Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.mft
File:                     0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.mft (raw, json)
Hash identifier:          JnXMzvx8lMgLEFWBa/U9Mz00cRrMxFWyUNSSd4mmMXA=
Subject key identifier:   F0:20:DF:CC:55:36:8F:17:EF:C2:21:E7:6D:5C:7D:21:99:E5:7D:4B
Authority key identifier: 0B:38:A5:9F:2F:DD:DE:45:68:4F:61:71:EE:1D:68:D2:EE:29:F5:28
Certificate issuer:       /CN=0B38A59F2FDDDE45684F6171EE1D68D2EE29F528
Certificate serial:       5AFDB60FF78E879EE2C9A518D09CED8349A2DE59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.mft
Manifest number:          0D
Signing time:             Fri 09 Aug 2024 09:16:33 +0000
Manifest this update:     Fri 09 Aug 2024 09:11:33 +0000
Manifest next update:     Sat 10 Aug 2024 13:04:33 +0000
Files and hashes:         1: 34352e3136342e34342e302f32322d3332203d3e20323638353937.roa (hash: zJwDeUEqfVpLRVXpF4rtWTIqfYHUdmWmDKZnN3y4GBY=)
                          2: 323830343a353361343a3a2f33322d313238203d3e20323638353937.roa (hash: u2Ohl9sVX1IeQpxDT6AkC6sqaCPuCNeNOvvQ2Dcc1KE=)
                          3: 0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.crl (hash: Rh8T19r2+39ib0Mzv5cbUdeEQusCTBQ2fueBJLIHuG0=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fd:b6:0f:f7:8e:87:9e:e2:c9:a5:18:d0:9c:ed:83:49:a2:de:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B38A59F2FDDDE45684F6171EE1D68D2EE29F528
        Validity
            Not Before: Aug  9 09:11:33 2024 GMT
            Not After : Aug 10 13:04:33 2024 GMT
        Subject: CN=F020DFCC55368F17EFC221E76D5C7D2199E57D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:22:b5:82:6b:17:d3:4f:9c:a4:e2:cb:f2:
                    f5:41:00:9d:38:4c:15:a0:04:4f:aa:19:1c:80:3f:
                    26:eb:0e:a9:d7:4a:8f:11:40:14:cb:20:ec:c9:f9:
                    02:52:67:20:5f:2c:9b:55:04:5a:fa:91:31:7e:49:
                    3e:19:1c:5b:dd:86:be:e2:25:7b:b6:cd:37:02:26:
                    5a:e2:52:98:23:fd:9c:c4:1c:c3:e2:7e:d5:e9:3d:
                    b9:cc:a7:a6:9e:e7:5c:7c:a4:3e:ac:f3:7d:c7:eb:
                    09:89:2f:45:13:03:9d:c3:1b:75:70:8e:02:c3:57:
                    d5:be:4f:42:75:bb:a6:2a:17:29:56:64:23:7b:94:
                    e3:52:19:34:ef:9e:6a:93:26:ea:26:60:47:09:e9:
                    2f:05:67:0a:e6:f6:f2:aa:0b:d9:87:03:e9:4e:b9:
                    79:27:a7:cb:b5:73:69:f8:ff:3a:88:b1:cd:3d:1e:
                    a7:73:14:b9:dc:0e:6d:6f:ff:62:8a:bf:30:a7:8a:
                    69:13:2d:6d:4c:07:a9:d9:7a:7b:96:bd:ea:37:a2:
                    f8:0e:3b:e0:3c:39:b6:30:11:0e:ee:d4:a0:bf:3c:
                    77:e4:13:fe:c4:eb:4e:68:9a:bf:d6:f0:1a:a3:e4:
                    0e:f2:c8:47:d3:c8:bf:da:3a:9d:d3:b3:28:14:4d:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:20:DF:CC:55:36:8F:17:EF:C2:21:E7:6D:5C:7D:21:99:E5:7D:4B
            X509v3 Authority Key Identifier:
                keyid:0B:38:A5:9F:2F:DD:DE:45:68:4F:61:71:EE:1D:68:D2:EE:29:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:98:82:89:7e:c6:03:ea:f4:bf:2a:04:3f:76:bb:bf:78:58:
         74:3b:73:11:0d:ec:57:8c:77:5e:ca:e2:bf:ad:77:fc:6b:ba:
         2a:92:11:4c:fd:ab:ad:df:ef:74:94:b0:df:5f:b7:de:75:4a:
         c5:87:e7:b6:91:ac:36:56:8e:bf:b8:5d:fe:d8:e2:25:e1:a0:
         d3:f4:9b:00:7d:ad:04:53:e0:7d:6e:d0:70:f4:5c:5f:9c:4c:
         b6:2a:57:bc:33:da:f2:d0:a9:f9:cd:69:7b:18:c5:1f:79:7d:
         09:bf:c7:d5:c0:b1:38:8a:99:20:cd:03:f2:96:3d:bb:13:95:
         d0:a2:80:d2:3a:8d:b3:ec:37:d9:a1:36:d7:28:43:f7:dc:b6:
         7d:7d:da:c4:31:d0:fa:fa:08:93:40:2a:b8:be:86:43:b0:59:
         85:73:37:8d:3e:4f:41:9b:b3:34:be:54:cf:49:70:df:b7:84:
         e9:ee:8c:b5:81:14:43:03:98:1c:3f:2a:90:4d:3f:a8:bb:8e:
         8c:a0:70:16:05:86:bb:71:d0:d8:37:c5:04:b8:52:af:1e:87:
         94:b3:f9:6e:fe:3d:27:09:8a:c9:a9:c8:f9:8a:f3:0d:48:e7:
         8c:fb:04:77:f1:f1:07:e2:de:ac:b1:2f:e3:33:4e:ef:27:87:
         70:87:52:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----