Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.mft
File:                     BF234AB2322E7E5B16EF5E5FE90EFF330E062728.mft (raw, json)
Hash identifier:          ymCjKb6sOthUw43TwTylfx6M3Dfpb5LycwEgKKClGPk=
Subject key identifier:   4A:50:37:50:6D:E3:B0:68:AD:B4:00:BA:47:32:2C:CC:BD:91:9E:0F
Authority key identifier: BF:23:4A:B2:32:2E:7E:5B:16:EF:5E:5F:E9:0E:FF:33:0E:06:27:28
Certificate issuer:       /CN=BF234AB2322E7E5B16EF5E5FE90EFF330E062728
Certificate serial:       01D713A7D42A8BF1E42CE691B0B9B148C763146B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.mft
Manifest number:          43
Signing time:             Mon 24 Jun 2024 22:06:12 +0000
Manifest this update:     Mon 24 Jun 2024 22:01:12 +0000
Manifest next update:     Tue 25 Jun 2024 23:27:12 +0000
Files and hashes:         1: 323830343a363261633a3a2f33322d3438203d3e20323639333131.roa (hash: GF/Vb0K2hqYsfszumwtruldB7dDlCXWXoUMlKcQbDfw=)
                          2: 34352e3138342e34342e302f32322d3234203d3e20323639333131.roa (hash: IxKPRBidygZpQvyjW5PUaD4xVnf+37vJ6Nk+SaotFQE=)
                          3: BF234AB2322E7E5B16EF5E5FE90EFF330E062728.crl (hash: HlGsybx1Gl3M2WX0Xggj92VuMhpkmDBwL4Z/0W+IGP8=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d7:13:a7:d4:2a:8b:f1:e4:2c:e6:91:b0:b9:b1:48:c7:63:14:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF234AB2322E7E5B16EF5E5FE90EFF330E062728
        Validity
            Not Before: Jun 24 22:01:12 2024 GMT
            Not After : Jun 25 23:27:12 2024 GMT
        Subject: CN=4A5037506DE3B068ADB400BA47322CCCBD919E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:b7:26:d1:3e:cb:fc:dd:a8:76:e5:24:73:
                    ac:b6:05:76:76:42:ac:84:d6:c8:b3:35:e8:d0:02:
                    a8:63:a2:82:16:21:4c:ce:c6:36:b1:91:b9:a1:9b:
                    30:2f:64:66:b2:da:fd:b0:ff:67:28:cb:da:6d:a3:
                    5c:1d:29:1e:f9:e5:91:50:7a:8e:b3:8c:01:bf:5c:
                    6e:03:9a:77:90:05:12:a2:e7:23:f4:f8:70:9a:33:
                    5d:fc:3c:83:c2:32:c8:1a:3d:5c:15:f0:4f:6f:3c:
                    18:0b:c8:73:53:81:c7:30:82:4b:03:4e:f3:30:62:
                    ed:fb:31:1e:32:27:6f:7b:ed:68:dc:ff:d5:82:33:
                    33:14:cc:67:37:d1:6a:14:79:92:0c:89:9e:1e:5a:
                    53:e0:27:7c:ce:3c:21:f3:38:56:79:84:b6:0e:02:
                    b4:c5:f7:02:9b:0e:49:ec:3d:04:99:76:1f:8f:79:
                    45:4a:32:6f:74:38:c2:d2:3b:8f:d3:dc:f5:eb:5a:
                    8c:34:04:13:e7:de:28:21:7b:55:2f:0a:ad:f4:f5:
                    63:e6:fb:e5:96:3d:af:67:98:1a:d7:54:9b:d8:40:
                    47:16:fc:12:be:f2:b1:44:ea:5e:b6:07:dc:be:ee:
                    0d:5f:c9:e5:e2:35:da:e4:7f:03:f2:0d:c3:f0:48:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:37:50:6D:E3:B0:68:AD:B4:00:BA:47:32:2C:CC:BD:91:9E:0F
