dd:
         81:17:9b:62:ae:60:ed:9c:89:e5:b2:c9:b3:f5:02:16:79:d6:
         52:a2:c2:91:b5:b9:4e:4c:f5:64:93:bf:b8:eb:c6:8b:55:61:
         20:a0:61:b3:e4:5b:91:cc:6e:0f:95:ad:40:b6:98:2f:90:99:
         b9:ba:b5:41:45:48:b8:0b:cf:c0:13:56:64:1d:e6:f1:ef:d2:
         93:6a:57:d8:25:64:c2:14:54:c0:1c:9c:5c:28:65:32:0e:2c:
         20:bd:c5:eb:f7:fb:ce:36:14:f7:5e:27:cc:d3:42:0f:37:32:
         bf:42:2d:88:a5:64:35:49:5f:51:d9:2d:3d:e6:4a:12:b2:63:
         a4:3f:fb:6b:b7:3c:22:bd:41:55:8a:97:ef:f2:c1:4c:13:53:
         a2:fe:cc:76:82:ef:1e:33:8f:fd:3d:66:3c:96:ac:ae:e9:54:
         34:3f:df:7e:45:e4:72:17:55:48:b5:71:c4:c6:ef:39:e4:0b:
         6e:37:fa:c9:36:52:b3:4b:16:e8:aa:47:fa:d8:b9:98:8b:ed:
         46:ca:f5:fe:db:7f:9b:68:8b:11:d1:2e:b9:d7:db:08:f8:17:
         fc:e5:83:d8:b4:38:50:7b:9d:a8:fc:57:c2:86:e0:67:a6:ba:
         a9:28:d3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----