Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/4F65A56D1069C30B61BC8ED21E21C14D435571D1.mft
File:                     4F65A56D1069C30B61BC8ED21E21C14D435571D1.mft (raw, json)
Hash identifier:          GUstkmbkhEAJPwD08EsNOmGX7S2V+ARRx62zqwp4SoE=
Subject key identifier:   6F:D3:5C:E4:50:C7:CB:65:B2:C7:67:0A:E3:C5:AA:CF:82:A3:1E:BF
Authority key identifier: 4F:65:A5:6D:10:69:C3:0B:61:BC:8E:D2:1E:21:C1:4D:43:55:71:D1
Certificate issuer:       /CN=4F65A56D1069C30B61BC8ED21E21C14D435571D1
Certificate serial:       40B16529462E64D3A26DD3E0B54A69F6A893CAFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65A56D1069C30B61BC8ED21E21C14D435571D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/4F65A56D1069C30B61BC8ED21E21C14D435571D1.mft
Manifest number:          D1
Signing time:             Thu 26 Sep 2024 03:32:47 +0000
Manifest this update:     Thu 26 Sep 2024 03:27:47 +0000
Manifest next update:     Fri 27 Sep 2024 07:07:47 +0000
Files and hashes:         1: 4F65A56D1069C30B61BC8ED21E21C14D435571D1.crl (hash: G4JHhOFaj1WDN8qGWFBgRj8AmyuC7oDtsaLkSrd1WHI=)
                          2: 323830343a3938633a3a2f33322d3438203d3e20323633303939.roa (hash: 9hOsReL1hySfsCL7m6GAmVgGWr3rB+LDcHz2EBWFf7Y=)
                          3: 3138362e3232352e3137362e302f32312d3234203d3e20323633303939.roa (hash: tMV05oVESv7vp9QPSh2zP6PyfURXKvIxLO6++kBUYWw=)
                          4: 3134332e3133372e3135362e302f32322d3234203d3e20323633303939.roa (hash: KOYNEK5R1AGhgWfu/psMcYC+/idkimys9ztteAiN9oo=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b1:65:29:46:2e:64:d3:a2:6d:d3:e0:b5:4a:69:f6:a8:93:ca:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F65A56D1069C30B61BC8ED21E21C14D435571D1
        Validity
            Not Before: Sep 26 03:27:47 2024 GMT
            Not After : Sep 27 07:07:47 2024 GMT
        Subject: CN=6FD35CE450C7CB65B2C7670AE3C5AACF82A31EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:20:5a:a3:5c:c4:8d:ca:ae:62:28:a6:5d:
                    61:00:ce:ae:14:1b:4c:91:b2:92:f9:71:e0:6c:57:
                    13:f4:f8:19:d2:4b:8f:c0:54:2a:41:3f:07:77:20:
                    62:34:cf:83:ee:f4:5d:9e:c1:fe:05:49:a6:27:06:
                    ad:ad:72:cb:24:5a:e7:e6:ac:b2:ca:a5:e1:46:75:
                    c0:09:c0:fa:60:14:f8:9d:b9:69:ae:1f:3d:09:13:
                    53:08:23:ec:f5:c6:55:d1:88:a1:c0:9b:74:cc:c6:
                    d8:71:3f:14:d5:49:d0:9a:85:6f:b6:c6:7c:9f:64:
                    60:d1:2b:0e:e4:a2:d2:43:4e:8a:17:99:9e:c1:c8:
                    6e:a9:42:10:c3:de:e9:21:c2:9c:03:24:bc:f3:06:
                    91:7c:d8:1f:b8:5f:e3:89:a4:ba:72:26:db:34:a2:
                    58:d5:e6:a1:40:6e:17:4e:65:20:de:37:2d:96:ff:
                    a2:ee:b6:b8:cd:45:ed:f6:de:81:23:57:a7:08:f5:
                    4d:71:3f:04:d6:1b:06:2e:c5:1b:3c:7f:b4:d4:36:
                    63:c7:27:4b:2b:70:71:30:20:19:f0:6f:be:ad:ce:
                    5e:bf:02:7c:1b:85:6c:2a:9f:be:38:ac:95:f6:55:
                    58:da:48:7e:e0:d5:94:37:69:01:be:c4:0c:ec:c1:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D3:5C:E4:50:C7:CB:65:B2:C7:67:0A:E3:C5:AA:CF:82:A3:1E:BF
            X509v3 Authority Key Identifier:
                keyid:4F:65:A5:6D:10:69:C3:0B:61:BC:8E:D2:1E:21:C1:4D:43:55:71:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/4F65A56D1069C30B61BC8ED21E21C14D435571D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65A56D1069C30B61BC8ED21E21C14D435571D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/4F65A56D1069C30B61BC8ED21E21C14D435571D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:3f:fd:95:94:51:7c:f6:c0:58:71:50:62:3b:26:ef:7e:
         4e:c5:7c:be:70:70:97:8b:33:6e:be:08:6e:16:23:53:17:88:
         cd:0c:b7:d2:aa:0d:1c:ff:3e:45:f2:c4:51:a4:4e:9c:3b:d0:
         07:40:fe:2d:7b:e7:84:44:c1:65:e0:66:81:ec:2e:0f:fe:d3:
         2d:2b:16:63:5d:38:de:23:f9:b8:42:1a:4c:3c:00:7b:84:4c:
         07:fa:7f:c3:b6:fb:73:29:83:c4:cf:19:0a:6d:94:a7:7c:eb:
         7f:04:b0:93:49:f5:d3:8f:93:ab:dd:48:13:dd:d3:d3:a7:d1:
         19:54:35:2a:6b:04:5b:55:5a:8f:10:8c:95:df:82:00:88:d2:
         ca:1f:d8:00:9a:6f:41:df:57:df:6a:9f:b1:d9:fc:d8:e2:a4:
         1a:c2:bf:ed:ae:bc:db:2f:01:9f:fd:f4:b5:18:77:0b:8c:af:
         05:dc:5e:f4:f3:e9:da:1e:f9:73:d9:71:67:85:3f:31:18:8b:
         92:e9:1e:95:49:5a:8f:f5:0b:28:ad:8c:8a:8b:e5:f3:6e:9e:
         d9:a7:89:07:36:fb:99:70:99:df:f3:0a:ca:f6:b7:e0:9f:b2:
         b3:99:2c:47:e5:bb:c2:63:18:3c:6e:1f:0f:dd:88:db:8e:69:
         21:48:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----