Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.mft
File:                     33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.mft (raw, json)
Hash identifier:          m0xqsXE8+5DwhosV/SygtJBnS1mYVj4eO/uP1pvC2Oc=
Subject key identifier:   96:20:21:2E:22:CD:E9:A4:D0:8D:F6:FA:A3:21:29:8C:4C:69:86:5D
Authority key identifier: 33:D7:02:3F:A6:E9:05:60:6F:20:9A:FB:3E:8B:4D:9E:01:B5:ED:EA
Certificate issuer:       /CN=33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA
Certificate serial:       34B1BE249CC5A06AF6C2C74D1F3A46964FF289BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.mft
Manifest number:          0D
Signing time:             Tue 25 Jun 2024 11:25:52 +0000
Manifest this update:     Tue 25 Jun 2024 11:20:52 +0000
Manifest next update:     Wed 26 Jun 2024 11:38:52 +0000
Files and hashes:         1: 323830343a353231303a3a2f33322d313238203d3e20323638343932.roa (hash: 3lLRTnrEl0rCa0L+leXhclnvtWfB4Tjq6dn+vfpHdVE=)
                          2: 33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.crl (hash: DZ2PM4tBA9gFX2/uM7EJfyOwhUChefI/uXcImlwnHrQ=)
                          3: 34352e3136322e342e302f32322d3332203d3e20323638343932.roa (hash: BL2KAZnIPT38dDKj05KhEGRDPsrSh/Culd/PkQBoP6w=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b1:be:24:9c:c5:a0:6a:f6:c2:c7:4d:1f:3a:46:96:4f:f2:89:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA
        Validity
            Not Before: Jun 25 11:20:52 2024 GMT
            Not After : Jun 26 11:38:52 2024 GMT
        Subject: CN=9620212E22CDE9A4D08DF6FAA321298C4C69865D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:4c:bd:59:7a:44:d9:13:ae:fa:16:4d:00:
                    d5:8b:8d:25:16:ed:97:52:33:9e:10:5c:6a:c4:e2:
                    df:e5:9d:5c:ff:97:95:ed:c4:d9:83:21:76:e3:59:
                    1c:57:7c:98:4c:8e:ca:49:8b:56:9a:96:32:6f:93:
                    0e:cd:54:95:fd:4a:84:ce:01:59:57:9a:02:cf:83:
                    75:0f:11:b0:15:1f:fd:73:3d:42:25:f5:a3:1d:77:
                    17:d6:31:97:34:dd:ba:d0:19:12:7c:e1:c0:9d:08:
                    58:8b:8d:30:bb:8c:62:87:c2:c4:44:60:71:c0:c5:
                    a5:6a:b8:0c:6c:f0:33:e9:1a:39:ae:ca:30:df:ac:
                    83:ab:8f:a6:fb:c7:9c:95:65:49:43:b5:ee:e1:44:
                    cb:4c:7d:f0:97:93:d4:7b:5c:25:ed:a7:be:dd:02:
                    32:3d:c5:af:e5:06:33:12:00:e8:2d:0f:c2:4a:fb:
                    a2:51:cf:ed:3b:eb:4f:cc:b0:a2:42:e2:f1:67:2b:
                    cf:29:5d:8d:28:01:fc:e2:20:8f:32:fd:a3:0e:ca:
                    b7:60:6c:65:fc:d5:5e:3f:d7:ce:02:83:22:33:6f:
                    ec:73:14:28:9b:89:18:4c:d7:19:e6:1a:ba:69:71:
                    e2:3f:05:15:78:19:77:f4:49:de:83:d0:a5:20:0d:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:21:2E:22:CD:E9:A4:D0:8D:F6:FA:A3:21:29:8C:4C:69:86:5D
            X509v3 Authority Key Identifier:
                keyid:33:D7:02:3F:A6:E9:05:60:6F:20:9A:FB:3E:8B:4D:9E:01:B5:ED:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/33D7023FA6E905606F209AFB3E8B4D9E01B5EDEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4b:7d:c8:7e:38:f5:7a:d9:22:ce:2f:07:f0:ba:89:e2:73:
         c6:5b:ef:a0:df:35:c0:e2:c2:97:9f:a7:b5:48:7f:a3:87:41:
         f7:94:36:42:35:51:f8:cb:4f:b9:aa:02:b9:a5:72:80:0f:b5:
         9c:95:79:37:c6:16:28:75:65:2a:a1:a9:41:20:fd:1f:e0:03:
         26:9a:ef:a8:87:15:26:c8:ac:54:06:6e:b1:64:6e:b0:1e:9e:
         0e:64:78:df:7e:3c:bc:d0:44:19:65:e5:fb:bc:50:fa:2d:4e:
         48:b7:60:99:25:48:71:26:dd:dd:f4:b1:59:47:97:ba:82:ab:
         65:37:93:92:70:88:f9:c2:a0:01:da:dd:e4:0c:03:4a:29:51:
         15:70:bc:31:cc:71:ce:f9:50:2b:fe:7d:af:1e:99:d7:d7:5c:
         8a:4b:81:4d:ca:6d:32:0e:d3:fc:e5:88:42:13:2d:be:46:50:
         b5:e3:7e:97:73:24:80:23:51:ff:c4:cf:6b:ac:fc:86:03:4f:
         d5:ed:c8:4a:05:c7:2e:95:75:9c:9e:3e:74:a7:8f:6e:8b:b3:
         d0:70:ed:d4:36:80:c4:2d:dc:d5:8b:3f:31:8a:ae:6d:c0:a2:
         35:02:2d:b3:d0:78:c9:86:31:5d:5c:4f:6d:a2:db:8c:7b:06:
         04:26:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----