Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/89245D9B035AC8A394E173B578087A9053DBDBBB.mft
File:                     89245D9B035AC8A394E173B578087A9053DBDBBB.mft (raw, json)
Hash identifier:          UB7b31tGiy2iJKnsTSb8gSrxftd9bFURRJtT2kyMgfo=
Subject key identifier:   43:EF:F0:FF:4B:21:00:BC:E4:69:A8:36:5A:6D:FB:13:13:8C:61:DA
Authority key identifier: 89:24:5D:9B:03:5A:C8:A3:94:E1:73:B5:78:08:7A:90:53:DB:DB:BB
Certificate issuer:       /CN=89245D9B035AC8A394E173B578087A9053DBDBBB
Certificate serial:       69C178E34D8B5C3D918EC6FB416432E5A201AED1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89245D9B035AC8A394E173B578087A9053DBDBBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/89245D9B035AC8A394E173B578087A9053DBDBBB.mft
Manifest number:          38
Signing time:             Sun 22 Sep 2024 23:31:34 +0000
Manifest this update:     Sun 22 Sep 2024 23:26:34 +0000
Manifest next update:     Mon 23 Sep 2024 23:59:34 +0000
Files and hashes:         1: 89245D9B035AC8A394E173B578087A9053DBDBBB.crl (hash: SCYBExdLXmg1j0k6vGomtwwHSNQJmuNv4HKHy+9224s=)
                          2: 323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (hash: nmBvGcZEYmlQ8cY1AfV1LgeSzDNibpdRS4Lv9w4FPQ8=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c1:78:e3:4d:8b:5c:3d:91:8e:c6:fb:41:64:32:e5:a2:01:ae:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89245D9B035AC8A394E173B578087A9053DBDBBB
        Validity
            Not Before: Sep 22 23:26:34 2024 GMT
            Not After : Sep 23 23:59:34 2024 GMT
        Subject: CN=43EFF0FF4B2100BCE469A8365A6DFB13138C61DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:97:6a:a6:48:73:ce:1a:09:48:a1:98:83:
                    4a:0b:ce:25:eb:96:98:a6:73:9f:e4:61:21:a3:98:
                    cc:25:b8:44:20:1e:20:95:5c:fc:bb:fb:49:62:e2:
                    9a:59:c4:92:0c:e0:15:f1:73:75:e9:09:4a:04:1b:
                    44:c1:50:29:5c:02:b9:51:8d:3f:97:20:a4:ad:9d:
                    d0:47:61:44:bb:ef:84:c1:60:7d:5a:72:d1:d0:b5:
                    ee:61:de:2c:7f:3a:c4:81:5b:48:c4:7d:51:81:9a:
                    91:ba:03:cb:ae:7e:c9:aa:54:58:ae:a3:c9:96:37:
                    76:5c:53:56:e9:75:2a:47:61:f5:f7:3a:08:cb:f7:
                    93:19:7e:7d:e0:b7:da:41:ed:f7:d8:99:aa:58:d0:
                    43:b3:04:b4:51:07:d5:8e:98:66:d7:1d:7d:2f:e9:
                    ca:3d:db:be:fc:ea:9f:fb:8f:25:52:67:ff:2e:67:
                    69:c4:32:64:e3:46:2a:79:9e:4a:fd:d7:77:7e:f5:
                    af:17:7f:7a:10:cc:1d:99:0d:f1:98:e7:0c:4d:71:
                    51:c4:da:8f:c9:7f:78:05:b7:da:89:0b:1e:2a:e0:
                    9e:42:92:a1:a5:8c:9e:b9:8c:5b:af:50:f1:ab:17:
                    f5:d6:f1:b4:8c:d3:82:3f:6e:c3:f0:a6:01:91:55:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EF:F0:FF:4B:21:00:BC:E4:69:A8:36:5A:6D:FB:13:13:8C:61:DA
            X509v3 Authority Key Identifier:
                keyid:89:24:5D:9B:03:5A:C8:A3:94:E1:73:B5:78:08:7A:90:53:DB:DB:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/89245D9B035AC8A394E173B578087A9053DBDBBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89245D9B035AC8A394E173B578087A9053DBDBBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/89245D9B035AC8A394E173B578087A9053DBDBBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:09:6b:b9:e2:e8:01:1e:78:d2:62:e0:d9:ac:ab:32:f8:69:
         03:d1:cd:4b:b2:4c:7d:9c:0d:4f:ee:24:5d:66:3e:1d:f9:9c:
         77:27:8d:6d:0a:39:ad:d6:ef:43:f1:1f:ff:2f:fe:61:5a:bb:
         63:32:6c:fe:cf:59:d9:77:0c:4c:ee:22:f1:ba:2e:ad:a2:a0:
         ff:b8:d5:51:0c:eb:b7:12:cf:eb:82:c6:04:9d:a6:e1:bd:a9:
         c4:c9:42:48:3d:c7:3a:81:a7:6f:d0:e5:4f:30:db:72:79:b4:
         b2:69:0d:85:d2:b4:8e:57:21:fc:f9:a1:f5:5a:21:56:57:da:
         36:f6:8d:42:05:5d:52:6b:74:f4:b4:02:b0:07:69:fb:49:eb:
         b2:85:10:25:c0:d7:4d:24:9a:69:cc:e1:22:b3:ed:d0:6c:9d:
         40:3c:49:75:8b:2e:79:a1:47:a5:b1:f9:7d:b2:1c:e9:6d:01:
         e0:2a:aa:50:77:e4:da:4f:35:d2:fc:1a:36:8b:d0:5e:64:3d:
         f4:79:89:be:23:18:53:71:32:58:5f:9b:ae:43:e1:90:fe:d8:
         c2:b8:1a:64:ea:dd:c2:80:5f:6d:a7:ac:e1:d3:f3:a7:57:e3:
         c8:39:92:ed:04:01:87:cf:5f:51:84:05:72:bd:46:b8:dc:63:
         0f:4f:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----