Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.mft
File:                     A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.mft (raw, json)
Hash identifier:          FeItJSMHn43k3i48FjUJ7duFVv0+pgS6VILeajz+Lxw=
Subject key identifier:   F9:7C:E3:09:B4:D0:59:86:AA:81:25:8C:B0:FF:DA:E7:72:87:95:3D
Authority key identifier: A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB
Certificate issuer:       /CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
Certificate serial:       4D827F2C58EB7C41869D426CA2D4AEF7E0C7E48A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.mft
Manifest number:          B6
Signing time:             Thu 15 Aug 2024 03:25:28 +0000
Manifest this update:     Thu 15 Aug 2024 03:20:28 +0000
Manifest next update:     Fri 16 Aug 2024 04:57:28 +0000
Files and hashes:         1: 323830343a316339383a3a2f33322d3438203d3e203631363634.roa (hash: VFwepX21D1VjjpL4yJX8Hz2SwYCpTk1QQSmrOAXvW4g=)
                          2: 3133312e3130382e36302e302f32322d3234203d3e203631363634.roa (hash: FAA7Rmde8drx9JCQjzKO+WjAVKc+N/PUTi1g7XU+uGs=)
                          3: A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.crl (hash: cvDkq+uFVudNmUSTJtK55XNtBm1n1M/w2B9bcM0TkYg=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:82:7f:2c:58:eb:7c:41:86:9d:42:6c:a2:d4:ae:f7:e0:c7:e4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
        Validity
            Not Before: Aug 15 03:20:28 2024 GMT
            Not After : Aug 16 04:57:28 2024 GMT
        Subject: CN=F97CE309B4D05986AA81258CB0FFDAE77287953D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:d6:75:d8:36:a4:9b:6d:30:ac:d2:cb:91:
                    5b:e3:2a:78:34:53:ed:24:13:a2:3e:ec:52:64:b9:
                    30:85:79:a1:68:fd:94:b4:ca:a1:f5:47:e2:a1:39:
                    ad:29:a4:5f:81:b7:2e:ce:a2:bf:32:b7:c9:ea:74:
                    f6:d2:15:bf:b6:40:24:ee:18:ae:cc:61:50:11:17:
                    1b:91:7e:74:5d:92:1a:50:b2:45:ce:8f:7a:f5:ba:
                    18:08:bb:e0:11:43:e3:d5:a3:44:da:d3:1e:fb:b4:
                    3d:57:68:f6:5f:fa:30:e8:90:4f:9b:b2:1d:4e:c7:
                    52:95:e1:56:c2:ea:05:26:a0:44:10:a9:8b:22:0a:
                    90:48:a3:c5:e1:00:a5:8d:b9:fd:ad:45:00:6b:93:
                    f3:7b:37:52:f3:06:51:eb:e1:dc:7a:97:01:c1:70:
                    5b:bb:3f:69:3f:51:48:bf:1d:5b:5a:71:ef:a7:d2:
                    c0:92:97:fc:6d:47:e4:28:82:15:9c:45:e0:b1:58:
                    69:6a:e4:44:81:78:02:4c:0f:7b:c7:5e:9f:8d:d6:
                    b2:b4:a0:eb:4a:57:cd:c3:f5:77:8f:f7:61:0c:39:
                    85:01:13:89:27:97:03:64:14:4c:ab:70:79:c3:11:
                    18:ab:c2:de:52:4a:ca:1b:fc:7a:67:a8:d1:76:32:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7C:E3:09:B4:D0:59:86:AA:81:25:8C:B0:FF:DA:E7:72:87:95:3D
