Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/1/9FEC8DC17BA288638EE74D99EFF437198B93516B.mft
File:                     9FEC8DC17BA288638EE74D99EFF437198B93516B.mft (raw, json)
Hash identifier:          ex/2En4YSOEq3uKDhBD1JdGp7+z7yYC9tKJIEsInT8k=
Subject key identifier:   7C:E4:56:66:76:42:3E:0F:32:10:50:CB:09:E9:79:91:EB:42:A3:B9
Authority key identifier: 9F:EC:8D:C1:7B:A2:88:63:8E:E7:4D:99:EF:F4:37:19:8B:93:51:6B
Certificate issuer:       /CN=9FEC8DC17BA288638EE74D99EFF437198B93516B
Certificate serial:       481479E9564ACA785FF8B49D8EA2A8A6828F52C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FEC8DC17BA288638EE74D99EFF437198B93516B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/1/9FEC8DC17BA288638EE74D99EFF437198B93516B.mft
Manifest number:          6D
Signing time:             Mon 24 Jun 2024 08:47:21 +0000
Manifest this update:     Mon 24 Jun 2024 08:42:21 +0000
Manifest next update:     Tue 25 Jun 2024 11:46:21 +0000
Files and hashes:         1: 9FEC8DC17BA288638EE74D99EFF437198B93516B.crl (hash: /kAV2uK/19R2Bs7kRdLUl++hd97sJHXNWQKokWATDYI=)
                          2: 323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (hash: NETx9JuDUr/tqZPx6xoBv6MGNBJRw3ERzIuuEqH9G/A=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:14:79:e9:56:4a:ca:78:5f:f8:b4:9d:8e:a2:a8:a6:82:8f:52:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEC8DC17BA288638EE74D99EFF437198B93516B
        Validity
            Not Before: Jun 24 08:42:21 2024 GMT
            Not After : Jun 25 11:46:21 2024 GMT
        Subject: CN=7CE4566676423E0F321050CB09E97991EB42A3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:4f:07:c4:90:d3:18:4c:f9:a0:29:de:7c:
                    4c:8a:79:89:07:df:f1:f5:ea:a0:30:47:1c:00:b3:
                    65:a4:45:7c:b0:d7:ba:20:b8:6c:98:7e:45:a7:d1:
                    88:ea:38:17:ae:85:d6:99:36:84:6f:6e:9d:f7:26:
                    43:63:ab:d1:d9:93:c2:0d:4c:da:55:2a:01:bb:08:
                    82:6e:5a:1d:f0:85:b3:e7:2e:b5:ab:2e:12:98:51:
                    20:49:29:55:f1:cb:19:12:ad:e9:86:93:98:a9:98:
                    5c:10:1e:4a:d7:01:45:50:4c:84:df:96:0d:52:06:
                    84:bb:10:af:18:e6:24:f8:70:e4:72:43:9e:bc:4b:
                    fe:10:ab:c4:9e:df:53:14:76:45:3f:98:b2:7d:85:
                    c3:5f:bb:45:e5:4d:14:f1:d4:c9:4d:42:f8:4e:85:
                    b4:c4:98:87:7a:79:9d:fc:ed:5d:77:87:2d:33:13:
                    c6:0a:05:72:a3:a5:e4:8f:57:34:66:4a:67:cb:ac:
                    4d:fb:d9:e4:4d:6c:6e:e0:37:f2:9c:c4:6e:f1:30:
                    fd:23:6a:ab:de:e1:bc:a4:20:ca:bc:35:c0:9c:a4:
                    08:8b:86:dd:75:08:df:dc:f8:77:68:13:90:80:c5:
                    47:67:76:61:eb:df:44:19:e8:19:c6:16:1d:9e:00:
                    03:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E4:56:66:76:42:3E:0F:32:10:50:CB:09:E9:79:91:EB:42:A3:B9
            X509v3 Authority Key Identifier:
                keyid:9F:EC:8D:C1:7B:A2:88:63:8E:E7:4D:99:EF:F4:37:19:8B:93:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/1/9FEC8DC17BA288638EE74D99EFF437198B93516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FEC8DC17BA288638EE74D99EFF437198B93516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/1/9FEC8DC17BA288638EE74D99EFF437198B93516B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0c:fc:4e:23:6f:59:e5:2d:89:d7:1a:8e:8c:0a:03:77:2a:
         1f:34:a9:2a:c8:e2:cb:72:46:a4:23:0a:25:27:c8:e1:b8:af:
         c1:7d:b4:a5:84:5a:ec:8d:2c:fb:44:27:e4:a2:ed:ff:ce:b6:
         bc:fa:66:8c:3f:a9:20:4c:95:86:88:96:46:02:c2:d9:a2:97:
         60:6b:db:5a:e1:42:ac:dc:b9:52:40:f0:36:3c:ad:e9:70:84:
         5b:a5:f8:0c:46:91:f9:3d:5e:88:d0:d5:eb:d5:8e:c4:8a:66:
         f9:6d:ae:d3:8b:52:98:cd:38:3d:3f:b3:3e:fd:4e:a1:38:47:
         c4:c9:e3:dc:43:aa:31:73:4b:20:56:7a:72:74:0e:b6:4e:82:
         ee:99:84:91:09:37:7f:0e:49:3a:bf:6e:7c:48:6c:8f:c8:ff:
         47:75:ef:fe:b0:7b:e1:f7:de:1a:c7:fa:37:53:e3:e4:fa:a6:
         75:8b:14:6c:a8:9b:7e:8e:d2:9c:0a:0e:79:14:16:5b:2c:f6:
         66:19:d7:73:e1:ce:22:27:0c:69:33:75:2d:09:d9:64:fd:45:
         a1:86:09:1d:d2:57:06:97:eb:8d:f1:0f:b0:f4:eb:27:33:8e:
         ad:b0:46:9e:52:58:79:c2:43:23:9a:6c:7c:a6:b6:5d:67:dc:
         8b:4a:a2:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSBR56VZKynhf+LSdjqKopoKPUscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFQzhEQzE3QkEyODg2MzhFRTc0RDk5RUZGNDM3MTk4
QjkzNTE2QjAeFw0yNDA2MjQwODQyMjFaFw0yNDA2MjUxMTQ2MjFaMDMxMTAvBgNV
BAMTKDdDRTQ1NjY2NzY0MjNFMEYzMjEwNTBDQjA5RTk3OTkxRUI0MkEzQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6J08HxJDTGEz5oCnefEyKeYkH
3/H16qAwRxwAs2WkRXyw17oguGyYfkWn0YjqOBeuhdaZNoRvbp33JkNjq9HZk8IN
TNpVKgG7CIJuWh3whbPnLrWrLhKYUSBJKVXxyxkSremGk5ipmFwQHkrXAUVQTITf
lg1SBoS7EK8Y5iT4cORyQ568S/4Qq8Se31MUdkU/mLJ9hcNfu0XlTRTx1MlNQvhO
hbTEmId6eZ387V13hy0zE8YKBXKjpeSPVzRmSmfLrE372eRNbG7gN/KcxG7xMP0j
aqve4bykIMq8NcCcpAiLht11CN/c+HdoE5CAxUdndmHr30QZ6BnGFh2eAAOTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfORWZnZCPg8yEFDLCel5ketCo7kwHwYDVR0j
BBgwFoAUn+yNwXuiiGOO502Z7/Q3GYuTUWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2Ja
cXAvMS85RkVDOERDMTdCQTI4ODYzOEVFNzREOTlFRkY0MzcxOThCOTM1MTZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGRUM4REMxN0JBMjg4NjM4
RUU3NEQ5OUVGRjQzNzE5OEI5MzUxNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2JacXAvMS85
RkVDOERDMTdCQTI4ODYzOEVFNzREOTlFRkY0MzcxOThCOTM1MTZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiQz8TiNvWeUtidcajowKA3cqHzSpKsjiy3JGpCMKJSfI4bivwX20pYRa7I0s
+0Qn5KLt/862vPpmjD+pIEyVhoiWRgLC2aKXYGvbWuFCrNy5UkDwNjyt6XCEW6X4
DEaR+T1eiNDV69WOxIpm+W2u04tSmM04PT+zPv1OoThHxMnj3EOqMXNLIFZ6cnQO
tk6C7pmEkQk3fw5JOr9ufEhsj8j/R3Xv/rB74ffeGsf6N1Pj5PqmdYsUbKibfo7S
nAoOeRQWWyz2ZhnXc+HOIicMaTN1LQnZZP1FoYYJHdJXBpfrjfEPsPTrJzOOrbBG
nlJYecJDI5psfKa2XWfci0qiog==
-----END CERTIFICATE-----