Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/342948E5982CDA2084F137CA767229C586B23DE6.mft
File:                     342948E5982CDA2084F137CA767229C586B23DE6.mft (raw, json)
Hash identifier:          jpIWLNo/vyRocHAHu722VQchONTTG0cppMxtm/9Iuyo=
Subject key identifier:   71:12:79:9F:53:C8:9F:43:E4:E3:F1:E4:BE:95:56:7D:95:3B:BD:2D
Authority key identifier: 34:29:48:E5:98:2C:DA:20:84:F1:37:CA:76:72:29:C5:86:B2:3D:E6
Certificate issuer:       /CN=342948E5982CDA2084F137CA767229C586B23DE6
Certificate serial:       72708C0618E032C9F669FB82804CC789BE8ADD4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342948E5982CDA2084F137CA767229C586B23DE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/342948E5982CDA2084F137CA767229C586B23DE6.mft
Manifest number:          5D
Signing time:             Tue 11 Jun 2024 04:12:53 +0000
Manifest this update:     Tue 11 Jun 2024 04:07:53 +0000
Manifest next update:     Wed 12 Jun 2024 07:27:53 +0000
Files and hashes:         1: 342948E5982CDA2084F137CA767229C586B23DE6.crl (hash: 6BzUzF+LHr1yAqiJ8/gUEWe959z3DhdrE8cI1sSx/MQ=)
                          2: 3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa (hash: QS+8mBpZS4iTU1Yc+cEhrJYfx0ItpYxmll8AqekVnls=)
                          3: 323830343a323866303a3a2f33322d3332203d3e20323633393838.roa (hash: 6EucWMTvSSLBuflRtG+RBe4fhcWlC2EUhzTmOumdytg=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:70:8c:06:18:e0:32:c9:f6:69:fb:82:80:4c:c7:89:be:8a:dd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342948E5982CDA2084F137CA767229C586B23DE6
        Validity
            Not Before: Jun 11 04:07:53 2024 GMT
            Not After : Jun 12 07:27:53 2024 GMT
        Subject: CN=7112799F53C89F43E4E3F1E4BE95567D953BBD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:98:1f:cc:bc:91:28:57:cc:39:1f:2d:6c:
                    64:2b:17:0c:31:99:94:7f:67:27:f7:0f:af:a6:4d:
                    2a:95:0c:51:f4:9f:80:2f:7d:ae:4e:a0:03:57:13:
                    fd:c4:a8:e5:31:79:13:98:b7:f7:7a:22:6a:0b:e3:
                    3e:8f:bc:b6:dc:dd:17:24:93:0a:95:e4:07:75:fb:
                    f8:1b:fb:b2:4c:47:bc:54:38:e3:5f:8f:b2:ff:c3:
                    61:2f:b1:e2:8c:b3:ea:14:6c:f4:bb:51:5d:fd:61:
                    28:98:bd:ab:c9:ae:9e:2a:e6:9b:d6:d8:8f:ef:35:
                    44:e2:f3:4f:0c:bc:69:ca:5e:68:84:42:1e:ec:01:
                    90:74:87:01:29:39:04:28:3b:8c:8f:6e:c8:c6:29:
                    15:8f:62:bf:51:b0:3a:48:51:44:0c:5f:2d:5d:76:
                    c0:ac:57:6a:e5:ac:0c:21:4a:7b:6e:12:40:e5:06:
                    dc:e1:22:1b:49:79:17:c8:b1:7c:cf:d9:39:5e:05:
                    f9:53:4f:59:66:f3:6d:e6:56:6f:cc:4f:aa:fa:91:
                    96:6d:ec:08:11:93:21:c9:00:50:b3:72:f9:3e:e3:
                    ce:79:f3:4a:9c:f0:dd:67:70:8d:7b:76:fa:57:a2:
                    e5:91:12:dc:e6:c8:af:21:d4:19:fc:74:cf:e5:38:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:79:9F:53:C8:9F:43:E4:E3:F1:E4:BE:95:56:7D:95:3B:BD:2D
            X509v3 Authority Key Identifier:
                keyid:34:29:48:E5:98:2C:DA:20:84:F1:37:CA:76:72:29:C5:86:B2:3D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/342948E5982CDA2084F137CA767229C586B23DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342948E5982CDA2084F137CA767229C586B23DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/342948E5982CDA2084F137CA767229C586B23DE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:d7:be:d7:a8:4f:ff:63:44:cb:99:50:e4:ed:09:fb:66:
         93:6f:d9:91:84:31:d6:ca:80:19:3e:8c:d6:04:c4:d1:47:6d:
         fc:8a:cf:55:a0:b4:00:57:a5:07:0d:a3:af:68:2a:49:bc:be:
         c6:4e:db:36:48:e4:e8:e4:f6:d9:ee:f4:5b:10:13:e0:8a:a6:
         c7:df:b1:ab:ab:2d:b2:e6:eb:26:82:bf:78:cd:de:73:8a:53:
         4a:b1:5a:d5:70:28:67:27:a8:50:af:a4:96:39:a2:3c:4a:a6:
         44:7e:21:a5:ab:f3:af:43:83:21:f1:55:21:3c:5e:4a:9d:ee:
         db:b0:8f:1b:89:e5:7e:51:3d:b6:4b:a0:89:01:58:76:ab:53:
         00:f5:92:6c:14:08:ff:6b:e3:7e:7e:33:b5:20:3b:f5:0b:d1:
         2c:a0:d8:28:7e:ca:c1:11:b5:a5:03:96:41:b6:14:f2:d6:25:
         63:a5:43:8a:16:8b:f6:7e:d9:07:6f:1c:8a:4c:5a:17:c8:36:
         46:eb:23:a7:13:49:12:4a:70:1f:53:44:ab:3b:d3:e5:c8:74:
         3e:bf:5b:2a:10:01:c3:2b:5e:d5:4d:08:91:fc:0c:f8:ab:10:
         c7:7c:aa:cd:69:af:5a:6e:18:51:dc:71:ec:74:66:5d:c4:f8:
         1b:58:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----