Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.mft
File:                     C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.mft (raw, json)
Hash identifier:          YALXXm9mle7das/mTL3DxEWgYTpRJwOukzGZb5RnS1U=
Subject key identifier:   D6:B7:4B:B5:94:EF:95:78:A2:FD:5F:AE:D2:2C:04:DB:48:36:97:C6
Authority key identifier: C2:B0:D6:82:8E:49:5E:CD:AB:60:D1:DE:0E:34:A7:A3:A2:A8:67:52
Certificate issuer:       /CN=C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752
Certificate serial:       7C75AE66E70553348CC75C475757273402DEBD2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.mft
Manifest number:          41
Signing time:             Wed 28 Aug 2024 02:46:22 +0000
Manifest this update:     Wed 28 Aug 2024 02:41:22 +0000
Manifest next update:     Thu 29 Aug 2024 06:32:22 +0000
Files and hashes:         1: 323830343a363565633a3a2f33322d3336203d3e20323639353233.roa (hash: lcs/A8a9jnHCSV7lW7oeI2GWuhUnNMSjdKOZQgutX4Y=)
                          2: C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.crl (hash: UsDmdiAHHy22PnJ3bDvtb5/0Kg+e0rqOyzFHXIbMBiw=)
                          3: 34352e3138382e36382e302f32322d3234203d3e20323639353233.roa (hash: ncJnY6N8igl4MEEPCCugIltX/mLBU4Tpgr+Bm6/Q78M=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:75:ae:66:e7:05:53:34:8c:c7:5c:47:57:57:27:34:02:de:bd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752
        Validity
            Not Before: Aug 28 02:41:22 2024 GMT
            Not After : Aug 29 06:32:22 2024 GMT
        Subject: CN=D6B74BB594EF9578A2FD5FAED22C04DB483697C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:1a:e8:ea:fd:16:9d:92:6a:ae:a9:74:38:
                    3b:5e:2d:a5:ea:57:68:5b:81:95:1b:be:22:45:f9:
                    f6:a8:b2:e2:b2:32:00:f4:d1:35:b1:ba:e8:96:7b:
                    1e:61:c4:61:0f:1d:88:a8:da:a5:48:ff:45:f1:66:
                    9d:7c:35:55:b4:07:aa:9d:ae:4b:e8:42:6a:0a:de:
                    88:3b:20:a4:24:cd:dc:15:8a:de:94:c2:97:e2:6b:
                    49:01:4b:e8:93:e4:d5:4d:a7:61:0e:37:a0:52:34:
                    12:c0:78:8d:b8:ae:88:23:51:06:18:4f:a3:2c:b1:
                    10:e7:e0:4e:38:42:04:de:c9:5f:f8:4d:bb:30:d2:
                    b4:a0:29:55:39:09:42:7a:c6:20:21:ac:41:72:c5:
                    1e:e0:8f:97:85:53:5c:97:d0:cf:b4:ef:be:15:fb:
                    4f:60:14:11:10:94:b7:2e:00:40:1e:45:cb:e4:c4:
                    f8:94:de:a2:b6:61:e7:1d:9b:82:6e:e4:47:67:e9:
                    48:0d:bc:df:ef:45:4e:b2:eb:6c:84:7f:22:51:f4:
                    cf:82:40:4d:40:b9:21:3d:69:19:8d:1f:f4:bc:76:
                    80:e5:00:e6:cf:97:da:b1:a3:3f:c6:2a:22:84:2d:
                    34:38:b1:80:bf:d0:1c:4d:35:68:c2:0b:1b:2f:7e:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B7:4B:B5:94:EF:95:78:A2:FD:5F:AE:D2:2C:04:DB:48:36:97:C6
