Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.mft
File:                     9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.mft (raw, json)
Hash identifier:          jRDGARMr1rrp++AKTEUfNBPK6RAACU3qIgRlsu1WXCo=
Subject key identifier:   1E:AB:94:10:9D:25:70:32:D9:57:B3:44:6B:E6:19:56:B6:4C:7F:48
Authority key identifier: 9F:B9:DC:7D:DD:18:C6:39:56:30:6C:BC:33:A5:1C:DE:FF:D2:88:DC
Certificate issuer:       /CN=9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC
Certificate serial:       3AE05E0D6562E7A54621F5186634907CC8431874
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.mft
Manifest number:          0B
Signing time:             Thu 17 Oct 2024 17:21:00 +0000
Manifest this update:     Thu 17 Oct 2024 17:16:00 +0000
Manifest next update:     Fri 18 Oct 2024 20:25:00 +0000
Files and hashes:         1: 3133312e3130382e36302e302f32322d3234203d3e203631363634.roa (hash: mnV6oiJr/aGQhSf4vNCQDfVVUFjaUrqSTYX0jM/Wy4E=)
                          2: 323830343a316339383a3a2f33322d3438203d3e203631363634.roa (hash: x0+p6KIVjnoS3RsgDWGCIyPvmNx0EyswlttR+7mjjAM=)
                          3: 9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.crl (hash: 4739mD7mhsUszWU7++ijxzc5hoH7AWNwvW5yV9FPQko=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e0:5e:0d:65:62:e7:a5:46:21:f5:18:66:34:90:7c:c8:43:18:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC
        Validity
            Not Before: Oct 17 17:16:00 2024 GMT
            Not After : Oct 18 20:25:00 2024 GMT
        Subject: CN=1EAB94109D257032D957B3446BE61956B64C7F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:1e:4a:22:df:00:ad:ad:18:17:3b:97:6f:
                    d3:d9:c1:57:10:27:4f:4f:ba:65:d5:e2:8a:8d:6c:
                    2e:01:f5:f1:c2:da:53:f0:00:a2:87:77:64:6a:33:
                    33:9b:57:c3:ae:43:e4:73:dd:5b:7c:6b:51:50:81:
                    e1:f6:df:99:64:51:2e:90:7f:2e:01:ed:00:53:bc:
                    24:e3:35:90:c4:3e:8a:61:55:6e:49:fd:6c:53:d9:
                    c4:39:43:14:8e:e1:1b:6a:a5:ca:f4:59:a9:2c:d4:
                    cf:b6:ee:38:77:23:0c:ee:8c:91:08:9d:e7:19:14:
                    c8:e2:78:ae:81:62:d5:c4:8e:6a:5d:01:a7:5f:67:
                    af:e8:03:f2:00:44:3d:19:20:1b:b3:19:75:9d:38:
                    1d:69:f5:b2:40:0b:4a:46:a1:36:91:57:ad:f1:ea:
                    da:18:74:b2:36:19:81:72:97:c9:be:94:4e:8d:d2:
                    6f:87:92:d1:dd:c7:30:f6:94:87:d2:f7:14:6d:20:
                    04:9e:8e:8e:b1:0f:83:7f:25:4b:8f:c3:91:bf:45:
                    09:bd:10:20:c0:8a:96:b9:62:62:2b:5d:50:4b:f8:
                    78:62:3f:72:2f:99:48:35:37:1b:ed:03:0c:d3:69:
                    db:8b:40:6d:fe:3e:62:4f:e1:01:af:ac:5e:33:18:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AB:94:10:9D:25:70:32:D9:57:B3:44:6B:E6:19:56:B6:4C:7F:48
            X509v3 Authority Key Identifier:
                keyid:9F:B9:DC:7D:DD:18:C6:39:56:30:6C:BC:33:A5:1C:DE:FF:D2:88:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:a4:61:fe:b0:2a:34:67:04:56:7e:43:a2:2f:17:00:bc:04:
         f3:d5:f9:4f:70:23:ef:19:0b:14:e7:2b:b9:c1:8b:06:df:ae:
         52:61:66:e8:57:f8:6c:13:e4:fe:d6:65:e2:50:c8:58:cc:c8:
         af:77:96:85:6a:a9:e9:b4:f6:3b:11:95:b7:cb:97:63:ac:ec:
         d5:21:bb:fc:66:c9:d9:a0:85:d9:a9:92:d6:ae:52:2c:56:78:
         8c:5e:80:7b:17:4d:bc:7c:5e:2d:fc:e3:8d:46:f9:21:d7:4b:
         1d:dc:15:62:a8:61:40:e5:4d:04:83:0f:89:25:66:52:64:84:
         c8:68:79:62:47:9a:18:6b:f1:17:dd:4b:da:79:54:ab:93:b8:
         40:44:d1:86:f1:0b:02:2c:c8:2f:7c:75:1c:d6:a5:a4:64:ff:
         4b:3d:75:9b:79:37:33:33:c7:d7:0b:89:c9:f7:c7:6e:d5:b2:
         12:b7:eb:d0:39:0d:67:e3:9f:e0:82:05:c8:db:ff:ba:12:e1:
         98:c0:36:0b:24:dc:5a:2d:79:4a:b1:0a:3a:8c:a3:3e:bc:12:
         5d:e6:d5:44:47:ce:8e:38:68:a5:f8:a7:d0:09:53:65:c9:65:
         d6:92:85:25:57:6b:49:d5:28:d1:a8:45:8b:10:6d:66:f3:b4:
         12:53:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----