Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.mft
File:                     0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.mft (raw, json)
Hash identifier:          N03oa4MEF9E+fcrD1now3Q21egSNGPtSqS81XTB5JBI=
Subject key identifier:   88:3A:AA:B4:76:19:D5:8E:AC:6B:A3:88:31:AB:19:35:57:56:28:0C
Authority key identifier: 03:06:DD:90:02:F6:DF:CE:DE:0A:16:C9:1D:0E:5F:53:7A:01:17:BA
Certificate issuer:       /CN=0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA
Certificate serial:       45D03E604BA0B06B31C22F7544A6B68AE070D087
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.mft
Manifest number:          75
Signing time:             Mon 15 Jul 2024 23:05:44 +0000
Manifest this update:     Mon 15 Jul 2024 23:00:44 +0000
Manifest next update:     Wed 17 Jul 2024 01:35:44 +0000
Files and hashes:         1: 323830343a346436633a3a2f33322d313238203d3e20323638313935.roa (hash: 8TpS7FGYM7stsTFKgZUWgGMQEEe+fjCwrTmUD/Zj/AY=)
                          2: 34352e3233352e3130302e302f32322d3332203d3e20323638313935.roa (hash: +WhsqwghzOL2GISaLfTj4gAjXdw+eRpIRacuXydGGsg=)
                          3: 0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.crl (hash: 6PNkbktEoVP+et4mFb2P88s7awNMpFqb5D/AftJ/fzk=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d0:3e:60:4b:a0:b0:6b:31:c2:2f:75:44:a6:b6:8a:e0:70:d0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA
        Validity
            Not Before: Jul 15 23:00:44 2024 GMT
            Not After : Jul 17 01:35:44 2024 GMT
        Subject: CN=883AAAB47619D58EAC6BA38831AB19355756280C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:c9:a5:2b:0d:e8:cd:9b:9b:20:28:88:bf:
                    8e:7b:33:d5:64:3a:db:59:af:d6:80:0c:dd:7a:c4:
                    ad:7e:8b:2b:ef:51:f6:1c:46:2f:91:be:dc:2d:f3:
                    aa:56:f9:f2:6b:6a:00:fc:e4:d1:03:9b:11:a6:c7:
                    15:23:34:1e:7a:a0:c8:a5:43:bb:aa:39:bc:18:50:
                    12:22:dc:fe:8a:b1:40:b8:a7:58:b3:ce:ea:d5:37:
                    4b:1a:bf:b7:aa:cd:95:1d:4b:43:71:b4:df:9c:39:
                    28:94:ef:d3:d2:ef:d8:34:d6:b2:85:ba:f2:2e:9b:
                    90:9a:7b:90:f7:04:0f:b0:0e:cf:1c:ec:b7:b5:ef:
                    15:e7:40:73:c8:73:7c:19:3c:56:a7:0b:da:98:75:
                    10:f1:8b:3b:b7:28:ee:12:ab:02:05:7b:86:63:7d:
                    55:93:44:f5:98:e8:e4:1c:26:5f:1a:df:1f:dc:38:
                    f9:2e:c6:9a:1f:48:3e:f1:ec:48:80:33:d5:b8:7d:
                    46:5e:59:89:23:d0:8a:ca:e9:92:49:93:99:d6:fd:
                    67:84:2d:37:a5:71:21:5e:f5:ed:cf:bf:33:28:f8:
                    e1:1a:93:46:d3:78:b9:9e:fe:ae:90:70:e5:5d:c6:
                    24:1a:74:f4:86:1f:37:29:1c:98:70:46:8c:5c:83:
                    85:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:AA:B4:76:19:D5:8E:AC:6B:A3:88:31:AB:19:35:57:56:28:0C
            X509v3 Authority Key Identifier:
                keyid:03:06:DD:90:02:F6:DF:CE:DE:0A:16:C9:1D:0E:5F:53:7A:01:17:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:be:d8:3a:5c:9c:c1:9e:3f:06:7b:38:60:21:ec:f2:fe:
         5c:ad:36:91:fd:14:6a:84:45:2b:55:0d:4f:70:62:b2:2c:b6:
         c5:6a:b9:f8:d2:f8:09:ca:24:db:f0:03:3a:9c:b5:8a:9d:a2:
         85:b8:99:08:e6:fe:bd:b2:89:6c:c5:51:99:1b:57:ed:8e:c0:
         a6:86:ad:47:b8:4c:ca:f9:a8:5a:f3:d2:b1:d5:3c:b3:02:d9:
         93:73:4a:1a:7a:88:54:ca:6d:3a:a8:e6:c6:6b:b5:ef:87:37:
         a9:2d:89:81:04:4a:e1:b0:02:01:8e:c0:f0:20:ea:f2:98:e2:
         0a:ec:9c:05:13:e2:40:2c:12:4c:35:06:b9:ad:db:ab:28:15:
         50:f1:b3:82:b0:84:3a:42:5f:65:ff:41:9b:f8:08:5c:33:87:
         5d:a4:12:0a:39:3d:a0:53:e9:f0:60:f6:e0:f2:e3:c9:c2:93:
         93:de:32:c0:13:53:c5:e4:14:8a:9e:bc:4e:26:f0:c2:38:e3:
         69:ed:f7:04:6d:6d:ce:f6:d9:1e:0e:00:be:ca:a5:b6:43:74:
         91:da:4d:b1:5b:af:55:f5:df:aa:4f:5e:53:2b:9f:e6:84:34:
         c1:0e:52:ec:ea:7d:5f:20:db:6a:cd:47:8c:8f:23:9b:b6:67:
         e6:dd:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----