Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.mft
File:                     E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.mft (raw, json)
Hash identifier:          7jK+fM/nO4u3oqbhtUSM/i/JULlFY9l3/c7YTO7wpVk=
Subject key identifier:   4D:3C:2E:2C:BB:45:9B:25:46:A6:BD:D8:25:11:BD:42:21:5B:69:0E
Authority key identifier: E3:A4:43:85:13:EF:DD:1A:35:AD:D2:98:8C:6A:B7:B9:59:76:9B:9A
Certificate issuer:       /CN=E3A4438513EFDD1A35ADD2988C6AB7B959769B9A
Certificate serial:       0337A1F0A9171BCDF17A5E0D1C9FC228A8D62D9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.mft
Manifest number:          0393
Signing time:             Thu 01 Feb 2024 11:31:38 +0000
Manifest this update:     Thu 01 Feb 2024 11:26:38 +0000
Manifest next update:     Fri 02 Feb 2024 14:39:38 +0000
Files and hashes:         1: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: 0HHgvd8oPixBAHvi229WpFOozRwWk6XlChSIGhnfbZY=)
                          2: 323830343a333237303a3a2f33322d3334203d3e20323635303738.roa (hash: 5lsr1ze16n70PlKGO35s3bKyweF9RVjkcawo0ElxmrQ=)
                          3: E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.crl (hash: p+OtX0eEVQ+qnNXqMdY6XB70cqpFKTIkSL4Wg+KlmEI=)
                          4: 3137302e3233332e3131322e302f32322d3234203d3e20323635303738.roa (hash: 3TCdnaXKhrAoBDUCtpFf6XrAmNlFeKGpzrBemcWHSKc=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:37:a1:f0:a9:17:1b:cd:f1:7a:5e:0d:1c:9f:c2:28:a8:d6:2d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A4438513EFDD1A35ADD2988C6AB7B959769B9A
        Validity
            Not Before: Feb  1 11:26:38 2024 GMT
            Not After : Feb  2 14:39:38 2024 GMT
        Subject: CN=4D3C2E2CBB459B2546A6BDD82511BD42215B690E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:33:ce:70:39:e3:79:72:70:80:c9:5c:98:
                    5d:41:96:7b:1a:96:15:ca:4d:f8:86:8a:8f:4a:fa:
                    2a:ef:f5:d7:44:d4:41:4a:d0:56:6a:84:b5:76:f2:
                    30:fe:e5:c1:9e:36:40:eb:c8:29:a7:a0:44:97:97:
                    27:36:61:e6:d5:a7:69:a7:73:04:18:e0:71:b4:1b:
                    c3:a3:6b:f1:4f:52:1e:7c:b2:bc:aa:e2:32:81:72:
                    02:e7:bb:17:e8:0d:4a:69:11:17:12:b9:81:ff:db:
                    a3:20:65:d6:66:0f:33:81:1e:22:95:05:24:da:9f:
                    5b:4a:a5:34:ee:24:66:24:10:86:d4:32:77:02:17:
                    39:7e:f8:23:42:12:61:33:74:38:d5:12:c6:8f:e3:
                    4a:80:56:56:54:7d:cb:68:a2:3c:fd:9d:24:bf:30:
                    a1:43:91:e0:8c:32:83:15:a8:1d:20:42:e7:fd:90:
                    5a:7c:8d:1a:79:32:ac:4b:76:92:b7:ac:52:d8:e2:
                    11:2f:54:34:93:a3:92:bd:48:28:38:b4:5c:51:63:
                    27:8a:cb:a6:a8:8e:72:8b:8a:9a:2f:4b:51:27:63:
                    76:c3:9f:83:06:00:b3:01:6c:24:e5:2c:cf:ed:50:
                    e5:ed:59:a0:76:31:53:8a:48:ab:35:9b:ea:26:9e:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3C:2E:2C:BB:45:9B:25:46:A6:BD:D8:25:11:BD:42:21:5B:69:0E
            X509v3 Authority Key Identifier:
                keyid:E3:A4:43:85:13:EF:DD:1A:35:AD:D2:98:8C:6A:B7:B9:59:76:9B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:d9:10:a5:86:77:8b:5e:f5:51:30:90:a8:05:d0:b8:fc:
         36:e0:5e:77:ca:b6:eb:e2:33:4a:9a:d8:aa:69:8b:b4:47:77:
         76:83:3a:f2:8e:d1:7e:d5:8c:9c:a6:96:9b:df:f6:3c:65:b3:
         56:9a:69:1f:06:ee:09:e5:ed:c8:72:03:bf:ba:0a:52:e9:39:
         57:f9:4d:b3:0a:ea:9a:6d:82:ff:21:c0:ca:ef:16:19:95:52:
         0c:2d:a0:82:dd:7d:40:58:2a:5b:45:be:8c:c9:ef:5b:e3:6a:
         05:67:ca:e4:d7:bc:a5:a6:f6:0e:25:9a:34:35:78:55:75:50:
         e1:c1:d9:85:a6:f9:13:58:f9:63:b9:4c:26:cd:83:de:7b:6a:
         df:86:67:f2:40:41:d9:59:75:14:77:01:a8:e7:73:b2:6f:50:
         1b:65:cf:f2:1c:7f:be:93:cf:12:ad:da:44:3e:3c:5d:84:1e:
         46:4e:a8:c5:f0:bd:ab:26:1d:7d:4b:a9:5b:a8:18:aa:e4:5b:
         04:75:66:f0:0e:a6:ff:8f:8c:17:b5:38:a3:07:d2:26:dd:be:
         78:dd:39:1a:df:18:e6:61:6a:9f:20:ab:ed:8b:4a:d1:e8:08:
         20:0f:46:ef:f5:34:47:c9:6a:ae:97:81:45:32:c0:89:18:28:
         38:b2:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 21:54:33 2024 by rpki-client on console-ams.rpki-client.org