Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/7E693FC0717C202DB4CEF639324A1433D6C128C8.mft
File:                     7E693FC0717C202DB4CEF639324A1433D6C128C8.mft (raw, json)
Hash identifier:          oGFbt+qgymhqBSiz3TDpORhr9HP4N1+zlYcuT4GBRYc=
Subject key identifier:   E8:E9:D2:CA:B6:3A:0C:E9:42:A1:04:E2:EE:2E:0C:86:C9:CC:E4:F6
Authority key identifier: 7E:69:3F:C0:71:7C:20:2D:B4:CE:F6:39:32:4A:14:33:D6:C1:28:C8
Certificate issuer:       /CN=7E693FC0717C202DB4CEF639324A1433D6C128C8
Certificate serial:       176BAC9A87ADD80CC8C7700E057F6FCF83453C5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E693FC0717C202DB4CEF639324A1433D6C128C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/7E693FC0717C202DB4CEF639324A1433D6C128C8.mft
Manifest number:          4F
Signing time:             Fri 20 Sep 2024 15:43:03 +0000
Manifest this update:     Fri 20 Sep 2024 15:38:03 +0000
Manifest next update:     Sat 21 Sep 2024 17:41:03 +0000
Files and hashes:         1: 323830343a336532383a3a2f33322d313238203d3e20323636353737.roa (hash: kgXK7ulK2sdK5ZWZzlxMutPTFtPSbJjqev23QuzAm3k=)
                          2: 7E693FC0717C202DB4CEF639324A1433D6C128C8.crl (hash: mpHo75Ps3B0G3RknQ6kepnd9X0A0wfsKozcD40pLCPw=)
                          3: 3136302e3233382e3233362e302f32322d3332203d3e20323636353737.roa (hash: g0+/VQcKHEY01il2OhN8txgsvJRv573ULtwhrj2J+1U=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6b:ac:9a:87:ad:d8:0c:c8:c7:70:0e:05:7f:6f:cf:83:45:3c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E693FC0717C202DB4CEF639324A1433D6C128C8
        Validity
            Not Before: Sep 20 15:38:03 2024 GMT
            Not After : Sep 21 17:41:03 2024 GMT
        Subject: CN=E8E9D2CAB63A0CE942A104E2EE2E0C86C9CCE4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:37:1d:ab:d4:c3:1d:d4:73:d3:1c:c3:89:
                    4c:e3:66:7f:fe:eb:4c:d3:02:03:e9:cd:09:a1:c8:
                    29:07:3f:eb:e1:68:c1:31:d7:65:37:d4:fc:49:c7:
                    ab:05:bd:a2:54:4e:87:2d:ae:e0:97:ca:cd:fc:b7:
                    75:f7:29:51:3a:2f:d4:98:f5:6b:cc:fb:07:d5:6e:
                    0d:84:84:a6:86:c8:0c:76:f0:f9:07:87:4f:3b:48:
                    01:4e:b3:79:20:39:b9:4c:d7:da:2c:36:34:17:75:
                    21:1e:d3:e1:2d:83:06:02:14:9f:4f:fb:9b:72:52:
                    16:36:53:a2:44:f6:be:1a:13:8a:4f:9b:c9:20:49:
                    fb:01:bb:c2:4e:08:f2:c8:16:01:1d:69:80:44:96:
                    80:bb:7f:53:8d:41:8e:fc:f9:57:e5:f3:4e:8c:be:
                    74:bb:69:2b:f8:f7:57:79:c1:15:79:01:91:a0:92:
                    1c:63:95:06:df:cf:6d:b5:73:7d:52:b2:56:f0:6a:
                    d6:bd:50:c3:7f:0b:78:54:4e:61:d6:60:5e:bd:e1:
                    eb:06:09:ca:af:87:e4:cd:56:9c:d9:bd:ad:ef:e8:
                    3c:8d:8e:61:a9:8c:fc:d5:dd:8d:fa:63:91:0c:7c:
                    43:28:a4:40:7c:37:50:79:4c:72:c6:9a:19:00:e4:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E9:D2:CA:B6:3A:0C:E9:42:A1:04:E2:EE:2E:0C:86:C9:CC:E4:F6
            X509v3 Authority Key Identifier:
                keyid:7E:69:3F:C0:71:7C:20:2D:B4:CE:F6:39:32:4A:14:33:D6:C1:28:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/7E693FC0717C202DB4CEF639324A1433D6C128C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E693FC0717C202DB4CEF639324A1433D6C128C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/7E693FC0717C202DB4CEF639324A1433D6C128C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:06:cf:c8:6e:cd:49:a4:00:13:98:c1:55:2b:77:34:33:d9:
         32:93:d0:1a:00:2f:e8:a1:de:0f:44:d6:0d:86:80:0f:19:3c:
         da:ff:62:06:fd:87:b6:3d:62:28:67:09:cb:33:4e:6f:cc:fd:
         dc:d1:0c:43:57:15:44:14:31:2c:34:2c:f3:51:17:aa:13:cc:
         22:60:f9:77:51:44:85:11:a6:ef:a3:62:bc:f4:91:f6:0f:2b:
         ba:81:ff:55:7d:d1:d2:16:3c:51:0b:92:c3:a2:06:fc:7d:9f:
         c4:35:42:df:fd:c9:99:3b:ec:db:39:cb:27:41:7e:e1:a5:05:
         58:ee:fa:ca:fc:e2:35:14:8d:4d:31:85:d4:32:c3:ee:52:8e:
         c4:38:ba:c9:82:c2:01:32:48:52:78:2f:a1:34:4a:2a:1a:be:
         14:29:ce:ef:bb:b9:be:0e:0f:f5:f0:c2:99:ca:8b:36:f6:c7:
         e9:a5:b7:14:91:57:df:b0:aa:63:e6:03:fe:55:b4:73:57:b3:
         20:a7:fe:42:28:48:41:42:e1:36:5b:2a:cc:cd:37:60:cf:e9:
         17:4e:46:b2:df:cb:fd:6f:f7:de:04:bf:b9:66:a7:5b:75:7a:
         e0:f1:cf:a6:a5:ca:c6:bd:a8:7d:f2:30:cc:9a:7f:bd:63:95:
         57:1a:63:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF2usmoet2AzIx3AOBX9vz4NFPFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U2OTNGQzA3MTdDMjAyREI0Q0VGNjM5MzI0QTE0MzNE
NkMxMjhDODAeFw0yNDA5MjAxNTM4MDNaFw0yNDA5MjExNzQxMDNaMDMxMTAvBgNV
BAMTKEU4RTlEMkNBQjYzQTBDRTk0MkExMDRFMkVFMkUwQzg2QzlDQ0U0RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaIDcdq9TDHdRz0xzDiUzjZn/+
60zTAgPpzQmhyCkHP+vhaMEx12U31PxJx6sFvaJUToctruCXys38t3X3KVE6L9SY
9WvM+wfVbg2EhKaGyAx28PkHh087SAFOs3kgOblM19osNjQXdSEe0+EtgwYCFJ9P
+5tyUhY2U6JE9r4aE4pPm8kgSfsBu8JOCPLIFgEdaYBEloC7f1ONQY78+Vfl806M
vnS7aSv491d5wRV5AZGgkhxjlQbfz221c31Sslbwata9UMN/C3hUTmHWYF694esG
Ccqvh+TNVpzZva3v6DyNjmGpjPzV3Y36Y5EMfEMopEB8N1B5THLGmhkA5GUdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6OnSyrY6DOlCoQTi7i4MhsnM5PYwHwYDVR0j
BBgwFoAUfmk/wHF8IC20zvY5MkoUM9bBKMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREJQdnh2QWpFc0dYaTM0bVpLVjE2Mkc2c29acVQyZGVNRnFHeHFrWEp5
Q3EvMC83RTY5M0ZDMDcxN0MyMDJEQjRDRUY2MzkzMjRBMTQzM0Q2QzEyOEM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFNjkzRkMwNzE3QzIwMkRC
NENFRjYzOTMyNEExNDMzRDZDMTI4QzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REJQdnh2QWpFc0dYaTM0bVpLVjE2Mkc2c29acVQyZGVNRnFHeHFrWEp5Q3EvMC83
RTY5M0ZDMDcxN0MyMDJEQjRDRUY2MzkzMjRBMTQzM0Q2QzEyOEM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFQbPyG7NSaQAE5jBVSt3NDPZMpPQGgAv6KHeD0TWDYaADxk82v9iBv2Htj1i
KGcJyzNOb8z93NEMQ1cVRBQxLDQs81EXqhPMImD5d1FEhRGm76NivPSR9g8ruoH/
VX3R0hY8UQuSw6IG/H2fxDVC3/3JmTvs2znLJ0F+4aUFWO76yvziNRSNTTGF1DLD
7lKOxDi6yYLCATJIUngvoTRKKhq+FCnO77u5vg4P9fDCmcqLNvbH6aW3FJFX37Cq
Y+YD/lW0c1ezIKf+QihIQULhNlsqzM03YM/pF05Gst/L/W/33gS/uWanW3V64PHP
pqXKxr2offIwzJp/vWOVVxpj9g==
-----END CERTIFICATE-----