Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.mft
File:                     D18394BAA91A5D89736A3DB4C144FDC15F2EB677.mft (raw, json)
Hash identifier:          zZ8gGi2rWG4T+KhkWha3+erMoYD0LoXJfoBfOIsl3cQ=
Subject key identifier:   00:B4:FE:54:68:72:E1:32:0E:6D:72:99:47:78:F9:35:C5:39:02:24
Authority key identifier: D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77
Certificate issuer:       /CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
Certificate serial:       52A22267930FB0917BD55887E647296D0A1CBDA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.mft
Manifest number:          2D
Signing time:             Fri 14 Jun 2024 02:04:35 +0000
Manifest this update:     Fri 14 Jun 2024 01:59:35 +0000
Manifest next update:     Sat 15 Jun 2024 03:58:35 +0000
Files and hashes:         1: D18394BAA91A5D89736A3DB4C144FDC15F2EB677.crl (hash: cHjKZcftsSVocVPNzSaS0u/RLoLX7T4paejE0zV3nAE=)
                          2: 323830343a343330303a3a2f33322d3438203d3e20323637353432.roa (hash: GIGHAfvQ0uaiaMZ9qXQg1yB+jtky+oLsVFn9+i5aGec=)
                          3: 3139322e3134312e3234302e302f32322d3234203d3e20323637353432.roa (hash: 2FTCQxbFA5iKH8z+7DnvIQamLwX09pHjWr2By7Xfe1Y=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a2:22:67:93:0f:b0:91:7b:d5:58:87:e6:47:29:6d:0a:1c:bd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
        Validity
            Not Before: Jun 14 01:59:35 2024 GMT
            Not After : Jun 15 03:58:35 2024 GMT
        Subject: CN=00B4FE546872E1320E6D72994778F935C5390224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:64:9b:34:0c:da:c3:e8:b4:e6:af:3d:74:
                    ee:89:e2:2e:69:05:a0:66:79:e4:7e:d6:fd:b5:06:
                    f1:21:10:ea:8a:18:7c:c3:74:b9:e1:f9:38:7b:fb:
                    bc:86:50:ff:d4:47:6e:b4:75:70:f8:70:7d:aa:ed:
                    78:90:92:7a:44:e2:dc:88:18:05:56:35:a0:54:7a:
                    60:93:53:ed:39:f0:58:57:a7:53:72:05:fb:15:d0:
                    16:89:c5:50:94:19:ea:5e:e8:d4:71:3b:6a:e9:a2:
                    59:69:5f:e0:34:04:df:73:a5:62:84:04:27:0a:11:
                    ff:eb:68:a2:8b:89:2d:b4:44:44:54:9f:80:c7:07:
                    fa:c1:de:6f:ca:a1:7a:42:87:6a:7e:9c:4e:c9:21:
                    97:ba:f0:c8:c8:77:c4:26:08:4a:07:09:fc:e5:5c:
                    5b:01:9c:47:16:10:4a:f5:af:39:9c:99:22:1a:e8:
                    c2:c1:55:8a:10:62:69:ba:bd:30:96:ed:f1:cc:66:
                    19:91:d3:4b:b9:72:22:44:b6:ab:af:29:f7:39:7f:
                    e1:7a:5d:33:8b:a2:d0:5b:a3:40:c1:be:f4:46:4f:
                    30:30:95:c3:cb:cb:a2:1f:9c:35:bf:9e:f7:bb:5a:
                    12:80:3e:fd:0e:76:ef:6c:a6:2f:55:c6:ab:a8:88:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B4:FE:54:68:72:E1:32:0E:6D:72:99:47:78:F9:35:C5:39:02:24
            X509v3 Authority Key Identifier:
                keyid:D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:44:be:8e:3d:17:4d:90:18:b4:a4:1d:91:cd:6d:45:6e:
         78:84:75:ca:ae:25:fb:df:6b:a6:ab:09:7a:bb:69:c2:6f:b9:
         80:73:75:35:21:bb:5e:62:40:33:8f:a3:cb:cc:3b:33:60:5b:
         ca:7e:e4:37:09:eb:39:1e:4b:ec:9e:61:d5:42:58:3f:74:d7:
         92:c8:c0:cf:b3:85:3c:14:b7:08:68:c9:41:2a:25:53:e1:ba:
         6b:11:5a:89:9d:d1:c8:22:f9:9f:85:79:4d:fc:04:71:14:db:
         ba:08:7f:2e:a0:e1:e5:e6:01:ce:e3:58:62:35:91:79:0b:32:
         62:5d:b0:4f:ee:2d:d5:bf:58:04:7a:ed:4e:57:77:ee:d2:01:
         70:31:80:14:ee:05:22:78:e9:3e:4b:29:a6:f4:1d:83:2b:69:
         1c:cb:61:5a:86:19:27:06:f2:58:38:9d:c8:9d:17:01:78:b2:
         a8:5e:97:a5:d6:24:64:7a:fb:4b:d9:d0:a2:e3:c5:f7:0b:5d:
         1b:9a:3a:9b:fd:55:aa:5e:e8:7c:1e:de:08:af:e3:54:b2:79:
         bf:ab:ef:7c:aa:3d:af:44:56:c8:15:8b:df:68:d6:51:ed:b5:
         05:a2:8a:1c:53:ed:3a:fa:26:25:d1:14:76:28:64:79:52:0b:
         7f:ea:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----