Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/00F878DCA6C602A6C307F603FD0301FBCF99738A.mft
File:                     00F878DCA6C602A6C307F603FD0301FBCF99738A.mft (raw, json)
Hash identifier:          hbwqB9B6dRSOgZPiMfiSWTy+5/G9gFuLcjxydTSFNyU=
Subject key identifier:   9D:98:6F:0D:D5:D9:54:FB:36:95:5B:39:2B:68:D8:4C:CF:58:94:41
Authority key identifier: 00:F8:78:DC:A6:C6:02:A6:C3:07:F6:03:FD:03:01:FB:CF:99:73:8A
Certificate issuer:       /CN=00F878DCA6C602A6C307F603FD0301FBCF99738A
Certificate serial:       460113B6BF816CFBDD38ACD7A2DE7616573E693F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00F878DCA6C602A6C307F603FD0301FBCF99738A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/00F878DCA6C602A6C307F603FD0301FBCF99738A.mft
Manifest number:          6C
Signing time:             Thu 29 Aug 2024 09:26:05 +0000
Manifest this update:     Thu 29 Aug 2024 09:21:05 +0000
Manifest next update:     Fri 30 Aug 2024 12:07:05 +0000
Files and hashes:         1: 323830343a336363303a3a2f33322d3332203d3e20323636323332.roa (hash: KsVPkwcDghmqAk8oL7Djn9WeLC3VRyUqvjoL9XZMO4Q=)
                          2: 34352e362e3138322e302f32342d3234203d3e20323636323332.roa (hash: 7pByW8wwByJnlh68Drfu+HRxuWATaEJQDVqY11DJUIM=)
                          3: 34352e362e3138302e302f32342d3234203d3e20323636323332.roa (hash: nzd+jIHGwNiJihBlww4UHN7Shld2excPM49j+e4ALaQ=)
                          4: 34352e362e3138332e302f32342d3234203d3e20323636323332.roa (hash: f/JxBhbgs/J+qWyoGgCm5kCvjFUikjdQ9BlbSM1ne1Y=)
                          5: 34352e362e3138302e302f32322d3232203d3e20323636323332.roa (hash: NBsjveivVAvyONtP3D0QC0v2yTKEUZpkpGnqY0yq2C8=)
                          6: 34352e362e3138312e302f32342d3234203d3e20323636323332.roa (hash: pmZKA+k/DkhUJffE46qEb7EXAMqlPFy7MljuE4E5mmI=)
                          7: 00F878DCA6C602A6C307F603FD0301FBCF99738A.crl (hash: bUeoN2z1EBS7fKC9pfRr3qNTKiCzlTTV6wRHThkmIN4=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:01:13:b6:bf:81:6c:fb:dd:38:ac:d7:a2:de:76:16:57:3e:69:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F878DCA6C602A6C307F603FD0301FBCF99738A
        Validity
            Not Before: Aug 29 09:21:05 2024 GMT
            Not After : Aug 30 12:07:05 2024 GMT
        Subject: CN=9D986F0DD5D954FB36955B392B68D84CCF589441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:97:fc:eb:a1:bb:89:c9:b3:d0:ab:2f:66:
                    76:02:3b:b5:32:1e:ba:d8:08:be:65:69:5c:09:9a:
                    a0:60:c7:07:ab:ff:f4:2b:0e:ee:00:84:5c:b2:bd:
                    1d:d3:d7:f4:b3:c1:02:08:e1:c6:ae:97:bc:55:4c:
                    e0:7a:5c:51:a3:31:78:fe:4d:17:12:7f:78:4c:2a:
                    cd:b1:22:28:72:a3:5c:98:da:d9:2f:20:8c:9c:c2:
                    7c:cd:73:35:5e:43:49:3e:14:37:4a:40:d0:98:7b:
                    20:73:ec:49:06:5a:1a:65:58:b3:4e:66:c1:92:44:
                    5e:9b:e4:ec:4c:c8:fc:92:76:ca:4e:f4:ae:b2:fd:
                    e4:4b:b7:40:52:9e:6c:6a:3b:29:12:69:27:86:a2:
                    25:59:75:6a:52:80:f3:9d:49:41:4d:55:b2:5b:70:
                    ef:4c:f4:dd:90:57:0f:35:4e:60:22:3b:ba:87:39:
                    15:0e:43:66:0b:07:c6:f1:c9:64:11:43:68:57:0a:
                    8b:5d:45:4b:af:7f:6c:9b:fa:ec:cf:d5:c0:4c:a3:
                    1c:e0:61:c3:6b:1e:fc:6f:c7:df:52:6e:01:b5:bb:
                    04:12:45:d6:3b:45:7d:eb:be:59:78:3f:32:d0:92:
                    4a:49:f7:44:79:f8:01:ca:c2:d8:54:12:b1:85:c1:
                    53:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:98:6F:0D:D5:D9:54:FB:36:95:5B:39:2B:68:D8:4C:CF:58:94:41
            X509v3 Authority Key Identifier:
                keyid:00:F8:78:DC:A6:C6:02:A6:C3:07:F6:03:FD:03:01:FB:CF:99:73:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/00F878DCA6C602A6C307F603FD0301FBCF99738A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00F878DCA6C602A6C307F603FD0301FBCF99738A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/00F878DCA6C602A6C307F603FD0301FBCF99738A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:3c:0d:9c:34:0a:de:d1:b0:ce:5f:f2:e1:50:42:c8:b3:
         ad:ae:4d:35:00:4c:ae:df:55:f4:bd:27:8a:71:35:aa:8a:63:
         58:1c:f7:86:80:0e:11:aa:89:6b:7d:bd:ce:2a:ca:15:53:c9:
         29:30:0e:3c:15:2a:c2:a7:ef:38:b4:48:0c:6a:ce:85:c8:9b:
         3c:ce:4f:b9:ba:ae:a2:b4:65:00:a0:c7:7f:6f:e6:64:99:94:
         20:48:c1:55:ee:5f:20:04:1e:83:f1:4b:6a:65:0c:d7:1d:3e:
         36:b6:2f:55:50:01:47:95:db:b3:92:db:ff:6c:f5:00:30:1b:
         c8:3a:cd:41:81:4d:fc:3d:81:4e:d2:78:89:37:ea:a8:15:2f:
         6e:b9:07:09:39:a8:71:88:51:ad:bb:ce:f1:14:09:4a:59:8f:
         51:81:ca:05:1d:97:31:72:7f:71:9a:47:8c:ba:b9:12:51:23:
         54:f3:66:6b:2f:d6:e6:f9:ec:1d:be:66:a1:fc:f8:c5:c5:f5:
         b4:7b:62:18:86:ae:de:8c:4e:fd:45:fc:0f:cb:36:e7:4d:6b:
         ed:0b:df:f9:e1:b8:6d:b5:6c:13:f0:f0:40:d0:3c:23:31:d7:
         72:e0:ea:ac:3e:da:bf:4d:ab:0a:9d:20:70:e3:af:fc:ec:b8:
         9c:1f:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----