Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.mft
File:                     458D008CBA36E5598B2ECD5B0DF5A059D8272B93.mft (raw, json)
Hash identifier:          11OKnc5+bh+MGDn7Urt7rKA1Iy8xjH7ZO/6UHroSqY0=
Subject key identifier:   E7:5F:EC:FF:6A:3B:8F:BF:EA:90:51:34:A1:DD:DD:C8:5B:82:34:FB
Authority key identifier: 45:8D:00:8C:BA:36:E5:59:8B:2E:CD:5B:0D:F5:A0:59:D8:27:2B:93
Certificate issuer:       /CN=458D008CBA36E5598B2ECD5B0DF5A059D8272B93
Certificate serial:       7ACC260D3C7312B34D8FE8BA235EB8F661ACE12C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.mft
Manifest number:          8A
Signing time:             Mon 15 Jul 2024 06:09:01 +0000
Manifest this update:     Mon 15 Jul 2024 06:04:01 +0000
Manifest next update:     Tue 16 Jul 2024 07:19:01 +0000
Files and hashes:         1: 458D008CBA36E5598B2ECD5B0DF5A059D8272B93.crl (hash: gMZHPpfbSIsR0kJtfJze20JTVmXIa3dESI7BKNQTisg=)
                          2: 323830343a363934303a3a2f33322d313238203d3e20323730323538.roa (hash: 0s8eIx6gi1Zb7jnYy5djWwdMcep15IdlVoLAHl5MmzY=)
                          3: 34352e3139312e31322e302f32322d3332203d3e20323730323538.roa (hash: ORcHWRU5VMTHKr8iTCwva/rZrgr1M6wLvS08pnAgZjs=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cc:26:0d:3c:73:12:b3:4d:8f:e8:ba:23:5e:b8:f6:61:ac:e1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458D008CBA36E5598B2ECD5B0DF5A059D8272B93
        Validity
            Not Before: Jul 15 06:04:01 2024 GMT
            Not After : Jul 16 07:19:01 2024 GMT
        Subject: CN=E75FECFF6A3B8FBFEA905134A1DDDDC85B8234FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:13:34:b0:3c:5b:5f:d5:0b:b7:ba:23:1c:
                    d6:e9:7d:c4:1a:75:02:95:23:1c:c0:30:24:b9:f1:
                    c4:6e:ae:27:f7:cf:a5:f5:a8:89:4c:14:ab:b1:6d:
                    7a:f3:0c:fd:80:55:18:c0:b0:de:17:78:42:ff:31:
                    9a:ae:2b:38:fb:37:b3:f1:dd:73:55:af:fa:90:a3:
                    40:02:b0:a6:5d:63:1b:d3:f8:e7:53:69:78:37:66:
                    94:5a:b2:6a:3a:ac:76:92:ce:ac:fa:2e:cc:d1:54:
                    0f:bd:01:34:58:5c:1b:ce:ee:f3:2e:2c:8b:a0:70:
                    bb:fa:b7:e6:67:43:fe:97:c2:36:32:26:ee:2e:7b:
                    15:9f:1d:cd:bf:4a:9d:10:d7:56:e3:91:e5:85:77:
                    f0:75:b7:51:67:95:ca:07:d9:34:f6:a5:b6:d6:5a:
                    d4:6d:25:33:0a:92:a8:d5:aa:1c:08:ef:8e:a0:cf:
                    48:57:61:25:19:cc:f2:e5:48:f2:7e:dc:35:f2:37:
                    66:bc:f9:67:20:da:10:78:78:54:d2:62:47:ce:23:
                    fd:5b:cc:ab:6e:41:dc:58:ca:f8:f4:6b:aa:79:ba:
                    02:33:99:1c:d8:04:6b:3c:0b:d0:91:a0:7f:4e:ff:
                    f7:c6:ba:5c:ab:df:bf:fd:fd:99:49:95:1c:00:3f:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5F:EC:FF:6A:3B:8F:BF:EA:90:51:34:A1:DD:DD:C8:5B:82:34:FB
            X509v3 Authority Key Identifier:
                keyid:45:8D:00:8C:BA:36:E5:59:8B:2E:CD:5B:0D:F5:A0:59:D8:27:2B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:01:d1:32:56:8f:b0:7c:c6:bd:1c:ae:c0:8d:98:12:a1:
         31:25:00:14:a3:37:9a:81:c1:b0:33:e2:2e:bf:1a:44:3e:b8:
         db:08:73:97:b7:f3:d8:2f:33:a1:06:99:a9:bb:fc:f0:47:aa:
         b5:2e:33:4b:e0:bc:5f:a3:a2:97:d6:02:ed:43:2e:a6:20:91:
         99:63:1b:1a:09:e3:33:5a:42:c6:df:bd:24:fb:15:35:8c:b0:
         82:b5:40:f3:0f:9b:ad:7a:0a:b2:39:6b:9c:c6:0a:07:1e:3f:
         11:94:c9:21:93:74:5a:12:3a:5b:0c:6e:2f:27:be:bf:83:54:
         97:7d:5a:03:17:5c:2e:86:25:b7:04:8e:77:42:db:0e:0c:d7:
         7c:67:e9:2f:ca:cd:75:f8:83:54:3e:4c:14:a5:a8:3e:df:6a:
         06:07:da:9a:28:26:e1:9b:dd:7e:23:96:7f:3d:56:ed:fb:f0:
         ec:51:01:88:c2:5c:67:07:fc:e9:ae:77:30:d9:a4:cd:80:07:
         ae:b8:27:e4:57:a1:03:ea:3e:44:38:be:f6:69:ca:db:e7:58:
         93:1e:c8:5e:26:20:61:07:7d:a6:4e:cf:0f:79:b1:66:bc:da:
         9b:79:31:f2:eb:c4:56:26:ef:d3:75:4c:00:5e:1b:71:7a:08:
         6d:85:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----