Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.mft
File:                     197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.mft (raw, json)
Hash identifier:          Hf83zlJlM/opdpMMq4dZkvfm9LQus5L3CNCvDraTLZw=
Subject key identifier:   BE:6B:43:F5:61:BE:C0:B8:3A:61:8E:0F:FC:7A:70:23:11:7C:9B:A2
Authority key identifier: 19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE
Certificate issuer:       /CN=197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE
Certificate serial:       4FDF723147931F6BD0A4878DE4DB144BDDCEFBA7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.mft
Manifest number:          38
Signing time:             Mon 28 Oct 2024 05:34:17 +0000
Manifest this update:     Mon 28 Oct 2024 05:29:17 +0000
Manifest next update:     Tue 29 Oct 2024 07:31:17 +0000
Files and hashes:         1: 323830343a326464343a3a2f33322d3634203d3e20323635333036.roa (hash: krYaouxjFQhxEIIGRcWsO/t/Uw+afnH+8nW5y/7IOGo=)
                          2: 3136382e3132312e32382e302f32342d3234203d3e20323635333036.roa (hash: ViAKj9K7Zt037paokFc6U9cbaOzkNwlxUfcCDLy31PE=)
                          3: 3136382e3132312e33302e302f32342d3234203d3e20323635333036.roa (hash: xGgZf0IxcRr2spnPpo5+o6QVhzLVdwYMDKL1Os38lBk=)
                          4: 3136382e3132312e32392e302f32342d3234203d3e20323635333036.roa (hash: kq3I5qpCgNsMf2sQK80/bBaSgIX8ziE8Idp+A4IxHLM=)
                          5: 197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.crl (hash: vhsEzA3n7Yu2xEPBPqtafcPdkvDTyFnvM1OXw5At4/4=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:df:72:31:47:93:1f:6b:d0:a4:87:8d:e4:db:14:4b:dd:ce:fb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE
        Validity
            Not Before: Oct 28 05:29:17 2024 GMT
            Not After : Oct 29 07:31:17 2024 GMT
        Subject: CN=BE6B43F561BEC0B83A618E0FFC7A7023117C9BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:fb:0a:93:74:4d:d1:a2:92:35:22:bf:32:
                    4a:ca:ea:e4:80:93:fd:a7:ed:13:f9:e4:a0:c0:db:
                    50:4f:f2:a0:b4:49:e1:93:88:d6:00:f4:39:d4:e7:
                    2f:a0:22:f3:51:60:c3:a4:96:29:86:6b:59:46:a9:
                    7f:af:3e:59:ac:6c:03:db:c6:ea:82:0e:63:81:28:
                    bf:5e:4a:15:88:b1:69:c0:9a:36:4c:82:b1:fc:87:
                    05:52:a9:38:25:72:c0:75:ba:47:f5:e5:f6:de:08:
                    b8:8e:e6:b3:8e:9b:eb:7c:c1:1a:57:69:58:e3:27:
                    d9:65:88:03:9a:6e:23:a7:be:e6:29:63:5b:48:7d:
                    62:29:41:c3:b8:95:b0:63:90:b6:9c:2a:84:51:39:
                    7f:9d:62:fc:31:18:f4:ce:67:99:09:24:20:41:ff:
                    ff:19:b0:9d:1e:14:7b:fb:08:91:07:87:40:38:32:
                    7f:bd:61:bd:a6:7c:c4:93:a6:f3:fd:26:89:c1:91:
                    2e:84:0f:88:f0:5d:17:b9:d3:59:98:28:84:1a:63:
                    c0:7f:04:ba:4c:b0:ec:20:75:a4:ad:07:9c:0d:99:
                    e8:93:fb:ba:5a:cd:a8:76:7e:15:eb:fc:40:6f:39:
                    59:c0:90:46:57:55:e7:1a:80:37:c9:21:21:58:77:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6B:43:F5:61:BE:C0:B8:3A:61:8E:0F:FC:7A:70:23:11:7C:9B:A2
            X509v3 Authority Key Identifier:
                keyid:19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:58:a0:a9:d8:0b:be:ec:3f:c4:08:d4:18:28:30:a8:af:04:
         f1:bd:4f:1a:4a:d2:e8:82:e8:98:32:29:84:b5:d3:d9:5c:c7:
         26:95:22:73:5d:9f:38:98:65:07:72:09:b4:d3:93:2b:fe:dc:
         01:a8:be:f7:4f:13:12:af:2d:ce:7e:b6:34:25:3c:47:3e:e4:
         b7:83:35:37:4b:e5:97:84:f2:c9:bd:37:81:20:8f:a4:b3:18:
         45:b6:b4:b8:e7:ed:a8:ed:4b:30:5a:e0:ba:90:fb:29:30:b8:
         18:6d:da:86:1f:4f:04:cb:0f:e1:7e:b7:55:26:4a:a9:94:75:
         c5:16:49:eb:d4:31:d7:14:0f:93:20:99:18:d5:4e:c3:f4:ed:
         eb:ed:cc:db:60:ab:ee:56:c8:02:f0:4d:7d:6c:25:55:6e:26:
         b3:0f:60:c2:9f:cb:16:be:37:69:cd:f3:6f:62:c9:62:c5:82:
         cf:ff:a1:81:07:47:88:e3:e5:67:88:05:bd:74:51:26:9c:d4:
         be:3e:51:c0:c4:d9:74:d5:4c:b0:71:47:b8:65:4e:54:9d:27:
         a5:ee:32:ff:4d:30:a8:04:5a:30:4f:0e:66:fe:0a:73:c5:e3:
         cf:24:4f:ab:ad:99:76:81:c8:57:92:1f:58:8e:43:64:33:09:
         ee:9f:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----