Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/1/563AA600DF9DA7BAE3721AD162AB047F742E6FF5.mft
File:                     563AA600DF9DA7BAE3721AD162AB047F742E6FF5.mft (raw, json)
Hash identifier:          8ZPF5GYRBhw3sf0ardPbRpqRY4zEv3pMZzZzscrNbvw=
Subject key identifier:   9F:87:0F:3E:B1:C5:2C:C5:AD:EC:14:FC:39:0E:DD:03:2C:C4:79:DF
Authority key identifier: 56:3A:A6:00:DF:9D:A7:BA:E3:72:1A:D1:62:AB:04:7F:74:2E:6F:F5
Certificate issuer:       /CN=563AA600DF9DA7BAE3721AD162AB047F742E6FF5
Certificate serial:       0C53B61B2652FDE3696C9739978CDF4A1B9FC082
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563AA600DF9DA7BAE3721AD162AB047F742E6FF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/1/563AA600DF9DA7BAE3721AD162AB047F742E6FF5.mft
Manifest number:          5D
Signing time:             Tue 11 Jun 2024 17:15:33 +0000
Manifest this update:     Tue 11 Jun 2024 17:10:33 +0000
Manifest next update:     Wed 12 Jun 2024 20:09:33 +0000
Files and hashes:         1: 3137372e33372e31362e302f32322d3234203d3e20323730363036.roa (hash: mewO9MTyIDnRulfaETf7rvX5Q9KrK6JvpuXkhqGkxEA=)
                          2: 563AA600DF9DA7BAE3721AD162AB047F742E6FF5.crl (hash: 1H234Ovtg5O/fW/SzWzqzV3AHAtbHX+jIRDbdWnyw/A=)
                          3: 323830343a366539343a3a2f33322d3438203d3e20323730363036.roa (hash: dr+JGXfTeW2jeY2K/lkyEBaC31cT4jRjzo5njFT9oxM=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:53:b6:1b:26:52:fd:e3:69:6c:97:39:97:8c:df:4a:1b:9f:c0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563AA600DF9DA7BAE3721AD162AB047F742E6FF5
        Validity
            Not Before: Jun 11 17:10:33 2024 GMT
            Not After : Jun 12 20:09:33 2024 GMT
        Subject: CN=9F870F3EB1C52CC5ADEC14FC390EDD032CC479DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:91:d9:24:65:91:f2:9e:27:72:47:75:ea:
                    c4:d8:3f:7c:59:7e:9c:47:c1:be:8c:0b:8c:0d:5e:
                    3d:7a:82:f7:88:6a:2f:ea:df:69:8a:80:b2:b9:5b:
                    87:eb:82:7b:a6:32:c7:fd:73:7b:11:ab:42:4c:46:
                    d5:d9:76:56:ea:c7:da:b4:43:5a:31:4f:7f:d3:3e:
                    fd:f0:c3:4c:d1:f1:31:4c:7f:85:13:11:99:9b:fa:
                    28:56:7e:d0:1a:56:fb:03:a7:84:47:45:cf:96:11:
                    95:86:42:73:5e:fa:05:db:05:e9:cb:6d:a6:27:cf:
                    34:96:86:b6:d2:e1:14:b9:61:22:e9:aa:3a:6f:23:
                    28:3f:a7:2c:3c:0c:26:d7:55:c9:ee:12:61:ba:32:
                    36:1e:5f:fb:6c:c8:aa:ff:4b:02:f5:82:be:e0:93:
                    b5:cb:e3:23:f5:9e:8e:ee:ae:c4:48:7b:2b:45:61:
                    f5:3e:7b:d9:ae:ce:8e:e8:b0:30:f6:f9:10:c2:d2:
                    db:dd:35:22:72:f9:e2:5f:f0:bd:ff:79:a8:1b:7a:
                    33:79:83:44:dc:c0:94:45:b1:ac:d2:3b:cc:80:4e:
                    0a:ab:97:9f:f9:1b:61:ce:dc:1c:43:06:c8:21:0c:
                    be:a2:2c:1f:7c:dc:79:ed:a0:37:e4:3d:8e:db:69:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:87:0F:3E:B1:C5:2C:C5:AD:EC:14:FC:39:0E:DD:03:2C:C4:79:DF
            X509v3 Authority Key Identifier:
                keyid:56:3A:A6:00:DF:9D:A7:BA:E3:72:1A:D1:62:AB:04:7F:74:2E:6F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/1/563AA600DF9DA7BAE3721AD162AB047F742E6FF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563AA600DF9DA7BAE3721AD162AB047F742E6FF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/1/563AA600DF9DA7BAE3721AD162AB047F742E6FF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a2:ea:69:60:83:65:bc:9e:b2:4c:04:a1:c0:8c:b2:0b:bc:
         ce:83:4d:e3:29:a7:57:57:6c:ff:78:7c:a7:0e:6f:4b:97:7a:
         9f:42:51:cd:54:9d:ad:5b:76:8b:00:9f:8d:4c:c0:05:77:c3:
         d5:46:56:ec:f2:d6:cd:da:2a:8c:23:70:20:5c:a2:ef:5f:ab:
         9d:9c:ec:f1:55:86:e0:19:c0:13:95:96:86:29:16:58:00:6d:
         61:50:44:23:51:97:f9:8a:78:f6:31:31:2c:7b:68:fe:29:4d:
         33:de:6c:d5:07:ef:9d:37:c0:48:ad:bc:a7:88:e0:f4:48:3e:
         2f:72:e3:53:91:bc:12:60:47:b7:05:93:e2:8f:28:4b:89:71:
         1d:d9:82:97:1b:53:14:8c:42:d2:c6:29:eb:65:f0:ce:fb:9b:
         e4:bc:ca:63:6c:77:99:20:dc:3e:24:77:93:de:a9:36:ab:39:
         4d:4a:18:b9:42:71:b7:a6:81:4a:fb:28:89:27:4b:18:bb:5f:
         5f:4e:37:d3:92:a7:0c:b8:80:11:bb:e7:99:64:5d:63:5a:ce:
         cb:04:84:e1:1a:66:f4:f9:ec:5f:86:b1:46:27:13:a7:04:56:
         99:d1:b9:6a:ef:43:e1:c8:6c:1e:52:5c:91:a5:c8:e9:60:a5:
         f5:76:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----