Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/1/F1DC10146AE41B5B301E7E56D55637701B6D2E90.mft
File:                     F1DC10146AE41B5B301E7E56D55637701B6D2E90.mft (raw, json)
Hash identifier:          WqTTMmpoYSqPu+DGqopoUzM5e6R+4Wzp/X03Ii98GDY=
Subject key identifier:   7A:32:39:07:FA:EE:5F:EB:0A:33:20:83:05:17:55:56:B3:B7:BB:CA
Authority key identifier: F1:DC:10:14:6A:E4:1B:5B:30:1E:7E:56:D5:56:37:70:1B:6D:2E:90
Certificate issuer:       /CN=F1DC10146AE41B5B301E7E56D55637701B6D2E90
Certificate serial:       284A6E0D5AB288EDCAA2619943E793754ED65BF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1DC10146AE41B5B301E7E56D55637701B6D2E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/1/F1DC10146AE41B5B301E7E56D55637701B6D2E90.mft
Manifest number:          5D
Signing time:             Tue 11 Jun 2024 15:25:10 +0000
Manifest this update:     Tue 11 Jun 2024 15:20:10 +0000
Manifest next update:     Wed 12 Jun 2024 18:00:10 +0000
Files and hashes:         1: 323830343a386334303a3a2f33322d3438203d3e20323733373931.roa (hash: NeCa2pjf0Nxnw79RRJuPUVE9c3jiaAD8gCvqp2a2zNc=)
                          2: F1DC10146AE41B5B301E7E56D55637701B6D2E90.crl (hash: ZXDKFU3LV5uWjjXGoyfzFFUZ63aPe5IU1wb735EWShU=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4a:6e:0d:5a:b2:88:ed:ca:a2:61:99:43:e7:93:75:4e:d6:5b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1DC10146AE41B5B301E7E56D55637701B6D2E90
        Validity
            Not Before: Jun 11 15:20:10 2024 GMT
            Not After : Jun 12 18:00:10 2024 GMT
        Subject: CN=7A323907FAEE5FEB0A33208305175556B3B7BBCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:86:01:62:e8:6b:6c:2e:ab:b5:5d:2b:8d:
                    74:e9:f9:d8:7f:ef:60:4b:88:1e:cb:52:12:0d:c2:
                    44:3c:17:ae:3e:52:b9:c3:95:97:21:14:f7:04:b1:
                    ee:42:1a:7f:74:12:de:ad:eb:9c:b3:48:5e:31:aa:
                    54:8c:8a:77:ab:dc:0e:b6:53:33:63:f8:95:64:54:
                    12:69:29:47:7f:4d:55:1b:d1:88:17:b3:f1:e3:9e:
                    4b:d0:4f:84:0b:60:d0:02:d4:5c:74:bf:93:8f:29:
                    8b:40:e2:a1:7a:29:c6:ad:b6:86:bd:55:a1:9f:4b:
                    90:15:22:a7:d5:81:7f:17:02:54:b0:d4:3d:d1:98:
                    0a:58:a1:aa:2c:2c:2e:6d:99:42:88:11:cf:d5:60:
                    aa:dc:25:0d:9b:6a:ff:14:87:bf:70:ff:0a:cf:dd:
                    cd:7c:af:5a:8b:1d:16:28:9f:d1:39:18:e2:b4:5f:
                    3d:8d:7a:81:b1:02:a5:1f:3b:ae:cc:90:3e:c8:5d:
                    53:94:b1:b1:44:03:a3:38:50:14:30:e9:64:e8:ed:
                    51:71:4a:7b:4c:0a:90:66:d0:fb:d2:1b:53:82:9d:
                    88:89:94:23:0e:fc:0b:7b:4c:6d:2d:82:bf:63:a7:
                    4d:86:10:4f:2f:dc:b8:b8:b9:7f:be:0a:34:1a:88:
                    af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:32:39:07:FA:EE:5F:EB:0A:33:20:83:05:17:55:56:B3:B7:BB:CA
            X509v3 Authority Key Identifier:
                keyid:F1:DC:10:14:6A:E4:1B:5B:30:1E:7E:56:D5:56:37:70:1B:6D:2E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/1/F1DC10146AE41B5B301E7E56D55637701B6D2E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1DC10146AE41B5B301E7E56D55637701B6D2E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/1/F1DC10146AE41B5B301E7E56D55637701B6D2E90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:33:f3:05:4e:48:c6:e7:11:91:55:3f:bd:90:e8:bb:c8:f3:
         2a:09:40:c4:43:74:0a:60:ee:06:25:63:6e:f3:78:8c:be:66:
         63:f6:19:9c:22:c5:a2:ce:7d:2a:2f:bc:78:75:08:b2:a9:a9:
         e4:2d:ff:46:16:14:31:10:de:59:c3:15:f8:0e:34:93:7e:96:
         fb:4a:81:c4:9f:8b:1e:62:0a:b7:82:55:62:aa:e2:17:2c:19:
         bd:6e:3c:92:44:bd:ab:88:61:35:40:74:a0:61:46:cc:db:4b:
         9b:39:1c:8f:0f:4c:36:cc:72:aa:ad:34:89:c7:29:b1:cd:19:
         5b:e8:a9:f3:27:3c:2b:46:1e:d4:2c:82:eb:f2:5a:57:42:f3:
         9c:2b:71:c7:1b:a4:4a:80:f0:f5:7f:cd:1b:e6:c1:f8:47:74:
         aa:f3:c8:4b:d3:15:1c:db:f7:21:f8:2c:4e:24:7b:83:51:0e:
         01:f7:2a:be:6e:64:5f:da:fa:06:17:e2:71:19:93:dc:b7:fb:
         6c:96:0f:6c:62:fd:de:0f:61:02:4d:ee:ab:cb:47:3e:26:04:
         5d:20:70:89:4e:03:39:de:f0:4b:78:79:dd:34:29:74:f0:c0:
         67:d4:53:1e:2d:51:8f:19:33:e3:f9:19:f7:d2:8b:48:e0:81:
         db:86:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----