Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.mft
File:                     97474013CA486CF79D2DDD137F716DFF7FAC995B.mft (raw, json)
Hash identifier:          tGC9rzjKWp4CdWYxcay/Y49hHDWM6CZ1+LFNDpOquso=
Subject key identifier:   27:68:BE:D9:CF:32:D2:C4:29:2C:2E:A3:E9:18:20:4F:4F:C2:46:D8
Authority key identifier: 97:47:40:13:CA:48:6C:F7:9D:2D:DD:13:7F:71:6D:FF:7F:AC:99:5B
Certificate issuer:       /CN=97474013CA486CF79D2DDD137F716DFF7FAC995B
Certificate serial:       0F6A5C8FC3B9B7CF4E9734BDC76ABE57E52DB7EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.mft
Manifest number:          E1
Signing time:             Thu 19 Sep 2024 15:58:48 +0000
Manifest this update:     Thu 19 Sep 2024 15:53:48 +0000
Manifest next update:     Fri 20 Sep 2024 16:49:48 +0000
Files and hashes:         1: 3137302e3234342e3232342e302f32322d3234203d3e20323636353130.roa (hash: kTDgHb6LVsj1U6X9MdLKFCSVu/jvEzmZpLDcwG9ue1I=)
                          2: 97474013CA486CF79D2DDD137F716DFF7FAC995B.crl (hash: lMt12TIGIlQuR29ycHz6NBdlPMi6FIufT2EWQre0HwY=)
                          3: 323830343a333865633a3a2f33322d3438203d3e20323636353130.roa (hash: 32zf8eehI+ndJxrtBU6JSVQyYjM273MvNLn/+4KN0Ew=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6a:5c:8f:c3:b9:b7:cf:4e:97:34:bd:c7:6a:be:57:e5:2d:b7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97474013CA486CF79D2DDD137F716DFF7FAC995B
        Validity
            Not Before: Sep 19 15:53:48 2024 GMT
            Not After : Sep 20 16:49:48 2024 GMT
        Subject: CN=2768BED9CF32D2C4292C2EA3E918204F4FC246D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:66:4d:72:ec:ba:1c:9e:0f:5a:64:17:a4:
                    55:c9:b2:a7:19:11:6e:27:45:8d:00:f6:5b:c2:b0:
                    dc:a6:33:31:bb:76:1d:34:8b:2f:0a:80:f2:3f:fc:
                    15:bb:8e:bc:ec:42:52:ea:c7:e2:2d:87:7c:41:a4:
                    d4:70:e9:0b:3b:1b:c4:d7:99:ad:4d:c5:b7:66:52:
                    90:b4:d0:ac:f9:2d:1e:fe:9e:ec:03:6a:4f:b8:23:
                    d7:4f:34:85:fb:25:ef:4c:c9:40:1f:3c:25:bd:d4:
                    85:23:24:cd:52:8e:89:ff:08:61:1c:9e:1c:d4:8a:
                    26:91:8d:55:bf:e7:06:8e:e4:08:0d:0a:dc:ce:f8:
                    19:e9:e2:9b:82:56:20:90:0b:e7:a8:6b:04:7d:9e:
                    06:c3:ab:75:6a:83:46:8f:e7:4d:ae:73:f7:1a:7e:
                    da:de:ea:80:ff:0b:f2:61:ed:1e:9d:16:98:1e:8a:
                    4d:3a:9d:b7:41:d0:44:2d:12:54:7e:0b:af:c5:3d:
                    ca:64:86:3c:ed:3e:d6:f8:9f:68:35:dc:c4:75:22:
                    b1:7e:aa:fa:bf:09:0d:ea:28:ea:4e:77:0c:e2:24:
                    07:ec:a4:f0:4f:86:35:13:90:df:2a:4a:a7:f5:c4:
                    77:5e:6b:e2:5c:36:3c:67:19:6f:a2:8f:59:13:bc:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:BE:D9:CF:32:D2:C4:29:2C:2E:A3:E9:18:20:4F:4F:C2:46:D8
            X509v3 Authority Key Identifier:
                keyid:97:47:40:13:CA:48:6C:F7:9D:2D:DD:13:7F:71:6D:FF:7F:AC:99:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:11:f9:0a:73:bf:6c:cd:ed:24:87:36:bc:df:a7:0d:50:
         3e:bb:27:5a:d5:af:39:97:6e:a0:fc:3e:74:65:7b:c9:99:79:
         21:bf:b3:f0:f6:af:ad:a9:bb:90:28:b3:54:8c:12:43:a4:c8:
         84:f1:73:78:06:87:e2:05:26:b9:5d:c0:3b:63:d2:e5:5d:bd:
         ed:ab:ed:19:54:7e:49:8d:60:96:34:bf:df:f7:59:75:82:e3:
         dd:79:6f:1c:4b:ee:f9:56:9c:28:c9:3d:26:46:ae:3b:46:fd:
         f8:a8:f5:a4:2b:b4:a3:7d:09:04:ae:20:1d:8b:28:16:e1:10:
         c1:e1:17:2e:7b:f4:d2:c1:03:f0:0a:fc:06:ca:e4:02:ce:da:
         25:55:2d:f1:8e:ea:bd:ac:63:43:32:84:23:f6:3a:97:71:af:
         ee:2f:e4:71:b4:1d:dc:dc:e7:3f:4e:56:f9:08:e0:ee:b0:3b:
         f0:9e:29:99:e5:55:87:7d:18:e8:46:18:2a:60:f3:09:18:b6:
         e5:8f:cc:63:65:c2:28:ff:1a:7d:bd:3b:4c:6d:67:5e:cd:13:
         3c:71:ee:07:b0:a6:c5:51:4b:29:4c:ec:5a:02:b4:2d:fe:b7:
         82:da:e4:d5:c3:eb:ee:a0:cd:f3:33:38:09:76:39:7c:36:62:
         08:e3:13:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----