            X509v3 Authority Key Identifier:
                keyid:C2:B0:D6:82:8E:49:5E:CD:AB:60:D1:DE:0E:34:A7:A3:A2:A8:67:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/C2B0D6828E495ECDAB60D1DE0E34A7A3A2A86752.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b1:d7:b1:c6:fe:4f:3c:ec:c3:f1:49:05:4b:49:4d:74:f2:
         fc:9a:80:66:f1:67:4a:20:de:4e:85:57:4e:21:ff:f4:09:c3:
         17:3a:1a:e5:45:ab:85:59:04:9e:f5:13:99:ec:6f:9f:be:7f:
         6b:30:f1:c0:a7:60:b4:14:a5:14:99:2a:4e:ca:ee:ad:f6:47:
         a4:00:c4:c1:65:da:a8:2d:f1:fc:b6:98:10:99:39:78:9a:0d:
         5d:ff:d3:7a:ac:d2:8b:5c:74:80:c2:e8:d9:92:4e:e6:cf:b8:
         39:b5:2e:72:3b:07:f4:d1:30:fb:23:2b:e4:47:d4:95:27:02:
         91:77:01:81:9f:dd:51:43:45:e7:47:4c:7c:8b:3b:62:e9:1b:
         97:e8:28:e7:72:c8:8a:70:a6:1d:bf:ee:53:4c:f5:fc:15:c5:
         eb:b5:5c:71:ff:fd:8f:45:1d:31:65:ba:86:ad:a9:96:90:23:
         fe:7d:f9:a5:4f:b1:c5:57:b7:02:7c:aa:89:b5:85:47:09:2d:
         a9:a2:73:0c:ab:f8:b2:46:7e:cb:76:63:18:e7:e0:aa:b6:cc:
         db:3e:07:04:14:60:91:22:22:8b:dd:3c:e8:df:d9:e5:f7:81:
         de:d1:e3:bd:86:ce:34:c5:66:4b:40:98:44:b4:fb:0c:23:a7:
         77:7c:2e:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfHWuZucFUzSMx1xHV1cnNALevSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCMEQ2ODI4RTQ5NUVDREFCNjBEMURFMEUzNEE3QTNB
MkE4Njc1MjAeFw0yNDA4MjgwMjQxMjJaFw0yNDA4MjkwNjMyMjJaMDMxMTAvBgNV
BAMTKEQ2Qjc0QkI1OTRFRjk1NzhBMkZENUZBRUQyMkMwNERCNDgzNjk3QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixBro6v0WnZJqrql0ODteLaXq
V2hbgZUbviJF+faosuKyMgD00TWxuuiWex5hxGEPHYio2qVI/0XxZp18NVW0B6qd
rkvoQmoK3og7IKQkzdwVit6Uwpfia0kBS+iT5NVNp2EON6BSNBLAeI24rogjUQYY
T6MssRDn4E44QgTeyV/4Tbsw0rSgKVU5CUJ6xiAhrEFyxR7gj5eFU1yX0M+0774V
+09gFBEQlLcuAEAeRcvkxPiU3qK2Yecdm4Ju5Edn6UgNvN/vRU6y62yEfyJR9M+C
QE1AuSE9aRmNH/S8doDlAObPl9qxoz/GKiKELTQ4sYC/0BxNNWjCCxsvfp3jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1rdLtZTvlXii/V+u0iwE20g2l8YwHwYDVR0j
BBgwFoAUwrDWgo5JXs2rYNHeDjSno6KoZ1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkF0SHk5NFBaeGV1SDk4Sk54RHpydHV3cDdMNEhXSnBQMUM0NGduZnVF
UXQvMC9DMkIwRDY4MjhFNDk1RUNEQUI2MEQxREUwRTM0QTdBM0EyQTg2NzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyQjBENjgyOEU0OTVFQ0RB
QjYwRDFERTBFMzRBN0EzQTJBODY3NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkF0SHk5NFBaeGV1SDk4Sk54RHpydHV3cDdMNEhXSnBQMUM0NGduZnVFUXQvMC9D
MkIwRDY4MjhFNDk1RUNEQUI2MEQxREUwRTM0QTdBM0EyQTg2NzUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANbHXscb+Tzzsw/FJBUtJTXTy/JqAZvFnSiDeToVXTiH/9AnDFzoa5UWrhVkE
nvUTmexvn75/azDxwKdgtBSlFJkqTsrurfZHpADEwWXaqC3x/LaYEJk5eJoNXf/T
eqzSi1x0gMLo2ZJO5s+4ObUucjsH9NEw+yMr5EfUlScCkXcBgZ/dUUNF50dMfIs7
Yukbl+go53LIinCmHb/uU0z1/BXF67Vccf/9j0UdMWW6hq2plpAj/n35pU+xxVe3
AnyqibWFRwktqaJzDKv4skZ+y3ZjGOfgqrbM2z4HBBRgkSIii9086N/Z5feB3tHj
vYbONMVmS0CYRLT7DCOnd3wuXw==
-----END CERTIFICATE-----