Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.mft
File:                     8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.mft (raw, json)
Hash identifier:          5lnybt+wb7Iw1KEPmiSng/eR4n5U0VP/Sq45JrzlqKo=
Subject key identifier:   DD:A0:FE:37:26:C9:69:66:51:64:E7:18:25:88:5B:C5:DD:02:D1:B5
Authority key identifier: 81:49:E5:76:2D:0E:1B:8F:F0:BE:DD:31:2E:E1:10:B7:D5:3E:CF:BB
Certificate issuer:       /CN=8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB
Certificate serial:       7013AD8D61D38FBFA92F120704104441A6DA6A6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.mft
Manifest number:          0B
Signing time:             Wed 12 Jun 2024 10:20:15 +0000
Manifest this update:     Wed 12 Jun 2024 10:15:15 +0000
Manifest next update:     Thu 13 Jun 2024 10:20:15 +0000
Files and hashes:         1: 8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.crl (hash: Sr+Eciog5oyhk1wHbn3wsxaoTX6x3cfgYaH1J2PA/K4=)
                          2: 3230302e3231392e31362e302f32322d3332203d3e20323730383130.roa (hash: u4E9UJ4ZnCscB05yD0iNjSVUMDDY/KZ61bE9BZraWjE=)
                          3: 323830343a373163343a3a2f33322d313238203d3e20323730383130.roa (hash: GP/2ROoBIBdEEDvdPI8QTMiuug6FiKSqy38xRgNDSB4=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:13:ad:8d:61:d3:8f:bf:a9:2f:12:07:04:10:44:41:a6:da:6a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB
        Validity
            Not Before: Jun 12 10:15:15 2024 GMT
            Not After : Jun 13 10:20:15 2024 GMT
        Subject: CN=DDA0FE3726C969665164E71825885BC5DD02D1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:da:4b:96:85:87:e1:f0:70:72:ca:82:da:b3:
                    da:48:cb:c7:43:77:ad:b6:47:d8:38:db:b7:47:f0:
                    c4:dc:a7:e5:cf:20:c9:1d:e8:a8:43:4e:30:ad:a8:
                    20:2e:51:76:b4:05:56:bb:8e:24:63:2b:f1:72:45:
                    b9:68:32:68:cc:c4:52:ab:3f:fb:e5:64:44:c8:c8:
                    7a:37:ca:1c:3d:48:ca:53:ae:8b:16:34:b0:b9:d6:
                    8b:89:ad:7a:a0:ed:fc:22:16:3e:bd:14:56:6a:6d:
                    bd:4c:0a:3b:71:42:03:18:d3:3c:a3:0f:fb:27:d9:
                    34:4f:cb:19:7f:02:6f:a1:79:2a:86:8e:be:d9:84:
                    75:c2:3d:b6:5d:3e:25:d3:69:e6:7f:c4:f2:56:92:
                    a0:d4:1b:7b:11:d8:88:7f:0a:77:cb:aa:1e:42:eb:
                    b2:7e:2e:17:2c:85:b5:17:f1:ff:5c:b4:3d:3b:50:
                    f3:9f:a6:d0:77:2f:ca:64:8f:ad:af:3e:ee:a4:cc:
                    27:a3:60:0f:b4:e3:5a:93:fd:cc:cb:b0:87:8d:f0:
                    e3:aa:8e:ab:d3:90:44:57:0d:2e:84:31:d6:35:cc:
                    1d:64:4e:73:49:88:51:35:ce:7d:26:67:0f:91:27:
                    f4:96:7d:92:e1:4a:82:b7:14:e9:fd:f1:a4:7c:84:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A0:FE:37:26:C9:69:66:51:64:E7:18:25:88:5B:C5:DD:02:D1:B5