            X509v3 Authority Key Identifier:
                keyid:A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:fe:0b:c1:5a:8a:1a:0a:34:e7:66:33:d6:44:b2:49:f3:
         56:4b:6a:e4:c4:da:ea:3f:eb:1b:7a:ff:7f:a5:94:63:cf:39:
         8d:82:9b:ea:9f:b3:3f:38:51:ae:5f:3c:c7:3b:64:22:19:cc:
         0d:14:27:62:76:d8:e8:cb:28:83:0f:dd:cd:52:f9:c3:33:62:
         ae:3b:e8:99:83:62:e3:f6:d6:f5:65:2a:b1:ff:4a:28:f8:4d:
         c5:71:68:fd:a3:30:5e:1b:0c:c9:7b:85:e8:65:e2:31:8f:bc:
         58:60:96:71:ea:ed:5a:cf:1d:bb:51:03:03:ca:4b:c7:67:47:
         b6:e7:7f:58:2c:ff:41:f9:33:1b:c3:11:08:88:e4:d6:01:71:
         e1:e6:1c:04:e2:93:fb:e8:31:42:b7:5f:ad:2d:f9:ab:57:58:
         e7:d1:af:76:3d:f9:01:5a:67:2d:4a:81:2f:0e:4c:8e:80:60:
         d1:4b:0b:da:23:b7:ea:9f:ed:70:99:c3:a0:e5:6d:20:fb:f0:
         43:cf:35:1d:aa:ee:c6:2f:95:a4:69:ff:c5:bb:85:a3:82:a7:
         04:7a:71:51:e4:f2:96:af:df:94:64:22:13:ca:04:f7:25:38:
         9a:f2:02:1b:03:3d:93:45:b4:6d:3e:20:3e:11:f1:fb:79:64:
         3f:14:2b:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTYJ/LFjrfEGGnUJsotSu9+DH5IowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxQTdBMERGRTlENEU0MkVBMTYxRTE0REU4QkFBODk3
N0UyOUZFQjAeFw0yNDA4MTUwMzIwMjhaFw0yNDA4MTYwNDU3MjhaMDMxMTAvBgNV
BAMTKEY5N0NFMzA5QjREMDU5ODZBQTgxMjU4Q0IwRkZEQUU3NzI4Nzk1M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4NZ12Dakm20wrNLLkVvjKng0
U+0kE6I+7FJkuTCFeaFo/ZS0yqH1R+KhOa0ppF+Bty7Oor8yt8nqdPbSFb+2QCTu
GK7MYVARFxuRfnRdkhpQskXOj3r1uhgIu+ARQ+PVo0Ta0x77tD1XaPZf+jDokE+b
sh1Ox1KV4VbC6gUmoEQQqYsiCpBIo8XhAKWNuf2tRQBrk/N7N1LzBlHr4dx6lwHB
cFu7P2k/UUi/HVtace+n0sCSl/xtR+QoghWcReCxWGlq5ESBeAJMD3vHXp+N1rK0
oOtKV83D9XeP92EMOYUBE4knlwNkFEyrcHnDERirwt5SSsob/HpnqNF2Mi8VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+XzjCbTQWYaqgSWMsP/a53KHlT0wHwYDVR0j
BBgwFoAUqRp6Df6dTkLqFh4U3ouqiXfin+swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBRYVlDYTMxY1A1cUd1UERNeDJWNWR2NnVuS1Axd3NYZnJOWlNFelFo
TWUvMS9BOTFBN0EwREZFOUQ0RTQyRUExNjFFMTRERThCQUE4OTc3RTI5RkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MUE3QTBERkU5RDRFNDJF
QTE2MUUxNERFOEJBQTg5NzdFMjlGRUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXBRYVlDYTMxY1A1cUd1UERNeDJWNWR2NnVuS1Axd3NYZnJOWlNFelFoTWUvMS9B
OTFBN0EwREZFOUQ0RTQyRUExNjFFMTRERThCQUE4OTc3RTI5RkVCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM9L+C8FaihoKNOdmM9ZEsknzVktq5MTa6j/rG3r/f6WUY885jYKb6p+zPzhR
rl88xztkIhnMDRQnYnbY6Msogw/dzVL5wzNirjvomYNi4/bW9WUqsf9KKPhNxXFo
/aMwXhsMyXuF6GXiMY+8WGCWcertWs8du1EDA8pLx2dHtud/WCz/QfkzG8MRCIjk
1gFx4eYcBOKT++gxQrdfrS35q1dY59Gvdj35AVpnLUqBLw5MjoBg0UsL2iO36p/t
cJnDoOVtIPvwQ881Haruxi+VpGn/xbuFo4KnBHpxUeTylq/flGQiE8oE9yU4mvIC
GwM9k0W0bT4gPhHx+3lkPxQrcg==
-----END CERTIFICATE-----