Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/4108FDAFD23A629171E45C2E18CFD743DE65C108.mft
File:                     4108FDAFD23A629171E45C2E18CFD743DE65C108.mft (raw, json)
Hash identifier:          XVzr/yB7wFcucbMZm1xA/GvvOxYslGxpIBeN+lcTH6c=
Subject key identifier:   2C:3D:6D:73:40:CF:05:6E:0E:D3:F4:68:A2:04:75:A8:26:72:32:0F
Authority key identifier: 41:08:FD:AF:D2:3A:62:91:71:E4:5C:2E:18:CF:D7:43:DE:65:C1:08
Certificate issuer:       /CN=4108FDAFD23A629171E45C2E18CFD743DE65C108
Certificate serial:       3749A2AE925B3A0C107367FCAA75BEDC6B49EEA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4108FDAFD23A629171E45C2E18CFD743DE65C108.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/4108FDAFD23A629171E45C2E18CFD743DE65C108.mft
Manifest number:          0A
Signing time:             Thu 24 Oct 2024 11:10:22 +0000
Manifest this update:     Thu 24 Oct 2024 11:05:22 +0000
Manifest next update:     Fri 25 Oct 2024 12:46:22 +0000
Files and hashes:         1: 34352e3136362e3230312e302f32342d3234203d3e20323638303333.roa (hash: X4YlPSumLM1ND3sPVAbbCMriGPA32+r9PeWBQb4F1cM=)
                          2: 34352e3136362e3230302e302f32342d3234203d3e20323638303333.roa (hash: zlAoBB0FGxGghfM6snZtoU4UDo0V7PHs+Qj0Qz7S8ec=)
                          3: 34352e3136362e3230322e302f32342d3234203d3e20323638303333.roa (hash: NnITuNM3jhFpv2auEkt34c9j+fUyvsKb/a0XpMXSubE=)
                          4: 323830343a353666303a3a2f33352d3335203d3e20323638303333.roa (hash: zsMj1k1Uol9BMOJLGb3WxEyGJwOvwGuFiS22xPDXL40=)
                          5: 323830343a353666303a383030303a3a2f33342d3334203d3e20323638303333.roa (hash: xj0sxZsEfPCTPoNjx8HuUmrbbZMBdX/XAaoyEVsdy2w=)
                          6: 323830343a353666303a383030303a3a2f33332d3333203d3e20323638303333.roa (hash: vuUxZPGx4vSRO9IsQpbZIAjx+mVkIdh7f4/Zwq2aH0Y=)
                          7: 34352e3136362e3230302e302f32332d3233203d3e20323638303333.roa (hash: N8Iu8H346eLGabUTXXc8AcgjJz2/FYydUCLy8HmvvX0=)
                          8: 323830343a353666303a3a2f33332d3333203d3e20323638303333.roa (hash: toAtuVJV/2VLcK0c5oFrb3iv5tPrhHcGE9ood2TEQes=)
                          9: 34352e3136362e3230302e302f32322d3232203d3e20323638303333.roa (hash: roVzvvQTB2rBn6dxN6JXOcpjQ08wmjuyaU3silyHI88=)
                          10: 34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa (hash: LdFsn3Wkj0sKMtPQy+TwEZTPiaQ9rQGPeSFJL2AnDFo=)
                          11: 323830343a353666303a343030303a3a2f33342d3334203d3e20323638303333.roa (hash: ueUGZ/4awdEzcbA6xYl/FEm6P1NxS5pqXxHO2a0TafU=)
                          12: 323830343a353666303a3a2f33342d3334203d3e20323638303333.roa (hash: T+EsFUc/3n1batvJo2wLxGVV+OgbjhOezyID+w41aZ8=)
                          13: 323830343a353666303a3a2f33322d3332203d3e20323638303333.roa (hash: EoQtL0GgWdxi9DRmsuceDKiEtU5BHjlO/uHEiZAurkw=)
                          14: 34352e3136362e3230322e302f32332d3233203d3e20323638303333.roa (hash: h9sqUo5YoAd3Wj/n//G0i36X4mFRHvn4RNmR+AGo4Y0=)
                          15: 323830343a353666303a323030303a3a2f33352d3335203d3e20323638303333.roa (hash: ECTmNTD/oay35Uq61y38QlZv5E7nHxj6uqvBOg1/qjA=)
                          16: 323830343a353666303a633030303a3a2f33342d3334203d3e20323638303333.roa (hash: EcHtvrXu6A3oq7YXfw32xZkh+enLC/6dXU2O5Xz78kI=)
