Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.mft
File:                     1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.mft (raw, json)
Hash identifier:          hpaX/zouO5Q7l+hMfwuhu5lsrhpGNQLPtblY+Y9vm70=
Subject key identifier:   4E:84:23:42:FF:91:FD:CD:72:44:8B:F2:B8:00:31:C5:01:C1:D6:41
Authority key identifier: 1C:BE:AA:86:D0:3E:F7:AE:CC:65:6C:CE:5B:40:03:57:45:9E:F7:D6
Certificate issuer:       /CN=1CBEAA86D03EF7AECC656CCE5B400357459EF7D6
Certificate serial:       21D05379692AE75FCA0A204D34EB7576CADF1680
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.mft
Manifest number:          86
Signing time:             Fri 12 Jul 2024 21:15:36 +0000
Manifest this update:     Fri 12 Jul 2024 21:10:36 +0000
Manifest next update:     Sat 13 Jul 2024 21:49:36 +0000
Files and hashes:         1: 323830343a373565633a3a2f33322d3536203d3e20323731303738.roa (hash: QOqyypNjWgG/xIJUUl+EtWRNOUKNGWX04EMPMFkn7Os=)
                          2: 34352e362e3234342e302f32322d3234203d3e20323731303738.roa (hash: OLqt77pA227fCWKZVS1raoXOClHWGC/l7iOazIdUA68=)
                          3: 1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.crl (hash: SsXvOTZtVgIB7dTHWrm01I51N1Fb1WVwr/zfJt5vOq8=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d0:53:79:69:2a:e7:5f:ca:0a:20:4d:34:eb:75:76:ca:df:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CBEAA86D03EF7AECC656CCE5B400357459EF7D6
        Validity
            Not Before: Jul 12 21:10:36 2024 GMT
            Not After : Jul 13 21:49:36 2024 GMT
        Subject: CN=4E842342FF91FDCD72448BF2B80031C501C1D641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b2:ef:78:76:e7:92:6a:e2:b5:c5:c3:6a:d2:
                    a1:32:fb:9a:67:5e:f8:be:d0:63:ac:13:72:ea:f8:
                    a3:42:35:cd:9c:35:04:5e:a4:e5:db:39:28:6b:f1:
                    22:97:ba:8f:3b:0b:cd:a2:d9:4c:15:56:b7:6a:8c:
                    a7:0c:66:0d:c0:0a:47:e4:46:2b:42:3d:a7:99:27:
                    63:d0:85:d8:64:30:30:3f:52:6d:67:f7:3d:0d:88:
                    56:30:0f:dd:6f:b4:2a:e9:5b:79:e0:d5:a4:0c:cd:
                    7f:ea:73:ea:8e:21:e5:52:bd:b2:f7:1f:09:31:d8:
                    43:f5:94:bc:58:53:9c:ba:69:bd:24:df:d7:42:a2:
                    36:c1:02:31:f1:d7:48:79:2e:f6:4c:59:dc:17:2b:
                    db:96:4d:7a:6d:8b:2d:56:75:20:83:63:53:6e:8b:
                    f0:39:e1:d3:ad:9e:da:df:30:c1:96:40:7d:89:17:
                    cd:36:c7:20:20:10:80:b7:4b:6c:f0:15:3d:cb:94:
                    44:a9:7f:ee:05:dc:d6:e1:1d:8a:fa:94:72:77:dd:
                    96:31:db:47:da:e7:28:30:34:da:b3:f5:ea:b5:e7:
                    9d:99:f9:40:a9:d0:d6:27:5d:54:c5:83:84:16:6f:
                    25:bb:67:60:99:7d:2e:b5:09:b0:6f:8a:e9:2a:46:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:84:23:42:FF:91:FD:CD:72:44:8B:F2:B8:00:31:C5:01:C1:D6:41
            X509v3 Authority Key Identifier:
                keyid:1C:BE:AA:86:D0:3E:F7:AE:CC:65:6C:CE:5B:40:03:57:45:9E:F7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:fb:99:66:04:03:58:5c:21:a3:1e:e8:67:ee:a3:36:1c:d6:
         25:8d:d8:5a:98:aa:30:0d:94:16:74:51:9b:0b:54:51:64:eb:
         66:45:45:be:0a:76:b7:de:78:53:14:8c:7f:d5:56:82:81:e4:
         3a:1a:7e:47:6c:01:4c:99:11:5d:77:75:17:f2:d1:44:06:77:
         3d:5e:53:50:56:7e:fd:27:6c:8b:12:f4:61:af:b1:19:77:45:
         e3:5f:36:17:ed:8d:5e:24:4a:ce:e8:06:6b:2c:f2:59:aa:d9:
         70:18:ee:c6:ec:e8:40:1d:0f:7e:50:4e:b3:dc:b6:38:20:8e:
         8f:16:72:7c:10:31:ee:82:67:a7:88:fd:42:1d:05:01:ce:7f:
         5f:95:10:35:30:15:4d:4f:ce:85:4b:30:e8:f1:5a:3a:2b:59:
         62:2d:4b:a5:d1:70:3a:27:27:bd:aa:ee:44:5e:93:59:3f:12:
         89:a1:ed:16:cf:05:9c:4b:ce:10:8a:02:e8:ed:4a:da:9b:8c:
         fb:81:b1:0a:61:57:39:8c:11:36:e1:8e:1a:a7:e6:19:9f:a3:
         e9:a4:ec:79:eb:a4:11:c6:46:e6:72:2f:94:6d:f9:93:6f:5d:
         6b:70:f7:fa:f9:62:e2:8d:e3:ce:af:c7:47:c1:fb:35:3b:74:
         25:28:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----