Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/37F9972EC96D379CEF8A6C1500416E2871FBC29E.mft
File:                     37F9972EC96D379CEF8A6C1500416E2871FBC29E.mft (raw, json)
Hash identifier:          THNXbPIaekTqjrSwQERZNb6Qz2ZHa31AgtRZjOyP1yQ=
Subject key identifier:   A2:3B:69:5A:9F:E8:AF:5D:CE:D5:D1:C5:47:BD:01:98:A2:75:96:1F
Authority key identifier: 37:F9:97:2E:C9:6D:37:9C:EF:8A:6C:15:00:41:6E:28:71:FB:C2:9E
Certificate issuer:       /CN=37F9972EC96D379CEF8A6C1500416E2871FBC29E
Certificate serial:       6E6CA21F9E05C958B2437B7FAE8264DB95DB5993
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F9972EC96D379CEF8A6C1500416E2871FBC29E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/37F9972EC96D379CEF8A6C1500416E2871FBC29E.mft
Manifest number:          24
Signing time:             Mon 28 Oct 2024 11:01:33 +0000
Manifest this update:     Mon 28 Oct 2024 10:56:33 +0000
Manifest next update:     Tue 29 Oct 2024 11:20:33 +0000
Files and hashes:         1: 37F9972EC96D379CEF8A6C1500416E2871FBC29E.crl (hash: IeOyfjezQ38RTD9ywuPhBYpt/w2hu83XWyMQZSZvLhg=)
                          2: 323830343a383738303a3a2f33322d3634203d3e20323732373133.roa (hash: hPyLC9RKXekUutogltjvLvKIiChAa1EwSbsZ0uHe6rM=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6c:a2:1f:9e:05:c9:58:b2:43:7b:7f:ae:82:64:db:95:db:59:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F9972EC96D379CEF8A6C1500416E2871FBC29E
        Validity
            Not Before: Oct 28 10:56:33 2024 GMT
            Not After : Oct 29 11:20:33 2024 GMT
        Subject: CN=A23B695A9FE8AF5DCED5D1C547BD0198A275961F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:80:0f:32:ce:5d:26:31:eb:22:4b:ee:ed:
                    c5:ae:9d:17:8f:ea:04:e8:78:a9:c9:fd:4b:7c:29:
                    1f:44:9d:e1:91:8f:dd:fd:66:f6:47:51:cc:68:4a:
                    4b:bc:d1:7c:c4:77:90:74:49:34:bc:61:e3:0f:01:
                    7f:42:61:57:9e:f0:68:57:49:0e:3c:98:53:bf:51:
                    12:08:ce:53:91:49:0f:96:08:fd:86:b9:3d:49:f7:
                    fe:23:71:b1:0c:75:02:4b:20:a1:b9:7d:50:54:c8:
                    c2:79:95:c9:83:8a:a3:46:d1:65:3a:75:b4:ea:3a:
                    ef:e6:f7:f2:57:d1:8d:da:32:c3:0e:ce:b3:e6:8e:
                    f4:1a:34:e9:f5:7e:8f:6f:fb:6e:4f:de:e8:2c:da:
                    1b:08:ce:7b:c4:73:fa:88:73:56:bb:de:04:f6:c0:
                    3f:60:33:e6:df:f5:a0:04:d1:12:ed:6a:37:0b:c0:
                    27:47:d2:6d:cd:d5:7b:6e:25:ec:7a:02:d6:41:7e:
                    1e:c6:db:4c:9c:e4:6f:b8:60:72:27:3d:09:c5:71:
                    a9:56:77:8b:c6:94:4e:2b:bb:34:54:a6:e7:5a:04:
                    db:db:28:83:cd:55:ec:0d:87:a6:c2:45:6e:75:e6:
                    fa:9a:18:ee:e9:77:97:b1:7c:ba:cf:11:40:e5:bb:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3B:69:5A:9F:E8:AF:5D:CE:D5:D1:C5:47:BD:01:98:A2:75:96:1F
            X509v3 Authority Key Identifier:
