Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.mft
File:                     D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.mft (raw, json)
Hash identifier:          nJ1o94bX8elFHDLuJP8CokcSPNFCOIZhvLXs+CjzLX4=
Subject key identifier:   FE:A8:2C:85:9D:7E:2F:71:A5:AE:AC:D6:46:3D:BE:3C:47:A9:A9:5F
Authority key identifier: D2:25:BD:31:4D:5C:EA:6E:CF:BE:E9:60:E2:57:F1:9E:4D:7D:0C:07
Certificate issuer:       /CN=D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07
Certificate serial:       28939D3B8E058234A50D364C5FF8DA7C85491EBA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.mft
Manifest number:          7F
Signing time:             Sun 28 Jul 2024 17:43:03 +0000
Manifest this update:     Sun 28 Jul 2024 17:38:03 +0000
Manifest next update:     Mon 29 Jul 2024 20:39:03 +0000
Files and hashes:         1: D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.crl (hash: 8z5SO2uIyIYH8Api+Ez0IJ9JuCrUA3wc5/vHyilpqnI=)
                          2: 323830343a326138343a3a2f33322d313238203d3e20323634303736.roa (hash: JG914S/fdbTJFPG6WNK05yQ8cDfAYcEE3wxujAY/MVo=)
                          3: 3134332e3230322e3138342e302f32322d3332203d3e20323634303736.roa (hash: 29sUvF9HqQMGPZeHPHS6Jx9wgRIt5GPSbGO0EZDE7As=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:93:9d:3b:8e:05:82:34:a5:0d:36:4c:5f:f8:da:7c:85:49:1e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07
        Validity
            Not Before: Jul 28 17:38:03 2024 GMT
            Not After : Jul 29 20:39:03 2024 GMT
        Subject: CN=FEA82C859D7E2F71A5AEACD6463DBE3C47A9A95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:53:e5:4d:1e:11:ba:65:bb:72:4c:f7:af:
                    1f:1e:7f:5c:68:cd:32:f5:42:bf:b4:b8:fc:96:d8:
                    fc:c9:91:d9:c3:72:66:89:39:f8:02:6a:bb:d2:f1:
                    7b:bb:4d:16:11:30:b4:cd:be:0f:25:6a:48:53:1c:
                    2a:5d:07:b0:0b:f5:93:60:ba:24:c6:9a:f9:e9:fd:
                    35:02:57:5b:b1:48:8c:15:98:35:4d:11:de:31:21:
                    25:aa:1b:9c:29:82:52:3f:7b:e2:22:70:70:93:18:
                    30:66:39:11:f1:e6:e1:ce:2f:f1:fa:f4:bf:8d:a6:
                    21:dd:6c:f9:15:ab:e7:49:82:09:b9:59:eb:56:f9:
                    f6:ed:ab:c4:63:34:ea:7f:10:6c:b2:94:37:b9:31:
                    a7:56:51:bb:8e:28:cc:e1:5d:51:68:f2:ee:81:4a:
                    ba:e7:1e:01:81:d4:04:ed:1c:51:b2:94:b0:4f:90:
                    75:20:e4:0a:d4:8e:6a:22:9d:e2:dc:ec:f1:f0:e5:
                    c2:6b:fa:e3:1a:ca:62:94:ef:e5:97:18:a4:92:84:
                    f5:9f:0f:0f:92:98:1c:64:48:42:0b:67:38:19:9d:
                    0a:99:a5:b9:4d:16:93:bf:b3:7a:88:56:77:94:26:
                    e8:b0:7b:72:3b:19:38:c3:f3:50:c7:80:c0:a5:e6:
                    3a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A8:2C:85:9D:7E:2F:71:A5:AE:AC:D6:46:3D:BE:3C:47:A9:A9:5F
            X509v3 Authority Key Identifier:
                keyid:D2:25:BD:31:4D:5C:EA:6E:CF:BE:E9:60:E2:57:F1:9E:4D:7D:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:61:30:0b:13:08:50:b2:bd:c5:2d:4e:a4:fa:57:35:a0:
         28:ac:50:00:24:6c:e3:47:e9:59:c5:3c:70:e1:d2:f9:dd:b1:
         b7:1b:d6:c4:1e:1d:e6:83:13:19:cb:20:ec:0f:19:b0:cb:66:
         2a:51:1d:67:95:5a:22:c8:5d:8e:bc:c4:66:ae:53:0b:f4:7a:
         3f:b7:23:7a:73:2d:8e:fd:d1:95:8f:a9:11:da:36:b2:84:f4:
         9f:ad:bc:f6:a6:30:2b:c9:90:11:1d:62:ce:03:51:9e:f0:cc:
         55:2a:e4:83:eb:6a:37:17:f1:db:a3:8c:d1:b0:c9:7c:56:eb:
         d2:e6:59:c5:bb:80:ff:53:cc:26:17:00:02:90:62:54:7b:27:
         02:3e:18:34:23:a1:56:a3:5e:ad:db:b3:c9:a3:03:e4:3c:36:
         c0:4a:21:84:69:b8:31:75:fc:38:e0:fb:87:ea:18:a0:b4:47:
         ef:9a:c6:69:8c:58:a8:7e:93:e1:a6:5d:b1:84:3a:0b:1f:4f:
         ca:61:b5:6d:3e:c0:6f:94:1f:90:91:f2:54:13:0c:c3:7c:1f:
         0f:08:c0:88:98:32:d7:7d:19:0b:2e:e8:64:32:f6:16:4b:95:
         cb:89:82:dd:99:39:59:20:4f:bf:e6:13:59:e0:0a:b6:ca:55:
         0a:c0:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----