            X509v3 Authority Key Identifier:
                keyid:BF:23:4A:B2:32:2E:7E:5B:16:EF:5E:5F:E9:0E:FF:33:0E:06:27:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:31:68:0f:99:30:4d:a2:16:57:cd:4b:0f:bd:66:a2:40:3c:
         1b:91:52:35:de:36:89:cf:8f:2e:76:f2:a0:a1:c4:a8:a2:2f:
         2d:12:73:cb:73:3d:b8:23:f0:8c:9f:46:27:53:98:79:78:f5:
         95:a0:51:1b:b9:86:91:14:4e:cb:0e:68:1d:3d:f3:0d:46:53:
         3e:2a:19:cc:ea:a9:7d:0e:ed:2e:56:93:46:f8:22:ce:4a:d9:
         fc:34:c0:c2:ad:8d:92:c8:da:8f:36:df:06:88:d6:e0:51:e9:
         d3:aa:7f:9f:8a:9b:c1:9d:01:93:42:14:19:86:96:8a:6d:51:
         9b:97:5f:58:ad:9a:8d:85:5f:cd:d1:6b:c1:27:0b:5d:ec:be:
         73:40:df:bd:ee:62:b2:92:c8:8a:1c:7d:d6:1a:38:f7:e7:df:
         92:57:4e:1f:0b:fc:3b:5f:14:62:15:7c:ae:40:ea:32:91:01:
         a1:c6:fe:a1:5d:8b:a6:28:d0:54:fd:2b:85:75:35:03:ba:9a:
         e0:08:e5:bc:10:7b:5a:36:0c:7e:fb:b9:66:23:1d:f7:88:86:
         a1:7f:be:49:77:5f:9e:10:6b:e4:5c:b8:70:92:5b:14:85:24:
         0e:7a:32:a9:33:3a:31:48:19:bb:c9:93:e1:f9:78:ac:71:e7:
         80:76:38:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAdcTp9Qqi/HkLOaRsLmxSMdjFGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYyMzRBQjIzMjJFN0U1QjE2RUY1RTVGRTkwRUZGMzMw
RTA2MjcyODAeFw0yNDA2MjQyMjAxMTJaFw0yNDA2MjUyMzI3MTJaMDMxMTAvBgNV
BAMTKDRBNTAzNzUwNkRFM0IwNjhBREI0MDBCQTQ3MzIyQ0NDQkQ5MTlFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZLcm0T7L/N2oduUkc6y2BXZ2
QqyE1sizNejQAqhjooIWIUzOxjaxkbmhmzAvZGay2v2w/2coy9pto1wdKR755ZFQ
eo6zjAG/XG4DmneQBRKi5yP0+HCaM138PIPCMsgaPVwV8E9vPBgLyHNTgccwgksD
TvMwYu37MR4yJ2977Wjc/9WCMzMUzGc30WoUeZIMiZ4eWlPgJ3zOPCHzOFZ5hLYO
ArTF9wKbDknsPQSZdh+PeUVKMm90OMLSO4/T3PXrWow0BBPn3ighe1UvCq309WPm
++WWPa9nmBrXVJvYQEcW/BK+8rFE6l62B9y+7g1fyeXiNdrkfwPyDcPwSJM7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSlA3UG3jsGittAC6RzIszL2Rng8wHwYDVR0j
BBgwFoAUvyNKsjIuflsW715f6Q7/Mw4GJygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkE3dkRZWTJWZGo5TGNDdG9peGN0MmdtUG9xZWdMWXA5bUV1VDE4TXBX
WXMvMC9CRjIzNEFCMjMyMkU3RTVCMTZFRjVFNUZFOTBFRkYzMzBFMDYyNzI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGMjM0QUIyMzIyRTdFNUIx
NkVGNUU1RkU5MEVGRjMzMEUwNjI3MjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkE3dkRZWTJWZGo5TGNDdG9peGN0MmdtUG9xZWdMWXA5bUV1VDE4TXBXWXMvMC9C
RjIzNEFCMjMyMkU3RTVCMTZFRjVFNUZFOTBFRkYzMzBFMDYyNzI4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArjFoD5kwTaIWV81LD71mokA8G5FSNd42ic+PLnbyoKHEqKIvLRJzy3M9uCPw
jJ9GJ1OYeXj1laBRG7mGkRROyw5oHT3zDUZTPioZzOqpfQ7tLlaTRvgizkrZ/DTA
wq2NksjajzbfBojW4FHp06p/n4qbwZ0Bk0IUGYaWim1Rm5dfWK2ajYVfzdFrwScL
Xey+c0Dfve5ispLIihx91ho49+ffkldOHwv8O18UYhV8rkDqMpEBocb+oV2LpijQ
VP0rhXU1A7qa4AjlvBB7WjYMfvu5ZiMd94iGoX++SXdfnhBr5Fy4cJJbFIUkDnoy
qTM6MUgZu8mT4fl4rHHngHY4AQ==
-----END CERTIFICATE-----