Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/57F3033FFA4A49963340154D1995A4F97A9459FD.mft
File:                     57F3033FFA4A49963340154D1995A4F97A9459FD.mft (raw, json)
Hash identifier:          R9MWrMIRFaAFzdL37fc5XG8kzsnbuXpCHtk+pRwbszQ=
Subject key identifier:   D7:7A:91:99:FA:E1:AB:64:7E:25:BC:B5:4D:89:76:D8:B7:76:1A:6D
Authority key identifier: 57:F3:03:3F:FA:4A:49:96:33:40:15:4D:19:95:A4:F9:7A:94:59:FD
Certificate issuer:       /CN=57F3033FFA4A49963340154D1995A4F97A9459FD
Certificate serial:       5444A429DF0EB5A80279E058EDF39CE89DB2BA6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F3033FFA4A49963340154D1995A4F97A9459FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/57F3033FFA4A49963340154D1995A4F97A9459FD.mft
Manifest number:          25
Signing time:             Sun 25 Aug 2024 08:58:16 +0000
Manifest this update:     Sun 25 Aug 2024 08:53:16 +0000
Manifest next update:     Mon 26 Aug 2024 11:03:16 +0000
Files and hashes:         1: 3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa (hash: J2WS2F+6DA4jCNnf9GOS694V563jsgVlMiuHhsTN/ng=)
                          2: 57F3033FFA4A49963340154D1995A4F97A9459FD.crl (hash: ZGR+5prCHQ9bLcX2rkWPwHQ9n3adIoGSsPqSts9gkKA=)
                          3: 323830343a333664383a3a2f33322d313238203d3e20323636333736.roa (hash: pO6FpixldpjccAI04R6RtO79//gRy4z6LkiVTaQq9wY=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:44:a4:29:df:0e:b5:a8:02:79:e0:58:ed:f3:9c:e8:9d:b2:ba:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57F3033FFA4A49963340154D1995A4F97A9459FD
        Validity
            Not Before: Aug 25 08:53:16 2024 GMT
            Not After : Aug 26 11:03:16 2024 GMT
        Subject: CN=D77A9199FAE1AB647E25BCB54D8976D8B7761A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:dc:0d:80:e1:0f:36:67:70:d1:6b:65:28:
                    14:25:1d:62:06:4b:d6:c3:6c:38:7c:6f:d8:23:c9:
                    bb:4f:d5:c7:01:92:23:6b:0f:ec:1c:a8:0d:bf:7a:
                    67:b0:75:7c:cb:2d:07:54:ca:de:21:53:96:9d:42:
                    58:42:fe:99:f2:ce:e8:3e:55:3b:77:24:b1:c8:78:
                    20:09:73:41:88:e0:b1:bb:6a:c3:c0:2a:dd:d2:9b:
                    94:d8:f2:6a:36:99:44:bd:ae:a5:b2:43:8d:96:f0:
                    ee:dd:70:5c:24:b2:be:6a:23:0e:1e:76:e3:8d:f1:
                    a8:49:a9:ee:e9:18:20:0d:5f:61:7c:e2:16:68:8a:
                    d0:3e:a0:a4:6d:08:90:6f:74:92:2d:72:2b:79:e3:
                    78:db:73:a2:e0:d5:c7:05:e6:1a:44:eb:95:e6:b5:
                    6f:14:74:3f:9d:66:71:ab:a7:d3:fc:d1:58:36:c5:
                    c3:f4:ef:87:24:40:a8:e2:78:72:da:a4:44:3c:56:
                    9d:5f:14:69:72:1f:61:e6:95:e1:a7:ec:b5:3d:55:
                    e6:a9:92:58:29:bb:b6:5b:d8:3c:7d:d1:f7:b9:0e:
                    fd:3e:96:8e:c7:77:a5:91:b1:18:4d:3a:dd:18:1c:
                    b9:ee:50:06:77:a5:44:04:87:6c:d0:7e:ec:fb:fe:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7A:91:99:FA:E1:AB:64:7E:25:BC:B5:4D:89:76:D8:B7:76:1A:6D
            X509v3 Authority Key Identifier:
                keyid:57:F3:03:3F:FA:4A:49:96:33:40:15:4D:19:95:A4:F9:7A:94:59:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/57F3033FFA4A49963340154D1995A4F97A9459FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F3033FFA4A49963340154D1995A4F97A9459FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/57F3033FFA4A49963340154D1995A4F97A9459FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ec:7a:d0:d4:e0:bc:54:f7:cf:bd:9d:e3:bd:f8:4c:a9:bd:
         c8:c6:9e:6b:d0:b5:89:ad:a0:3c:bb:0d:cf:1b:a5:db:47:12:
         b1:79:eb:22:11:43:c0:20:88:68:97:ea:9b:99:95:64:9e:4d:
         7c:2e:0f:cb:fa:2d:dd:af:d4:ff:ed:1a:94:40:ce:7c:61:1f:
         fb:50:78:ed:6a:13:63:33:a4:4a:2c:0d:ac:8d:cc:5a:b6:8f:
         0b:50:ff:af:b4:87:e2:db:5e:50:21:8d:43:d6:a6:e1:d6:bb:
         36:9f:ff:16:f6:2e:33:2d:fd:16:5f:a5:d6:e3:d2:29:02:7d:
         0c:72:fe:48:3a:72:1c:d3:41:27:89:96:7b:20:07:fe:42:b5:
         33:a7:59:50:f0:58:01:bf:f1:22:eb:14:a0:38:4b:37:7f:22:
         14:21:bd:1f:70:4b:cb:89:92:17:c3:aa:3a:59:1e:72:1f:19:
         9e:a4:cd:88:44:70:df:6e:e3:db:e9:6c:7b:6a:06:3c:10:61:
         54:61:dd:63:69:a9:85:63:d9:04:c3:b3:ce:88:a0:30:d8:c9:
         ce:4e:31:ab:d3:12:ef:64:27:28:a2:f2:d7:28:2e:a6:8a:b5:
         b4:76:f6:a0:26:79:62:74:45:89:db:42:33:d1:34:5a:a4:0e:
         9c:bf:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----