Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.mft
File:                     628FDF1FD002D8696B0090A9B2EED45327984F8D.mft (raw, json)
Hash identifier:          bFQ0zqoQb1+xlT7QikAyuKnsbbEuxT/jhF+1B0rMNzY=
Subject key identifier:   A1:93:83:45:1B:00:46:96:50:D9:A5:1D:E7:0E:5C:54:C9:13:28:0A
Authority key identifier: 62:8F:DF:1F:D0:02:D8:69:6B:00:90:A9:B2:EE:D4:53:27:98:4F:8D
Certificate issuer:       /CN=628FDF1FD002D8696B0090A9B2EED45327984F8D
Certificate serial:       37D612E1620066E4741BCE37984E7E6DDD48F876
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.mft
Manifest number:          75
Signing time:             Sat 29 Jun 2024 21:34:53 +0000
Manifest this update:     Sat 29 Jun 2024 21:29:53 +0000
Manifest next update:     Sun 30 Jun 2024 22:17:53 +0000
Files and hashes:         1: 323830343a343362343a3a2f33322d313238203d3e20323637353835.roa (hash: hCyND36gu+UvxVlUCO1eUnlun6/QsPfm5EHwkDMwjo0=)
                          2: 34352e37302e3139322e302f32322d3332203d3e20323637353835.roa (hash: 0tp6yeBokOCE3P53AuReGYI6oxERg8mn6iwkEIzEIIo=)
                          3: 628FDF1FD002D8696B0090A9B2EED45327984F8D.crl (hash: dD14XSmgOSzyxGfyEaSVUaR1Nh/k3L1dj8WS7Yiaz7o=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d6:12:e1:62:00:66:e4:74:1b:ce:37:98:4e:7e:6d:dd:48:f8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628FDF1FD002D8696B0090A9B2EED45327984F8D
        Validity
            Not Before: Jun 29 21:29:53 2024 GMT
            Not After : Jun 30 22:17:53 2024 GMT
        Subject: CN=A19383451B00469650D9A51DE70E5C54C913280A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:23:51:2f:95:e8:f5:ef:70:42:b9:9f:f6:
                    e7:10:a4:96:06:40:9a:87:00:ed:08:e8:39:87:94:
                    99:bc:f2:3f:ff:57:6b:bc:f7:45:02:ef:68:29:93:
                    5c:f3:c4:ca:ec:3d:51:2f:c8:9c:97:1d:e5:40:df:
                    a2:f0:8f:41:a1:f1:ad:37:00:bf:cb:62:14:ab:2d:
                    b0:07:c5:fc:af:39:bf:af:ac:28:0f:a9:5f:9c:43:
                    8f:f2:fd:27:d9:bf:69:d9:93:0c:ac:2c:1d:01:d2:
                    ee:be:e4:d8:28:8c:25:35:cd:cf:9a:de:d5:18:c9:
                    16:51:84:6e:03:4a:a9:b9:77:e9:64:fc:14:ac:c2:
                    41:8e:40:47:23:e1:6a:82:4b:3b:ab:ae:5d:86:1b:
                    53:98:39:41:18:53:4c:46:6b:87:f6:e8:7a:9b:0b:
                    8c:61:75:cd:ab:25:31:d7:be:ab:1f:22:de:39:11:
                    7d:a7:e1:dc:72:df:7b:5f:37:2a:11:19:b8:19:fd:
                    04:a2:c7:26:65:7b:c0:0c:77:fd:91:fc:b6:a6:ef:
                    d4:1f:13:55:e5:6f:bb:70:73:7b:c9:97:59:6a:4b:
                    a5:ae:cf:49:d6:b6:d4:99:55:ad:a4:4a:71:ce:e5:
                    f3:1d:ec:aa:c0:ca:e5:07:69:63:e8:9b:9e:0f:d4:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:93:83:45:1B:00:46:96:50:D9:A5:1D:E7:0E:5C:54:C9:13:28:0A
            X509v3 Authority Key Identifier:
                keyid:62:8F:DF:1F:D0:02:D8:69:6B:00:90:A9:B2:EE:D4:53:27:98:4F:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/1/628FDF1FD002D8696B0090A9B2EED45327984F8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0a:b2:fc:11:12:9b:4c:d6:54:3d:c9:b0:64:63:53:5c:41:
         9f:a4:e0:98:ae:c9:11:1e:cd:42:ea:f4:8b:c1:14:8d:06:a8:
         1d:08:90:7b:d9:d3:42:7a:1a:fa:95:ed:0a:b7:06:b6:a4:dd:
         fb:02:eb:48:e9:b0:54:59:ec:00:67:ad:e2:18:23:e3:a3:46:
         7c:ff:55:16:0b:8b:0f:49:1f:73:6c:f7:53:8b:2f:9b:28:b7:
         86:8a:22:6b:cb:54:fe:43:f9:2a:54:01:53:76:46:c0:f0:0f:
         ca:93:18:74:9a:6a:2b:b6:58:f6:ea:0e:4f:10:5f:75:52:7e:
         66:81:d1:89:9a:97:03:1a:dd:40:49:6a:55:01:f3:cb:8d:a1:
         75:c5:40:4e:c9:c8:e3:bf:4d:b1:9f:0a:07:a1:0b:19:6a:dc:
         4a:88:c3:0d:90:7b:04:ac:e2:48:d6:1d:b3:85:e0:12:db:60:
         2f:7d:f2:cc:3e:57:c9:c3:bd:cc:30:da:9e:20:80:c9:57:f9:
         c1:c0:43:d0:97:1c:c8:c1:b5:aa:07:32:68:89:22:64:b2:6a:
         d0:4e:7b:90:7b:1b:fd:af:ca:2c:3c:a6:80:a0:c8:5b:bf:8b:
         d6:03:93:79:d0:b5:c0:a2:5a:b6:be:7d:59:dd:49:80:0d:63:
         99:b5:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----