Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/530793B831392B7086E37EAA6A90871D05580CD6.mft
File:                     530793B831392B7086E37EAA6A90871D05580CD6.mft (raw, json)
Hash identifier:          zCocu4DJ2bMOKkrOc0AcAQciwjRLqJtXFlhvt3HjxK8=
Subject key identifier:   4C:42:F0:E5:22:77:AA:17:60:EB:CC:ED:FF:B8:FC:31:58:91:5B:D2
Authority key identifier: 53:07:93:B8:31:39:2B:70:86:E3:7E:AA:6A:90:87:1D:05:58:0C:D6
Certificate issuer:       /CN=530793B831392B7086E37EAA6A90871D05580CD6
Certificate serial:       19C9689D1E48511AAE2B316DFE52FDB34C609CE6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530793B831392B7086E37EAA6A90871D05580CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/530793B831392B7086E37EAA6A90871D05580CD6.mft
Manifest number:          7A
Signing time:             Tue 15 Oct 2024 14:20:04 +0000
Manifest this update:     Tue 15 Oct 2024 14:15:04 +0000
Manifest next update:     Wed 16 Oct 2024 17:48:04 +0000
Files and hashes:         1: 530793B831392B7086E37EAA6A90871D05580CD6.crl (hash: x5NjFRSeJIUJGZITIVQJCdS+MtO0bEpnDcdgQzmO7Jc=)
                          2: 323830343a376435343a3a2f33322d3634203d3e20323731353534.roa (hash: uHBYe8B44IzzCvl+oJRFMHnNupZH0fYQnwiVmtRxRM0=)
                          3: 3137392e36332e39362e302f32322d3234203d3e20323731353534.roa (hash: OXscCrZe6lAg+2aTGkBLHCMNqkzJTXUcu9+uARlrQsA=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c9:68:9d:1e:48:51:1a:ae:2b:31:6d:fe:52:fd:b3:4c:60:9c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530793B831392B7086E37EAA6A90871D05580CD6
        Validity
            Not Before: Oct 15 14:15:04 2024 GMT
            Not After : Oct 16 17:48:04 2024 GMT
        Subject: CN=4C42F0E52277AA1760EBCCEDFFB8FC3158915BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:6c:26:55:6b:e6:b4:1a:68:bd:d6:c2:af:
                    a3:bf:ad:bc:40:dc:0c:f0:d4:55:0d:25:e4:fa:9d:
                    24:fa:f2:ac:80:99:ea:20:8e:f2:9f:29:40:58:36:
                    0e:96:59:04:52:73:4d:c8:f2:9a:6f:06:83:4d:a5:
                    e6:15:71:76:78:c6:8a:42:07:5f:f6:b8:df:94:d1:
                    1e:26:70:e3:f1:d4:44:09:84:18:cb:7e:7a:ea:f1:
                    11:f0:15:37:24:a5:f1:81:54:f8:8e:86:1d:79:e5:
                    24:a2:29:fe:5b:1f:af:51:95:86:f9:72:bb:cd:c3:
                    fb:e6:15:f8:ff:22:df:d5:5d:e4:a8:bc:d2:4d:60:
                    e5:5d:6b:94:57:be:71:d7:11:ad:7d:5a:26:69:b5:
                    3c:88:67:f5:2e:0e:7a:76:d3:45:85:49:2f:1c:fc:
                    8d:c7:36:ef:92:ea:92:82:5b:0d:9c:80:ae:37:4a:
                    de:72:f6:9c:f3:fb:15:7b:0c:d6:55:b0:17:4b:09:
                    28:b2:22:ae:7a:4f:a0:3a:70:7f:30:17:f3:91:d8:
                    1f:4a:fa:ae:77:45:53:ea:a6:98:e9:d2:56:6b:88:
                    59:68:73:c5:1d:c5:0e:bc:86:43:53:9f:82:dd:df:
                    57:88:63:bb:fa:13:03:21:8d:d7:da:85:50:5d:56:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:42:F0:E5:22:77:AA:17:60:EB:CC:ED:FF:B8:FC:31:58:91:5B:D2
            X509v3 Authority Key Identifier:
                keyid:53:07:93:B8:31:39:2B:70:86:E3:7E:AA:6A:90:87:1D:05:58:0C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/530793B831392B7086E37EAA6A90871D05580CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530793B831392B7086E37EAA6A90871D05580CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/530793B831392B7086E37EAA6A90871D05580CD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:21:37:65:14:fe:68:3b:c6:f7:73:b8:34:83:da:80:e7:fd:
         a1:93:58:bf:04:61:a3:e0:2d:b7:b0:8b:7b:41:b2:c0:b5:61:
         79:62:c7:85:9e:c7:2c:8c:69:94:21:cd:cf:c5:39:fb:51:a1:
         aa:a1:62:87:20:0c:0d:15:11:fa:72:76:26:7e:c8:2c:ce:4e:
         9e:74:3b:b0:6c:1e:e0:0b:07:d3:d6:be:75:8b:66:07:1b:8c:
         c9:d6:2c:5a:6e:a5:fa:d4:c6:b3:89:0f:78:d4:d3:d6:d5:fc:
         1e:82:c6:0e:f1:8a:d7:cc:97:20:66:b9:b5:53:3e:d2:80:1f:
         6b:86:0a:d0:9a:0d:7c:7c:c0:e8:e5:cb:80:b8:60:7b:1e:0b:
         ee:2e:05:31:32:85:95:67:4a:39:07:97:d5:11:e6:0f:cd:37:
         76:d5:5e:a8:0a:0f:16:51:04:86:62:30:bb:b4:d6:57:ec:7c:
         41:f6:b5:e1:9b:1b:66:d6:bf:cf:11:0a:09:ac:62:1c:a5:f1:
         8e:4b:22:ca:3c:90:2f:cf:60:b8:5f:5e:96:f3:5f:fa:fc:11:
         73:09:2b:14:4b:2b:e3:8f:4f:a2:80:99:54:20:96:91:80:b5:
         43:79:af:74:8a:e9:a4:d8:7a:1f:b1:6c:51:a2:44:45:2b:6b:
         3f:8b:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----