Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.mft
File:                     1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.mft (raw, json)
Hash identifier:          x/XovIW0Q0BB5cgiNM8umU+7xmzTrVf241QGQT2g8oY=
Subject key identifier:   67:C2:8B:DD:2F:70:49:1E:C8:8E:37:03:69:D2:79:10:B0:A9:8F:E9
Authority key identifier: 1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F
Certificate issuer:       /CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
Certificate serial:       73FA64A6918ABD45C944A4CD4153FA7AA283009D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.mft
Manifest number:          A3
Signing time:             Tue 30 Jul 2024 13:11:31 +0000
Manifest this update:     Tue 30 Jul 2024 13:06:31 +0000
Manifest next update:     Wed 31 Jul 2024 13:28:31 +0000
Files and hashes:         1: 1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.crl (hash: YdtXnewy66RkoS5PEoC2Q8QC8AQJtHbeu1SBLqaFq9I=)
                          2: 323830343a373361343a3a2f33322d3438203d3e20323730393238.roa (hash: HA9IZLJYcvxS+EnbVXuhrSxO6F0kmnZhbV8IHCmhpHM=)
                          3: 3139302e3132332e322e302f32332d3234203d3e20323730393238.roa (hash: 4NYQDmgkYH3C6pJxFxex0RGA2l49wVtpBhnbmwAqiEQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:fa:64:a6:91:8a:bd:45:c9:44:a4:cd:41:53:fa:7a:a2:83:00:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
        Validity
            Not Before: Jul 30 13:06:31 2024 GMT
            Not After : Jul 31 13:28:31 2024 GMT
        Subject: CN=67C28BDD2F70491EC88E370369D27910B0A98FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:48:a4:fa:f4:ab:3a:75:6f:b9:2d:5e:d5:
                    06:12:bf:17:a8:8c:a6:40:a9:9e:06:ca:8d:49:9d:
                    3d:d6:8b:f0:17:31:42:3b:c7:14:92:86:87:66:df:
                    9a:8b:61:74:48:03:b4:ea:31:78:ed:db:70:6c:27:
                    8c:29:0a:90:73:9c:de:45:e2:dd:66:69:19:8e:46:
                    6f:f1:7b:69:51:e5:12:80:15:be:0b:3b:6e:bd:fd:
                    fc:fb:75:75:41:43:c3:1c:ca:11:ea:e8:2f:fa:84:
                    d7:41:28:f0:4e:42:b6:06:df:10:ca:85:68:7a:ad:
                    e8:b9:a0:bf:4e:b4:84:20:66:b7:f3:cf:b3:e3:69:
                    14:62:ae:68:38:ed:20:2d:75:68:6c:c8:3a:a8:5c:
                    ff:4a:e9:be:f1:02:a0:05:d2:7f:62:ae:ac:fb:2f:
                    02:4b:5a:89:9c:d0:7c:b9:1c:d8:2f:b5:c2:c2:17:
                    ed:05:43:d7:e0:69:1e:5c:b0:2d:af:20:45:48:fd:
                    0d:6b:a7:bb:b2:ad:f0:68:a7:66:3e:fd:9f:aa:78:
                    ed:3d:57:eb:ff:da:0b:17:11:4a:d6:24:cc:ed:20:
                    aa:e9:0b:47:4f:5c:6f:e4:51:bb:fe:36:fe:c4:25:
                    71:3e:77:9b:ae:a5:2f:9d:65:33:8f:48:87:0a:d8:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C2:8B:DD:2F:70:49:1E:C8:8E:37:03:69:D2:79:10:B0:A9:8F:E9
            X509v3 Authority Key Identifier:
                keyid:1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:47:bc:d7:ed:e8:1d:cc:a5:d4:df:06:da:c4:c7:0b:d6:e9:
         ba:c6:b8:51:e0:f0:df:9d:9b:82:e7:08:d9:3a:e8:e8:8c:96:
         0c:00:50:b5:db:b5:95:bb:91:af:bb:13:a1:a6:1e:10:ed:3b:
         e2:0c:43:15:d0:57:16:9d:5a:c5:d9:24:7e:b5:a6:f2:09:99:
         44:b4:a4:f1:e5:e9:64:e6:d8:4a:4a:fd:0d:f8:b2:15:58:c0:
         a3:90:83:37:3d:df:01:6e:5f:01:4d:0a:01:da:f0:af:b9:fa:
         a8:92:54:c5:90:51:50:75:04:85:ec:68:6f:08:7c:b7:22:3d:
         83:7f:b3:de:47:27:f8:d0:b4:4e:3d:b5:a5:96:e8:99:f1:73:
         1f:3d:e8:e3:9a:bd:1c:58:77:3d:00:3e:04:b4:e3:ab:0c:40:
         7c:da:53:3e:a9:a6:f8:b1:56:24:d8:0c:d6:53:ef:d4:20:0b:
         73:7a:3a:ea:08:ce:68:44:a9:de:43:63:10:3d:f1:b3:b0:0e:
         0b:f3:b6:be:12:31:39:6c:19:de:ea:3d:b5:e7:62:2f:eb:a5:
         30:f0:2d:d3:bb:47:f8:95:a3:bf:e3:4c:55:12:62:b3:13:7b:
         6c:30:60:59:dd:bf:12:77:58:dc:31:e5:66:26:61:95:02:8b:
         1d:aa:e5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----