                          17: 4108FDAFD23A629171E45C2E18CFD743DE65C108.crl (hash: DNEfwiro7Cgq5PbnvcIG+dyWAuNhymdvlpFzI3WHWOU=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:49:a2:ae:92:5b:3a:0c:10:73:67:fc:aa:75:be:dc:6b:49:ee:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4108FDAFD23A629171E45C2E18CFD743DE65C108
        Validity
            Not Before: Oct 24 11:05:22 2024 GMT
            Not After : Oct 25 12:46:22 2024 GMT
        Subject: CN=2C3D6D7340CF056E0ED3F468A20475A82672320F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:72:5b:c2:a8:af:ba:38:77:5a:a2:2c:77:
                    58:e6:d3:98:74:28:63:5a:b7:3b:e6:90:42:da:ce:
                    e0:f1:01:4c:68:b1:f9:ff:1f:e7:35:98:6c:cb:51:
                    22:c8:e3:44:95:38:e5:01:7b:21:bb:fd:9c:ec:6c:
                    18:ff:fd:27:03:03:6e:35:b9:bb:a8:2e:41:a5:4c:
                    8e:a2:63:37:e6:96:5d:cd:8f:01:d5:6d:ce:51:26:
                    af:c7:7d:e3:0b:37:d0:c4:ce:08:78:cb:7d:7d:bb:
                    97:64:1b:ea:f7:26:85:4e:27:a1:1b:7d:4c:b0:9f:
                    c4:9a:dd:da:c9:c2:da:b3:c2:9b:fe:ad:99:36:24:
                    e0:dd:c1:84:76:5d:3a:89:1f:95:c3:f5:88:5d:84:
                    a9:0e:a0:cf:87:07:2b:e7:56:d8:c6:60:ff:7f:11:
                    88:2c:3b:7d:59:64:25:6b:e3:8f:80:5f:06:1e:38:
                    3c:68:43:7c:e8:30:14:36:0b:48:69:21:3b:28:92:
                    d3:b1:5a:77:f7:d7:48:67:9d:10:8f:e8:dd:64:8a:
                    17:1c:e1:35:9a:0d:84:29:d8:b8:82:60:f9:ae:5c:
                    ae:30:41:85:71:0a:9f:03:84:31:9e:e8:60:2e:84:
                    20:b9:b9:4e:e6:32:4d:4d:f1:d7:dc:91:b7:68:98:
                    46:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3D:6D:73:40:CF:05:6E:0E:D3:F4:68:A2:04:75:A8:26:72:32:0F
            X509v3 Authority Key Identifier:
                keyid:41:08:FD:AF:D2:3A:62:91:71:E4:5C:2E:18:CF:D7:43:DE:65:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/4108FDAFD23A629171E45C2E18CFD743DE65C108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4108FDAFD23A629171E45C2E18CFD743DE65C108.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/4108FDAFD23A629171E45C2E18CFD743DE65C108.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:b5:ec:ce:e4:0e:4e:4d:ec:b2:f4:ad:3d:9e:13:3a:37:
         80:09:b1:d7:90:66:d4:78:ed:6d:a3:1d:f0:9c:15:0a:23:32:
         51:3c:0b:c5:3a:e2:50:fe:5f:29:c6:55:43:d2:a3:7a:13:0b:
         bb:06:32:b3:bd:7c:0c:c7:0f:ed:92:3c:f7:50:1b:fd:0f:e5:
         e1:47:f9:96:22:bb:4c:16:e2:8a:bb:ec:ee:d1:b2:38:e2:4c:
         97:07:6f:a2:31:79:ab:3b:e8:82:17:63:d9:80:d5:c2:7f:45:
         90:f2:68:97:bb:44:e0:36:ec:2d:bc:28:01:be:6a:41:dc:2a:
         49:93:10:5c:25:03:ac:76:ea:34:27:7e:53:0b:dd:1b:c7:63:
         ec:bf:c4:32:19:94:4c:ec:bf:0f:c3:72:6a:c5:e1:1e:cb:e1:
         77:0e:f4:d4:e1:74:cf:6f:89:77:4c:1a:da:21:a0:e0:97:0f:
         d2:d7:d2:03:7e:27:ab:a3:02:1e:6b:57:e6:83:aa:f7:0d:91:
         b7:f3:09:ed:6b:24:25:f0:73:27:5b:09:2d:55:8e:2b:f9:4d:
         c4:04:f6:80:70:5d:60:20:29:61:34:1c:33:c2:14:97:65:11:
         e1:fc:f4:bb:5b:49:9d:61:c7:98:f3:48:68:7c:c0:b3:2d:0d:
         0a:70:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----