Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/D688CC4B42325E3A36E294BDD732C0A7D36E9193.mft
File:                     D688CC4B42325E3A36E294BDD732C0A7D36E9193.mft (raw, json)
Hash identifier:          Zyn/mU6+gZDg3+gL8//GbjvKxY95mZCvPNt6IgHiLbk=
Subject key identifier:   81:A5:37:9D:C8:EA:E2:CC:A4:FB:B0:5B:5D:33:89:6B:1F:FC:ED:F5
Authority key identifier: D6:88:CC:4B:42:32:5E:3A:36:E2:94:BD:D7:32:C0:A7:D3:6E:91:93
Certificate issuer:       /CN=D688CC4B42325E3A36E294BDD732C0A7D36E9193
Certificate serial:       295BFE915FAD7A9C28EBA291D11689DA33A941FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D688CC4B42325E3A36E294BDD732C0A7D36E9193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/D688CC4B42325E3A36E294BDD732C0A7D36E9193.mft
Manifest number:          2B
Signing time:             Thu 19 Sep 2024 00:00:52 +0000
Manifest this update:     Wed 18 Sep 2024 23:55:52 +0000
Manifest next update:     Fri 20 Sep 2024 03:08:52 +0000
Files and hashes:         1: 323830343a336162303a3a2f33322d313238203d3e20323636313033.roa (hash: YLn33U/bjRmgKXU0gPQ6UiGPs5OB6vw52HNqRlMxMOg=)
                          2: D688CC4B42325E3A36E294BDD732C0A7D36E9193.crl (hash: aaqNlYWLT2G2GRTTSJwzwPQwq2gj082YCUimNvHguBA=)
                          3: 34352e352e3134342e302f32322d3332203d3e20323636313033.roa (hash: d7ehNZPyxE6LFCEkIDA6L0ohXfHtoIUhqPg1Ks3Eyvg=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5b:fe:91:5f:ad:7a:9c:28:eb:a2:91:d1:16:89:da:33:a9:41:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D688CC4B42325E3A36E294BDD732C0A7D36E9193
        Validity
            Not Before: Sep 18 23:55:52 2024 GMT
            Not After : Sep 20 03:08:52 2024 GMT
        Subject: CN=81A5379DC8EAE2CCA4FBB05B5D33896B1FFCEDF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:35:f2:4b:98:ae:80:a4:3e:ee:60:0b:0f:
                    3a:40:a2:3d:b3:8f:57:2a:e7:fd:eb:ec:fc:17:7d:
                    3c:75:7c:08:c2:ac:b8:a9:8a:78:e6:e7:7e:b8:06:
                    49:b5:a1:27:2a:be:ae:ea:77:d0:50:fd:16:f6:23:
                    6c:97:14:33:6d:f3:15:88:3e:df:5a:10:5c:82:79:
                    e3:9d:90:f6:f1:66:d6:f0:95:dd:b4:d4:68:44:38:
                    4f:3b:f2:84:0c:08:04:3f:33:93:b0:a7:6e:ae:a2:
                    dc:ca:00:e9:52:2b:19:14:bb:1e:8e:b3:4a:0b:4b:
                    95:cc:91:0f:93:cb:d2:50:ba:d9:36:5b:44:8e:87:
                    c0:83:7f:38:70:cb:97:e4:e8:67:2c:b0:f4:0f:e1:
                    30:b4:de:9e:75:10:d8:58:93:0e:8e:a9:36:92:57:
                    2d:ce:17:16:75:2e:0f:71:c4:a8:69:33:e6:a5:bb:
                    63:14:7b:33:6e:65:77:c8:5e:b4:a9:0f:05:47:4b:
                    82:ea:5e:6e:dc:51:33:f5:27:5a:5b:64:3f:84:f5:
                    99:31:92:a2:2d:57:e5:51:56:27:22:83:9b:5c:61:
                    cf:33:35:78:57:30:08:bb:52:65:a8:61:10:c6:62:
                    60:1b:82:a0:21:01:b3:31:a5:d3:b5:af:41:e9:6a:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A5:37:9D:C8:EA:E2:CC:A4:FB:B0:5B:5D:33:89:6B:1F:FC:ED:F5
            X509v3 Authority Key Identifier:
                keyid:D6:88:CC:4B:42:32:5E:3A:36:E2:94:BD:D7:32:C0:A7:D3:6E:91:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/D688CC4B42325E3A36E294BDD732C0A7D36E9193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D688CC4B42325E3A36E294BDD732C0A7D36E9193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/D688CC4B42325E3A36E294BDD732C0A7D36E9193.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:84:70:fb:9c:9a:78:0a:81:54:93:4b:4b:cc:f9:29:94:80:
         21:ae:22:44:37:5e:92:e3:85:c7:40:4d:de:22:6f:3c:2a:48:
         f0:3c:51:2d:09:e3:54:8b:a9:f9:75:7a:55:da:46:86:71:11:
         6a:ca:ed:ec:06:0f:65:1c:e2:13:c4:b0:4b:17:ba:c1:aa:3e:
         88:76:b0:ef:c7:a0:67:1e:e9:d5:70:be:2b:e2:21:29:db:42:
         28:3e:89:bc:e6:25:cb:af:da:60:96:cf:8b:52:5a:09:6c:f4:
         90:5c:62:48:d4:5f:db:5d:89:d6:54:80:d4:5f:d9:16:3c:14:
         d8:38:dd:81:0e:1e:be:6a:f9:3a:6d:32:19:23:a4:a9:28:b5:
         5a:5e:cd:f4:fc:99:99:15:69:fa:61:31:45:32:bf:ba:fd:e2:
         05:2b:ca:d3:22:51:bc:2a:d2:5e:d7:d0:b0:f4:4b:6e:7a:ae:
         ff:e6:e7:e1:c0:8b:27:2e:df:5e:80:fa:f2:fb:79:80:ea:7f:
         0b:b1:fb:58:01:f6:ec:24:17:38:c6:e1:95:3b:15:34:12:fe:
         2b:07:73:d3:88:d2:20:a4:ac:1a:df:c7:70:aa:c9:6d:f4:cd:
         e2:68:a7:9b:33:20:10:9f:fe:34:84:49:ae:0e:2a:b9:88:5b:
         b9:8f:b0:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKVv+kV+tepwo66KR0RaJ2jOpQf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4OENDNEI0MjMyNUUzQTM2RTI5NEJERDczMkMwQTdE
MzZFOTE5MzAeFw0yNDA5MTgyMzU1NTJaFw0yNDA5MjAwMzA4NTJaMDMxMTAvBgNV
BAMTKDgxQTUzNzlEQzhFQUUyQ0NBNEZCQjA1QjVEMzM4OTZCMUZGQ0VERjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaDXyS5iugKQ+7mALDzpAoj2z
j1cq5/3r7PwXfTx1fAjCrLipinjm5364Bkm1oScqvq7qd9BQ/Rb2I2yXFDNt8xWI
Pt9aEFyCeeOdkPbxZtbwld201GhEOE878oQMCAQ/M5Owp26uotzKAOlSKxkUux6O
s0oLS5XMkQ+Ty9JQutk2W0SOh8CDfzhwy5fk6GcssPQP4TC03p51ENhYkw6OqTaS
Vy3OFxZ1Lg9xxKhpM+alu2MUezNuZXfIXrSpDwVHS4LqXm7cUTP1J1pbZD+E9Zkx
kqItV+VRVicig5tcYc8zNXhXMAi7UmWoYRDGYmAbgqAhAbMxpdO1r0HpasZfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgaU3ncjq4syk+7BbXTOJax/87fUwHwYDVR0j
BBgwFoAU1ojMS0IyXjo24pS91zLAp9NukZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUR0Y1hqWWhuZmt4M21XM1BLTFhxdFVLOEVBYjJQOXpEWkdNZnNpTWRX
eFMvMC9ENjg4Q0M0QjQyMzI1RTNBMzZFMjk0QkRENzMyQzBBN0QzNkU5MTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODhDQzRCNDIzMjVFM0Ez
NkUyOTRCREQ3MzJDMEE3RDM2RTkxOTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUR0Y1hqWWhuZmt4M21XM1BLTFhxdFVLOEVBYjJQOXpEWkdNZnNpTWRXeFMvMC9E
Njg4Q0M0QjQyMzI1RTNBMzZFMjk0QkRENzMyQzBBN0QzNkU5MTkzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWYRw+5yaeAqBVJNLS8z5KZSAIa4iRDdekuOFx0BN3iJvPCpI8DxRLQnjVIup
+XV6VdpGhnERasrt7AYPZRziE8SwSxe6wao+iHaw78egZx7p1XC+K+IhKdtCKD6J
vOYly6/aYJbPi1JaCWz0kFxiSNRf212J1lSA1F/ZFjwU2DjdgQ4evmr5Om0yGSOk
qSi1Wl7N9PyZmRVp+mExRTK/uv3iBSvK0yJRvCrSXtfQsPRLbnqu/+bn4cCLJy7f
XoD68vt5gOp/C7H7WAH27CQXOMbhlTsVNBL+Kwdz04jSIKSsGt/HcKrJbfTN4min
mzMgEJ/+NIRJrg4quYhbuY+wTw==
-----END CERTIFICATE-----