Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.mft
File:                     AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.mft (raw, json)
Hash identifier:          DEBl2kWUFxSF+DtRYrxv8dXBtHou5lA671LsdeczpJQ=
Subject key identifier:   49:A0:FF:0C:17:DA:E0:01:FF:A1:C2:76:81:8C:15:95:3A:77:8A:E9
Authority key identifier: AD:26:81:D1:C9:72:CA:69:74:EF:D3:58:6F:20:F1:5D:9E:6A:FE:07
Certificate issuer:       /CN=AD2681D1C972CA6974EFD3586F20F15D9E6AFE07
Certificate serial:       0A08B971C083B9BD58809E1A3ADB3AC5FCA53EA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.mft
Manifest number:          29
Signing time:             Sat 01 Jun 2024 22:46:35 +0000
Manifest this update:     Sat 01 Jun 2024 22:41:35 +0000
Manifest next update:     Mon 03 Jun 2024 00:44:35 +0000
Files and hashes:         1: AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.crl (hash: cv5uBxFkSq4hDP+ZF+zj18QTtRgv3POUOeo9lrNIHvU=)
                          2: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (hash: JHfy0nbV/5bdiIHimaQaec4kjx9pbULAg8s4+UjJFcc=)
                          3: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (hash: OBlbYCDNSP0hrjQo5sJ51yg+QrwH/uUtjdEkzfX8i+Q=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:08:b9:71:c0:83:b9:bd:58:80:9e:1a:3a:db:3a:c5:fc:a5:3e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2681D1C972CA6974EFD3586F20F15D9E6AFE07
        Validity
            Not Before: Jun  1 22:41:35 2024 GMT
            Not After : Jun  3 00:44:35 2024 GMT
        Subject: CN=49A0FF0C17DAE001FFA1C276818C15953A778AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:04:d2:90:50:7b:2e:8a:a2:16:eb:00:9a:6e:
                    9a:16:cc:7c:87:31:84:e9:b2:29:04:64:74:59:d7:
                    c2:7d:8b:66:5b:46:00:24:bc:6e:e3:24:bd:eb:96:
                    51:d0:72:81:54:81:b1:a9:df:04:7e:df:02:4f:72:
                    c1:5c:05:d3:9a:67:1f:6d:ba:2d:d9:70:e4:bf:61:
                    70:1f:c0:2e:f9:5b:55:9e:66:a1:ca:9b:73:ea:4d:
                    e2:ec:69:ad:1c:ea:d4:f4:f5:82:e5:53:b5:ac:de:
                    70:15:46:ee:61:21:08:23:af:bb:71:34:8c:77:88:
                    70:73:21:fb:b6:cb:73:6a:17:9e:be:07:97:ff:74:
                    48:3f:ab:ca:73:57:06:2c:5c:a6:89:c1:c5:3f:0c:
                    2e:82:f1:e1:6c:1e:8c:12:2b:34:6f:00:c2:7a:5a:
                    2e:f4:dd:d2:c9:81:38:14:98:5b:e4:94:9a:8d:ba:
                    14:f8:3e:e6:8e:5b:ee:ff:f4:6c:bc:48:0a:63:96:
                    e0:4b:88:10:81:9b:09:11:b9:63:8e:06:c2:01:77:
                    78:7d:e2:a7:ce:81:da:dc:5b:b2:e9:4c:b7:6e:c9:
                    55:a9:9a:70:cb:01:68:f4:9f:48:9f:5e:1a:65:e1:
                    64:99:7f:cf:31:84:9b:7c:65:a3:32:bd:31:7e:8f:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A0:FF:0C:17:DA:E0:01:FF:A1:C2:76:81:8C:15:95:3A:77:8A:E9
            X509v3 Authority Key Identifier:
                keyid:AD:26:81:D1:C9:72:CA:69:74:EF:D3:58:6F:20:F1:5D:9E:6A:FE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:43:8a:c4:43:bb:12:c3:51:7b:20:bf:0a:23:1a:83:67:35:
         de:37:21:e9:fc:38:0f:35:67:29:8d:dd:3d:fb:12:64:05:95:
         3e:b3:42:94:22:57:5c:34:b3:a8:28:0a:71:b1:d3:b0:75:04:
         60:f5:09:cb:35:37:7f:d4:87:7b:e8:71:a8:1e:26:33:ba:13:
         8f:98:55:10:6d:1c:b8:57:b7:33:76:c5:2f:2e:cf:2b:3e:4f:
         04:1a:b4:17:9b:ce:a1:07:66:18:23:9f:c6:92:0c:3d:8e:4b:
         da:1d:08:d7:81:1a:dd:d6:e9:c0:46:df:b6:33:87:59:39:0d:
         96:de:28:d3:8f:66:0d:c2:75:2c:c3:70:88:ec:08:99:22:4b:
         fc:f3:88:75:fa:59:ec:9c:65:a8:d9:04:26:ad:36:1a:40:2d:
         7c:45:b1:43:59:a7:ae:d0:56:60:d1:b4:60:e3:ba:87:53:95:
         4a:98:1e:e6:ac:e6:c9:c0:cb:a5:79:5a:9a:0d:91:89:6e:65:
         40:9c:c1:46:8e:51:1a:6b:25:31:f6:76:d4:7b:5d:81:b8:ad:
         aa:fc:78:51:f1:d8:18:c0:b3:7b:85:50:6f:45:76:16:b2:0a:
         7d:c1:97:21:72:ec:c9:bc:76:89:5d:90:36:f9:fc:af:06:7b:
         12:95:98:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org