                keyid:37:F9:97:2E:C9:6D:37:9C:EF:8A:6C:15:00:41:6E:28:71:FB:C2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/37F9972EC96D379CEF8A6C1500416E2871FBC29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F9972EC96D379CEF8A6C1500416E2871FBC29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/37F9972EC96D379CEF8A6C1500416E2871FBC29E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f4:cd:ad:46:c4:e8:36:43:85:65:ab:22:23:f8:9f:bf:fa:
         78:82:ce:9d:ef:b9:13:22:02:1a:f4:ac:fc:00:10:bd:c7:f6:
         2c:8f:b8:c7:b3:87:3f:2a:7b:ed:fd:8a:4d:d9:6a:be:a2:ed:
         5e:9b:0d:91:e3:47:08:95:57:92:84:77:91:89:ce:43:df:10:
         78:b9:c1:fa:53:b4:18:9f:6a:3a:53:fc:fd:54:c0:3a:89:93:
         a4:66:b4:a0:f4:8e:c4:1c:f1:58:db:49:b2:b2:5d:53:5c:52:
         a3:b0:d3:78:a7:2d:e3:6b:40:0c:13:9b:6c:da:13:16:d8:d7:
         6e:b5:d6:88:4b:fa:53:62:f8:51:ba:33:ba:f6:b1:7e:18:be:
         07:cd:c5:ab:25:ae:63:e7:c1:82:b6:be:d1:39:eb:58:e6:0e:
         47:c2:a8:d5:97:6e:33:87:5c:6d:f4:ba:09:80:b1:84:a2:c1:
         4b:cb:ba:f5:a4:ce:80:af:72:f8:07:3f:66:72:f7:1b:e0:06:
         50:15:0a:59:71:48:4c:82:20:39:c9:c3:63:4c:4c:f3:ee:44:
         f3:00:e5:df:21:44:4f:fe:5b:52:e2:5e:78:61:48:56:ad:43:
         2a:00:8f:b7:a7:99:99:74:c9:96:57:30:63:88:4b:c8:dc:f5:
         3e:b8:16:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbmyiH54FyViyQ3t/roJk25XbWZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdGOTk3MkVDOTZEMzc5Q0VGOEE2QzE1MDA0MTZFMjg3
MUZCQzI5RTAeFw0yNDEwMjgxMDU2MzNaFw0yNDEwMjkxMTIwMzNaMDMxMTAvBgNV
BAMTKEEyM0I2OTVBOUZFOEFGNURDRUQ1RDFDNTQ3QkQwMTk4QTI3NTk2MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9YAPMs5dJjHrIkvu7cWunReP
6gToeKnJ/Ut8KR9EneGRj939ZvZHUcxoSku80XzEd5B0STS8YeMPAX9CYVee8GhX
SQ48mFO/URIIzlORSQ+WCP2GuT1J9/4jcbEMdQJLIKG5fVBUyMJ5lcmDiqNG0WU6
dbTqOu/m9/JX0Y3aMsMOzrPmjvQaNOn1fo9v+25P3ugs2hsIznvEc/qIc1a73gT2
wD9gM+bf9aAE0RLtajcLwCdH0m3N1XtuJex6AtZBfh7G20yc5G+4YHInPQnFcalW
d4vGlE4ruzRUpudaBNvbKIPNVewNh6bCRW515vqaGO7pd5exfLrPEUDlu92PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUojtpWp/or13O1dHFR70BmKJ1lh8wHwYDVR0j
BBgwFoAUN/mXLsltN5zvimwVAEFuKHH7wp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1RKUlJHNUtZWng0bkR2Y3Y4ZjhhQXo5N1ZiNnRMdU5BVzR4bjh5UUZr
c0cvMC8zN0Y5OTcyRUM5NkQzNzlDRUY4QTZDMTUwMDQxNkUyODcxRkJDMjlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3Rjk5NzJFQzk2RDM3OUNF
RjhBNkMxNTAwNDE2RTI4NzFGQkMyOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1RKUlJHNUtZWng0bkR2Y3Y4ZjhhQXo5N1ZiNnRMdU5BVzR4bjh5UUZrc0cvMC8z
N0Y5OTcyRUM5NkQzNzlDRUY4QTZDMTUwMDQxNkUyODcxRkJDMjlFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHvTNrUbE6DZDhWWrIiP4n7/6eILOne+5EyICGvSs/AAQvcf2LI+4x7OHPyp7
7f2KTdlqvqLtXpsNkeNHCJVXkoR3kYnOQ98QeLnB+lO0GJ9qOlP8/VTAOomTpGa0
oPSOxBzxWNtJsrJdU1xSo7DTeKct42tADBObbNoTFtjXbrXWiEv6U2L4Ubozuvax
fhi+B83FqyWuY+fBgra+0TnrWOYOR8Ko1ZduM4dcbfS6CYCxhKLBS8u69aTOgK9y
+Ac/ZnL3G+AGUBUKWXFITIIgOcnDY0xM8+5E8wDl3yFET/5bUuJeeGFIVq1DKgCP
t6eZmXTJllcwY4hLyNz1PrgWSA==
-----END CERTIFICATE-----