            X509v3 Authority Key Identifier:
                keyid:81:49:E5:76:2D:0E:1B:8F:F0:BE:DD:31:2E:E1:10:B7:D5:3E:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:60:ed:5c:30:19:bd:7a:3e:c4:46:c8:76:01:81:f4:29:cd:
         51:23:b2:4c:f5:18:b1:a4:e0:41:e6:6a:85:ed:10:0f:cf:d5:
         1c:2d:e2:99:93:47:34:93:e6:01:4e:fa:af:f0:9e:4b:01:39:
         1c:28:a2:cc:99:b4:58:40:c6:fd:b3:0e:18:36:69:f2:1b:1b:
         5f:72:19:80:40:33:82:56:1d:a6:83:a5:cd:3a:94:5d:ed:84:
         a7:c9:b4:6d:0f:cf:e9:e3:7c:ae:dc:bd:51:4f:8a:44:5f:13:
         4d:55:81:da:38:96:e7:bd:7a:96:a7:c6:bc:23:ed:76:ee:cd:
         c4:75:e3:7e:0e:5c:6a:66:a2:6a:83:57:b1:35:4d:5e:da:db:
         58:81:7f:3b:52:2f:02:67:ac:ce:82:55:fd:cb:aa:d8:2c:f1:
         c2:a4:8d:6d:1b:09:8f:11:f1:bb:b7:1c:6c:af:92:c6:d7:f0:
         64:c9:96:74:88:3f:76:66:53:91:7c:af:c4:92:db:78:eb:e9:
         bc:57:d7:aa:12:59:43:d2:fe:15:7e:2b:88:60:f1:1b:83:6f:
         7a:34:75:3b:f9:0e:f6:6f:23:92:91:49:df:32:b6:fa:f3:28:
         94:16:6a:f5:6f:89:0b:67:93:b4:f8:c3:ba:dd:96:50:3c:47:
         15:96:6e:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcBOtjWHTj7+pLxIHBBBEQabaamswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE0OUU1NzYyRDBFMUI4RkYwQkVERDMxMkVFMTEwQjdE
NTNFQ0ZCQjAeFw0yNDA2MTIxMDE1MTVaFw0yNDA2MTMxMDIwMTVaMDMxMTAvBgNV
BAMTKEREQTBGRTM3MjZDOTY5NjY1MTY0RTcxODI1ODg1QkM1REQwMkQxQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu2kuWhYfh8HByyoLas9pIy8dD
d622R9g427dH8MTcp+XPIMkd6KhDTjCtqCAuUXa0BVa7jiRjK/FyRbloMmjMxFKr
P/vlZETIyHo3yhw9SMpTrosWNLC51ouJrXqg7fwiFj69FFZqbb1MCjtxQgMY0zyj
D/sn2TRPyxl/Am+heSqGjr7ZhHXCPbZdPiXTaeZ/xPJWkqDUG3sR2Ih/CnfLqh5C
67J+LhcshbUX8f9ctD07UPOfptB3L8pkj62vPu6kzCejYA+041qT/czLsIeN8OOq
jqvTkERXDS6EMdY1zB1kTnNJiFE1zn0mZw+RJ/SWfZLhSoK3FOn98aR8hGXbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3aD+NybJaWZRZOcYJYhbxd0C0bUwHwYDVR0j
BBgwFoAUgUnldi0OG4/wvt0xLuEQt9U+z7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZuZVRuRmRDWFR5Z2Zjam9lQThvY05OTlR2Z1lzY2N0eEpNcHhLRFg1
dVQvMC84MTQ5RTU3NjJEMEUxQjhGRjBCRUREMzEyRUUxMTBCN0Q1M0VDRkJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxNDlFNTc2MkQwRTFCOEZG
MEJFREQzMTJFRTExMEI3RDUzRUNGQkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlZuZVRuRmRDWFR5Z2Zjam9lQThvY05OTlR2Z1lzY2N0eEpNcHhLRFg1dVQvMC84
MTQ5RTU3NjJEMEUxQjhGRjBCRUREMzEyRUUxMTBCN0Q1M0VDRkJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlmDtXDAZvXo+xEbIdgGB9CnNUSOyTPUYsaTgQeZqhe0QD8/VHC3imZNHNJPm
AU76r/CeSwE5HCiizJm0WEDG/bMOGDZp8hsbX3IZgEAzglYdpoOlzTqUXe2Ep8m0
bQ/P6eN8rty9UU+KRF8TTVWB2jiW5716lqfGvCPtdu7NxHXjfg5camaiaoNXsTVN
XtrbWIF/O1IvAmeszoJV/cuq2CzxwqSNbRsJjxHxu7ccbK+SxtfwZMmWdIg/dmZT
kXyvxJLbeOvpvFfXqhJZQ9L+FX4riGDxG4NvejR1O/kO9m8jkpFJ3zK2+vMolBZq
9W+JC2eTtPjDut2WUDxHFZZu/w==
-----END CERTIFICATE-----