Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/B4D98D45DAE595BEA52EF65521249698BEAC741A.mft
File:                     B4D98D45DAE595BEA52EF65521249698BEAC741A.mft (raw, json)
Hash identifier:          UbuMzg37KVEdOX6KBmlvSnE4NPbaHKofrQzvA4uXQnk=
Subject key identifier:   E2:1A:32:FD:9C:C1:88:FE:A4:45:84:9E:DF:42:5B:3D:88:3C:AD:CE
Authority key identifier: B4:D9:8D:45:DA:E5:95:BE:A5:2E:F6:55:21:24:96:98:BE:AC:74:1A
Certificate issuer:       /CN=B4D98D45DAE595BEA52EF65521249698BEAC741A
Certificate serial:       709E5DBF7B1022D45B9521ECED7E7D07BDF9B9A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4D98D45DAE595BEA52EF65521249698BEAC741A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/B4D98D45DAE595BEA52EF65521249698BEAC741A.mft
Manifest number:          96
Signing time:             Wed 07 Aug 2024 04:06:57 +0000
Manifest this update:     Wed 07 Aug 2024 04:01:57 +0000
Manifest next update:     Thu 08 Aug 2024 04:45:57 +0000
Files and hashes:         1: 32342e3135322e362e302f32342d3234203d3e20323730343934.roa (hash: wK7su8G/h80zRhf8iTijPAV/K7O8imAUtzPlTJJA8pM=)
                          2: 32342e3135322e372e302f32342d3234203d3e20323730343934.roa (hash: HXcBDumeuGxvQw+2XPxj4bJqfYEU22RpQoYchpdGQwA=)
                          3: 323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa (hash: 8nJKT/vcQXgf5lMvsdgPHpZPmKUO5qYnsK8mwyMYAEE=)
                          4: 32342e3135322e342e302f32322d3232203d3e20323730343934.roa (hash: fL/EaKF3QxgVkfh2T2R834vEcwOyBqVY+UKykJUyA1o=)
                          5: B4D98D45DAE595BEA52EF65521249698BEAC741A.crl (hash: SL20buuREQUcn3lH9gNuaq8ilXubfgcre0SrxoBok1k=)
                          6: 32342e3135322e342e302f32332d3233203d3e20323730343934.roa (hash: Sw15kW4+nWJQ6M4n8Qap+dKDtPA8Ymy18T3iZ8MxHrs=)
                          7: 323830343a366364303a3a2f33322d3332203d3e20323730343934.roa (hash: NQ+EJoI68EXyc4wweO4/D4wJXJ5IaiHJuLHU1BGWHZ8=)
                          8: 32342e3135322e362e302f32332d3233203d3e20323730343934.roa (hash: H6nIG77fgMgRqO33RsyODT7MSVgIhkPT6RsYlWC+KOA=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9e:5d:bf:7b:10:22:d4:5b:95:21:ec:ed:7e:7d:07:bd:f9:b9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4D98D45DAE595BEA52EF65521249698BEAC741A
        Validity
            Not Before: Aug  7 04:01:57 2024 GMT
            Not After : Aug  8 04:45:57 2024 GMT
        Subject: CN=E21A32FD9CC188FEA445849EDF425B3D883CADCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:fd:43:8d:b8:ae:31:4d:d2:39:c7:48:33:
                    af:86:c3:b2:6f:cb:5b:11:16:76:83:2b:05:ea:fb:
                    d2:db:eb:2f:00:a9:a7:ab:77:89:26:b7:80:b9:e9:
                    5f:94:ac:ff:6b:88:b3:fd:e0:b5:f4:fd:ee:e0:48:
                    5c:46:e2:41:e5:b1:b2:e7:7c:78:3b:9c:10:d3:3a:
                    24:23:7b:c4:9f:71:4e:3c:32:ee:0c:42:28:0a:ca:
                    b6:fa:07:46:e6:b8:6f:ce:b1:aa:b1:8e:54:ce:07:
                    bf:da:a4:30:a2:7d:4c:e6:54:8d:26:7c:8a:1a:b8:
                    31:bc:2f:22:b8:15:9b:cb:80:89:c9:d8:a0:39:70:
                    63:8a:07:6d:68:71:f4:1c:24:60:b1:0a:3a:e3:20:
                    d7:e3:d0:a7:b5:50:7b:f2:67:7b:03:42:2a:ef:8e:
                    92:f3:26:0b:58:3c:92:47:3c:e6:c6:67:21:df:14:
                    f6:07:05:a8:5e:4d:38:b1:72:aa:82:74:c5:ba:af:
                    16:86:a1:b0:49:80:9d:59:bb:8a:30:f9:d2:9b:e6:
                    57:9e:43:83:bd:88:22:eb:30:0c:6a:d1:22:c7:9f:
                    59:79:f2:9c:31:e1:10:30:00:77:ec:1d:e0:70:0d:
                    77:a6:e7:8c:a0:5d:66:2e:98:8d:fb:47:51:6f:96:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1A:32:FD:9C:C1:88:FE:A4:45:84:9E:DF:42:5B:3D:88:3C:AD:CE
            X509v3 Authority Key Identifier:
                keyid:B4:D9:8D:45:DA:E5:95:BE:A5:2E:F6:55:21:24:96:98:BE:AC:74:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/B4D98D45DAE595BEA52EF65521249698BEAC741A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4D98D45DAE595BEA52EF65521249698BEAC741A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/B4D98D45DAE595BEA52EF65521249698BEAC741A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:43:4c:95:cb:68:76:04:5a:e2:47:66:5f:3a:cf:21:5a:ee:
         6c:4b:37:08:77:38:39:62:0d:1d:ff:e1:4d:c0:2b:61:5a:53:
         67:60:fc:3f:c8:1a:2c:d9:b9:37:f7:20:01:10:fd:bf:36:2f:
         a2:81:2b:13:fa:9d:69:99:13:7b:c1:d7:3e:29:b5:80:de:06:
         d6:fb:39:07:db:49:e1:72:3c:53:62:64:f1:d9:65:4d:d6:3a:
         05:f6:16:72:45:57:36:4c:29:33:a7:9f:11:95:2f:e0:dd:3c:
         e9:06:c2:7e:96:cf:79:72:ce:30:1a:7d:4c:7b:dc:9f:e4:74:
         0f:90:7f:b9:b9:c3:55:47:32:b7:6b:5e:94:76:82:39:f6:64:
         d7:dd:7c:a2:36:f8:d7:84:8e:52:37:fa:6a:00:70:ca:0c:36:
         35:44:b8:53:17:54:69:87:ed:54:01:e9:50:d9:2c:04:ad:28:
         d8:84:90:b2:9e:be:8b:7d:e9:35:e8:2b:20:c4:93:40:fc:f9:
         e9:09:4a:6b:7f:d5:87:01:e6:78:ff:e6:92:4b:89:16:2b:56:
         83:9e:1b:a1:b3:a3:2b:2b:30:fd:10:a1:cf:21:77:73:f4:99:
         df:05:01:37:b5:96:a5:aa:fd:54:34:ac:83:03:5e:bc:4c:d6:
         5e:70:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:20:59 2024 by rpki-client on console-fra.rpki-client.org