Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.mft
File:                     C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.mft (raw, json)
Hash identifier:          kxze1DIgLqYsMjEx7cs4ywRpxERwYrAIiA678vOSedY=
Subject key identifier:   40:64:D9:EE:EF:E2:AB:B7:C6:70:1A:7C:92:54:9A:50:AC:2B:34:EA
Authority key identifier: C5:4D:E3:30:22:CD:4D:3A:53:CE:C7:0A:D2:6E:F7:C0:CA:09:12:05
Certificate issuer:       /CN=C54DE33022CD4D3A53CEC70AD26EF7C0CA091205
Certificate serial:       63A4B53468413C7EFA608139E6B149FBA53C5041
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.mft
Manifest number:          18
Signing time:             Tue 30 Jul 2024 14:11:03 +0000
Manifest this update:     Tue 30 Jul 2024 14:06:03 +0000
Manifest next update:     Wed 31 Jul 2024 15:38:03 +0000
Files and hashes:         1: C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.crl (hash: UkWTDR1SIrAp6NSA842gaMZhjvVjCdDbNYDZ2pW5pUw=)
                          2: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (hash: LjE6dgGw2eV8yz/WXSBtiIH0Ae9zASpZIN71Kqjl/vw=)
                          3: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (hash: G/RssWLgJYD3LpMqXlvH9qWEtw7gq7erDGU0phJPvqQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a4:b5:34:68:41:3c:7e:fa:60:81:39:e6:b1:49:fb:a5:3c:50:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54DE33022CD4D3A53CEC70AD26EF7C0CA091205
        Validity
            Not Before: Jul 30 14:06:03 2024 GMT
            Not After : Jul 31 15:38:03 2024 GMT
        Subject: CN=4064D9EEEFE2ABB7C6701A7C92549A50AC2B34EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:2d:c9:a6:38:67:dc:e5:b1:2b:41:71:2e:
                    cc:cd:03:63:d5:e3:ba:7c:8c:59:39:0b:cc:d1:c8:
                    22:f1:66:1d:13:8e:05:73:9d:8b:59:82:9d:1a:46:
                    ce:57:ea:1b:f7:7f:94:c7:c2:2c:cd:1d:7e:61:84:
                    34:a8:0a:cf:e8:f1:86:ea:8a:e1:a5:2a:f7:5a:5b:
                    a3:6b:95:1e:8f:61:0e:83:20:cc:84:0f:75:02:7d:
                    50:bc:ff:1a:ff:7b:a0:7a:86:38:fc:21:7d:4b:2a:
                    ef:bc:e5:37:68:26:f0:0c:3a:59:35:0a:3b:07:ee:
                    8d:bb:01:ee:12:db:b8:3b:db:1b:0f:b3:68:84:ec:
                    40:fa:26:92:b8:43:2c:f8:b3:b4:1c:bf:cf:2e:aa:
                    2c:f5:cb:bb:2e:a0:bc:0c:5d:87:87:bd:0e:00:b2:
                    fd:32:4d:81:12:be:7f:3d:a3:dc:07:d0:bc:12:bf:
                    9e:d6:a3:5e:6d:26:82:c0:2f:fa:19:27:27:8b:91:
                    1f:24:56:12:43:e3:4a:e6:e7:e7:e1:54:01:57:12:
                    bf:91:df:44:10:55:87:f9:59:b6:1c:bc:49:7f:c3:
                    d7:55:6f:39:c2:e8:df:35:2d:cd:6b:ad:34:a7:f5:
                    44:7e:99:9e:85:a0:92:85:7d:45:c3:83:98:e6:58:
                    5e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:64:D9:EE:EF:E2:AB:B7:C6:70:1A:7C:92:54:9A:50:AC:2B:34:EA
            X509v3 Authority Key Identifier:
                keyid:C5:4D:E3:30:22:CD:4D:3A:53:CE:C7:0A:D2:6E:F7:C0:CA:09:12:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:02:de:4f:3f:a0:f4:c2:c7:c9:1b:d0:be:0b:25:12:8c:
         28:67:b9:18:0a:06:21:04:ed:c0:29:6f:4d:b7:4e:96:4e:03:
         ce:8a:be:5b:9a:04:0d:20:10:8a:60:33:6e:18:25:00:68:a4:
         df:dd:cd:55:d4:af:ce:0b:a7:5f:e7:9b:84:cf:cf:8f:45:f2:
         fb:22:3d:3c:41:40:7d:b1:f7:8b:5a:2d:1e:21:d2:cb:b9:d4:
         8f:47:d4:61:96:db:aa:55:d2:61:75:f6:85:0e:06:75:00:ba:
         4a:c2:dd:0b:6a:a3:73:d6:6e:33:d3:bd:7c:e0:6b:a4:9d:74:
         df:21:e1:30:2c:d3:7b:d5:e8:12:64:71:3b:6a:89:50:f1:17:
         9d:e0:49:31:34:68:14:ef:56:5b:81:e4:65:fc:4c:ae:14:ad:
         65:30:0f:89:ee:e4:a5:e2:0d:db:e4:29:90:52:21:f0:87:4a:
         8e:0c:14:77:bc:21:3a:36:5e:db:fd:2b:fc:60:93:c0:da:99:
         72:6c:3b:17:46:a9:83:fd:80:f7:02:db:d6:db:53:9d:b4:f7:
         b7:20:e6:1b:9c:20:34:e0:ae:8f:bc:79:a9:0b:c4:33:c7:d3:
         68:fd:16:1b:2a:74:31:92:fb:6f:bd:45:03:d0:7e:30:3e:8d:
         4c:8a:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----