Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.mft
File:                     25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.mft (raw, json)
Hash identifier:          djt+JXM2m9/uM78hdsO4bBmg4v73Z3kB2h4TLsjqGR0=
Subject key identifier:   F3:00:23:CD:28:B9:EF:E0:AD:CA:1E:37:44:35:EA:5B:EF:45:3F:6E
Authority key identifier: 25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C
Certificate issuer:       /CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
Certificate serial:       4C2AF7421345AF302FE68935EF2CCCD8DF0B5A15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.mft
Manifest number:          AD
Signing time:             Sat 10 Aug 2024 03:28:36 +0000
Manifest this update:     Sat 10 Aug 2024 03:23:36 +0000
Manifest next update:     Sun 11 Aug 2024 05:32:36 +0000
Files and hashes:         1: 3137302e38342e3135362e302f32332d3233203d3e20323634393938.roa (hash: KVM7cIRT99/PT7Zjp2znDVkmJEa5xYmPtHesyo/XPrE=)
                          2: 3137302e38342e3135382e302f32332d3233203d3e20323634393938.roa (hash: TztuB3avPnNv4VR8+LjQZBkNSSbzrm3Zq4t0TLREOmw=)
                          3: 3137302e38342e3135362e302f32322d3232203d3e20323634393938.roa (hash: lR+QZTBxlwkCBGPZm/Do8VaKb83LytS4wpB9Cdhoa/A=)
                          4: 323830343a333132633a3a2f33322d3332203d3e20323634393938.roa (hash: LQTnOPlEr3tQ5FRvCDL+9QpLbX1U5Y4osVCyybsIELk=)
                          5: 25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.crl (hash: gQ2EqDbSt5Ls/pqxm5r5z+C+Wu7nM4cQbGyDQWjeP/0=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2a:f7:42:13:45:af:30:2f:e6:89:35:ef:2c:cc:d8:df:0b:5a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
        Validity
            Not Before: Aug 10 03:23:36 2024 GMT
            Not After : Aug 11 05:32:36 2024 GMT
        Subject: CN=F30023CD28B9EFE0ADCA1E374435EA5BEF453F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:8b:a4:82:12:7e:d6:5c:73:b3:cc:24:c7:
                    44:90:d8:6d:c6:03:2c:37:02:dd:89:84:cd:e4:14:
                    17:db:66:92:ad:aa:2c:ac:09:ea:c8:03:c2:09:35:
                    84:d0:06:10:2a:d1:86:f6:22:8f:6e:9e:3d:4d:4e:
                    d5:4e:36:4f:ea:e5:c8:d8:90:f3:7d:27:da:1d:39:
                    de:1d:f0:59:b2:62:e5:ee:71:42:be:f6:b5:80:b4:
                    f0:28:04:ef:92:10:55:09:8d:79:4d:60:ca:51:e7:
                    fe:3e:ac:6c:5d:45:a8:a3:4c:f3:df:9c:bc:39:c4:
                    40:66:c2:24:e5:bc:7d:a2:7a:03:13:c8:fd:f7:2e:
                    ac:ad:7a:52:23:fe:02:d6:c7:db:eb:b6:23:e1:9d:
                    58:65:85:69:91:f9:16:d6:ab:2b:be:d4:1f:6d:ec:
                    7a:35:e4:46:82:83:77:f8:8e:56:82:4a:8f:71:a0:
                    a4:35:10:a5:a0:d0:ce:51:e1:10:19:fc:bf:30:52:
                    f6:fc:94:49:0e:f8:4c:de:c9:fa:9a:33:ed:ac:91:
                    cb:6d:15:19:4b:45:54:2c:77:f0:1f:24:b6:60:b3:
                    64:e0:19:40:5b:ac:27:c2:ec:9f:07:57:52:e5:c4:
                    04:01:bc:eb:0a:f3:02:df:0c:96:dd:ab:2a:45:24:
                    1b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:00:23:CD:28:B9:EF:E0:AD:CA:1E:37:44:35:EA:5B:EF:45:3F:6E
            X509v3 Authority Key Identifier:
                keyid:25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:64:8b:3a:c0:4a:e9:f3:37:3e:5f:bc:a4:9d:1c:af:de:b1:
         16:0f:d1:d6:2c:be:fe:d7:e0:5a:de:2a:12:5a:b4:53:7e:d9:
         cc:b2:06:0c:f8:da:e9:00:33:7b:1b:dd:de:38:0f:4f:50:cd:
         8c:8c:55:75:86:5e:2b:b1:49:99:e3:ae:66:97:63:fd:30:54:
         3a:c5:f7:87:4c:e4:94:65:38:16:b7:d1:d9:b8:45:44:64:80:
         5e:c4:3c:0c:5e:3b:6a:64:23:c3:16:43:de:6a:ba:52:e6:5b:
         ac:71:bb:77:6d:a3:6b:bc:99:55:7d:ce:4a:9f:7d:36:76:f1:
         e3:db:cd:41:77:fa:0b:07:0b:87:90:99:83:93:e2:b0:31:a1:
         2b:31:af:90:bc:1f:7b:b6:cf:21:ca:e5:3b:08:d9:bd:01:dc:
         a6:e7:da:d3:d4:d7:51:e7:d2:30:1e:1e:91:40:2e:58:b1:c5:
         a9:05:9f:7e:5d:ab:56:52:c0:ec:1a:47:65:33:fb:91:77:02:
         a5:6b:08:bb:bb:cb:26:4d:9c:59:a8:dc:c9:6a:d0:e6:c0:30:
         00:99:52:ce:f7:7f:a4:22:9a:40:7c:79:4d:d9:d4:5f:00:ee:
         67:e1:1d:8a:83:4a:cb:da:57:75:71:29:98:18:d0:9f:7a:49:
         e7:3c:8a:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTCr3QhNFrzAv5ok17yzM2N8LWhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVFREI2QzNFNDY0QzVBQjdGOEE4MzU2OTQyNTU1NUZF
OUE4OUUyQzAeFw0yNDA4MTAwMzIzMzZaFw0yNDA4MTEwNTMyMzZaMDMxMTAvBgNV
BAMTKEYzMDAyM0NEMjhCOUVGRTBBRENBMUUzNzQ0MzVFQTVCRUY0NTNGNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeHIukghJ+1lxzs8wkx0SQ2G3G
Ayw3At2JhM3kFBfbZpKtqiysCerIA8IJNYTQBhAq0Yb2Io9unj1NTtVONk/q5cjY
kPN9J9odOd4d8FmyYuXucUK+9rWAtPAoBO+SEFUJjXlNYMpR5/4+rGxdRaijTPPf
nLw5xEBmwiTlvH2iegMTyP33LqytelIj/gLWx9vrtiPhnVhlhWmR+RbWqyu+1B9t
7Ho15EaCg3f4jlaCSo9xoKQ1EKWg0M5R4RAZ/L8wUvb8lEkO+EzeyfqaM+2skctt
FRlLRVQsd/AfJLZgs2TgGUBbrCfC7J8HV1LlxAQBvOsK8wLfDJbdqypFJBvpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8wAjzSi57+Ctyh43RDXqW+9FP24wHwYDVR0j
BBgwFoAUJe22w+Rkxat/ioNWlCVVX+moniwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RMeEJGdEJIak1KWUxVWVBhTjRXSzlBVWJDc2ZLZFNrZTZ2RlA0WXJX
eFkvMS8yNUVEQjZDM0U0NjRDNUFCN0Y4QTgzNTY5NDI1NTU1RkU5QTg5RTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1RURCNkMzRTQ2NEM1QUI3
RjhBODM1Njk0MjU1NTVGRTlBODlFMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3RMeEJGdEJIak1KWUxVWVBhTjRXSzlBVWJDc2ZLZFNrZTZ2RlA0WXJXeFkvMS8y
NUVEQjZDM0U0NjRDNUFCN0Y4QTgzNTY5NDI1NTU1RkU5QTg5RTJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgGSLOsBK6fM3Pl+8pJ0cr96xFg/R1iy+/tfgWt4qElq0U37ZzLIGDPja6QAz
exvd3jgPT1DNjIxVdYZeK7FJmeOuZpdj/TBUOsX3h0zklGU4FrfR2bhFRGSAXsQ8
DF47amQjwxZD3mq6UuZbrHG7d22ja7yZVX3OSp99Nnbx49vNQXf6CwcLh5CZg5Pi
sDGhKzGvkLwfe7bPIcrlOwjZvQHcpufa09TXUefSMB4ekUAuWLHFqQWffl2rVlLA
7BpHZTP7kXcCpWsIu7vLJk2cWajcyWrQ5sAwAJlSzvd/pCKaQHx5TdnUXwDuZ+Ed
ioNKy9pXdXEpmBjQn3pJ5zyKGQ==
-----END CERTIFICATE-----
Generated at Mon Aug 12 10:20:59 2024 by rpki-client on console-fra.rpki-client.org