Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft
File:                     B9565814EEE07F40E147986C257744795A8CFC01.mft (raw, json)
Hash identifier:          Ckt762j08v77q7nkCHlKrQ0G89Yx67s8t1236vE9nP0=
Subject key identifier:   81:3B:50:3E:AB:56:B2:55:EF:C0:46:14:FF:14:D8:D9:D6:C9:EF:46
Authority key identifier: B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Certificate issuer:       /CN=B9565814EEE07F40E147986C257744795A8CFC01
Certificate serial:       2B4F38C1E2A2A9993EDFBA0D54C840285B417A2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft
Manifest number:          C2
Signing time:             Sat 24 Aug 2024 09:07:05 +0000
Manifest this update:     Sat 24 Aug 2024 09:02:05 +0000
Manifest next update:     Sun 25 Aug 2024 12:45:05 +0000
Files and hashes:         1: 323830343a373261633a3a2f33322d3332203d3e20323730383638.roa (hash: t/IJ5RUW3MvnhiUI8IVzKlLec2YDVUebepbxlnO/868=)
                          2: 3137372e32332e35312e302f32342d3234203d3e20323730383638.roa (hash: J8mnXGmlyxi5S57OO5ZYvyglcLQ45LGC9Iyr0xMqj54=)
                          3: 3137372e32332e35302e302f32342d3234203d3e20323730383638.roa (hash: I5ZTHsRyT6slZ1dN5H2tvE+ueCCIcCBJQ3GK4nRgS6E=)
                          4: B9565814EEE07F40E147986C257744795A8CFC01.crl (hash: YwkYzX6kqMvdjdPDKJHkPLvJTpbZrjCU9U0WL4eCV6g=)
                          5: 3137372e32332e34392e302f32342d3234203d3e20323730383638.roa (hash: UmkFD2gTeG+DJqrfekUTcEcSsxv6D5TV1vy+K3LDAuM=)
                          6: 3137372e32332e34382e302f32342d3234203d3e20323730383638.roa (hash: rcfR3E9Sa78x79FBhLyMcjH1u8j/90KL8BdJdtgRhQI=)
                          7: 3137372e32332e34382e302f32322d3232203d3e20323730383638.roa (hash: MGkrEzLP28nuUNXgRLz1FbXsCNfo62gTigkAGjJE3Jo=)
                          8: 323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa (hash: /r19s+IcNIO/GVnW3SFavupuK0NHvOI7MuVdF6t5NRw=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4f:38:c1:e2:a2:a9:99:3e:df:ba:0d:54:c8:40:28:5b:41:7a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Validity
            Not Before: Aug 24 09:02:05 2024 GMT
            Not After : Aug 25 12:45:05 2024 GMT
        Subject: CN=813B503EAB56B255EFC04614FF14D8D9D6C9EF46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bb:44:69:48:55:fa:44:0b:d2:91:aa:b3:f0:
                    d7:e4:ab:53:58:29:24:ba:00:55:36:3c:cb:62:f9:
                    30:8a:f0:9a:02:3a:6d:e3:fb:f7:ce:8a:22:e8:50:
                    7a:8a:30:7e:23:84:b2:f5:23:49:49:99:28:d7:2b:
                    79:61:7b:ff:23:54:ae:e0:cc:5f:96:0c:fc:4a:d5:
                    a5:d4:b5:a1:9d:f9:bf:cb:83:6c:16:28:3c:c0:e7:
                    36:78:2c:be:f3:4e:5d:5e:1b:16:6c:05:9d:bb:51:
                    e4:69:ab:d6:ad:cb:db:93:7a:41:b8:a2:22:68:d5:
                    fe:61:36:49:6d:5b:59:21:e5:3a:bd:2c:05:19:d3:
                    73:86:b6:ba:89:62:0d:d0:e6:9d:1e:d8:30:db:e0:
                    99:62:cb:4a:11:2d:f0:6b:5d:f9:51:71:49:ac:e4:
                    fd:4d:8c:07:c6:40:7a:f9:82:a6:62:31:01:61:7f:
                    2a:c6:f0:37:b0:8d:79:52:57:0c:07:39:84:43:13:
                    c7:f0:32:7a:3b:aa:ad:21:4c:27:1e:ab:34:16:8a:
                    24:9a:d8:b3:3d:fc:d9:b3:b2:28:a4:5d:48:01:13:
                    ed:3e:e9:53:1b:d0:27:d0:34:e8:2b:50:28:b9:2b:
                    f1:e3:f7:6c:46:3c:20:94:d9:2d:d0:07:23:cb:1a:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3B:50:3E:AB:56:B2:55:EF:C0:46:14:FF:14:D8:D9:D6:C9:EF:46
            X509v3 Authority Key Identifier:
                keyid:B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:06:0d:1d:81:ae:e0:6f:6a:7a:3f:ca:d2:44:67:7d:c3:a4:
         1f:b0:b4:37:da:42:21:4c:5c:0f:43:85:18:1d:4f:c5:d1:cb:
         36:b8:ba:bb:7f:c7:03:a5:d4:72:fb:d9:57:6e:d1:9a:cb:02:
         40:0a:54:9a:98:6c:62:84:0f:e8:a0:60:c8:34:47:78:ea:7a:
         fc:92:8a:41:fb:96:c2:6e:d0:33:c3:e9:7c:ca:a1:53:5c:87:
         52:45:ef:9f:0e:4d:3c:3a:24:f0:f2:43:76:83:f0:96:b6:69:
         27:35:a9:c4:f3:48:b8:8b:26:72:e5:44:a7:3e:83:80:49:29:
         70:cb:00:b5:b4:72:85:50:bc:cd:9e:1a:d8:ac:47:2d:19:f6:
         ca:ed:2e:5a:43:28:7a:87:16:a0:f1:21:da:78:22:16:97:a3:
         74:ea:ff:51:3a:1d:23:54:ba:24:ed:54:96:1a:8e:4a:45:9e:
         a9:cf:97:ec:90:87:df:6f:60:1e:85:e6:68:ee:02:d2:6d:41:
         78:91:f8:1f:12:3d:b5:42:13:93:6d:1a:2e:99:d3:c6:62:01:
         3b:90:3b:db:3e:e1:71:cf:86:11:60:cc:54:50:65:a2:52:0c:
         26:8f:ab:1d:de:22:37:67:74:96:93:77:20:a6:7f:3d:24:ff:
         64:e7:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 08:34:00 2024 by rpki-client on console-fra.rpki-client.org