Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/EE85037D3580A407793B86B1161445493E825B07.mft
File:                     EE85037D3580A407793B86B1161445493E825B07.mft (raw, json)
Hash identifier:          CSHpWZIsFSxXHSXXi8ei3iEAmWBH378yW7Teh6ygBUs=
Subject key identifier:   6E:88:BB:A8:F1:FC:83:DC:8F:74:30:CC:03:28:34:AD:82:42:1C:B2
Authority key identifier: EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07
Certificate issuer:       /CN=EE85037D3580A407793B86B1161445493E825B07
Certificate serial:       10AF588E510B3C397018EBC3C62C72D8281EB3FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE85037D3580A407793B86B1161445493E825B07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/EE85037D3580A407793B86B1161445493E825B07.mft
Manifest number:          1D
Signing time:             Sat 24 Aug 2024 14:42:43 +0000
Manifest this update:     Sat 24 Aug 2024 14:37:43 +0000
Manifest next update:     Sun 25 Aug 2024 16:13:43 +0000
Files and hashes:         1: 3139312e372e3139322e302f31392d3234203d3e20323633333237.roa (hash: 9yc65liKrLRayoaY5RYuf2iaveRee44Dn3Y069ElemM=)
                          2: EE85037D3580A407793B86B1161445493E825B07.crl (hash: VgDM9fLcJpYdPm0rmJM55FVi+YkkZQIQ0nIAdO1CvPI=)
                          3: 323830343a346637383a3a2f33322d3438203d3e20323638333239.roa (hash: WQuLjBXwmgmAcqYzQfQGFIJ5cvVBjrVCaiQjJTKEHwU=)
                          4: 323830343a313435633a3a2f33322d3438203d3e20323633333237.roa (hash: lCrogeFCIZERfVzDVqULW3T9S2evs//+Opun+eN2bU8=)
                          5: 34352e3233382e38342e302f32322d3234203d3e20323638333239.roa (hash: wYKqlKJlbROF8cCy150FKlksR99h/lpDeuIEB2DkBIY=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:af:58:8e:51:0b:3c:39:70:18:eb:c3:c6:2c:72:d8:28:1e:b3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE85037D3580A407793B86B1161445493E825B07
        Validity
            Not Before: Aug 24 14:37:43 2024 GMT
            Not After : Aug 25 16:13:43 2024 GMT
        Subject: CN=6E88BBA8F1FC83DC8F7430CC032834AD82421CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:1e:20:5f:f8:f9:ee:9c:81:26:a8:9e:98:
                    22:1c:ab:8a:34:8c:88:5a:92:84:cb:1f:b3:da:60:
                    61:e8:bb:c5:b7:f3:00:cf:50:07:53:be:cf:f6:45:
                    13:e7:ad:3e:20:9f:6c:c9:de:be:ba:da:a6:41:01:
                    36:78:e2:69:35:87:e2:25:3a:6e:0f:7b:48:d7:89:
                    0f:40:0a:53:55:af:10:aa:11:8c:7b:06:d4:ad:36:
                    e1:a4:7f:a9:a5:35:ef:64:26:96:cd:51:0f:51:55:
                    fb:3c:f5:b3:7e:e6:21:f2:41:61:4e:de:04:66:4e:
                    6e:d6:11:72:f2:d7:a6:14:c8:43:5a:de:bd:cb:97:
                    d3:c2:00:bc:ae:04:8d:41:b1:23:ba:5f:7b:b1:1f:
                    9a:b1:96:8c:cd:90:f4:51:67:ec:ec:a5:c9:b2:0a:
                    10:49:83:d5:ee:95:d8:35:35:2d:f5:27:f7:1c:b1:
                    97:55:7a:ca:6a:88:c8:24:de:13:9d:93:d1:aa:bd:
                    a3:0a:95:e9:b0:92:2c:1c:2b:df:c3:b4:9c:66:63:
                    03:af:9a:8e:b8:25:d0:3a:d1:27:57:17:59:ed:01:
                    d0:c5:3c:4c:8b:87:73:77:79:dc:d8:67:c6:f1:e3:
                    dd:c0:e6:1c:28:80:bf:2c:df:ed:2a:73:86:93:ad:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:88:BB:A8:F1:FC:83:DC:8F:74:30:CC:03:28:34:AD:82:42:1C:B2
            X509v3 Authority Key Identifier:
                keyid:EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/EE85037D3580A407793B86B1161445493E825B07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE85037D3580A407793B86B1161445493E825B07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/EE85037D3580A407793B86B1161445493E825B07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:93:51:bb:24:94:a7:d6:0a:bd:4f:eb:6b:3a:87:01:fa:
         f4:2a:c4:1d:02:5f:49:af:3e:40:d5:30:0d:69:96:8b:f3:c2:
         b8:18:23:69:eb:6c:f6:20:28:d7:01:2f:87:57:ad:23:1a:c0:
         a5:5f:5e:b2:06:4f:61:24:35:b8:e8:7a:cf:1e:ff:0e:61:d0:
         de:c0:3e:5a:f4:09:4c:9a:04:4d:6e:84:e8:bb:cf:b9:aa:a7:
         55:f8:d2:d0:47:67:bb:2c:1a:28:d9:0a:87:4c:a5:60:fc:64:
         74:0c:ac:9d:b8:98:a7:4d:8c:f0:46:f6:35:19:ef:f1:94:27:
         16:dc:91:5e:93:87:04:a7:ce:22:c6:0d:92:aa:52:13:9f:28:
         cb:f0:d4:37:a9:16:4f:fb:3f:09:dc:2a:a9:05:d2:62:09:f0:
         11:75:08:16:e3:b4:cd:e9:09:02:6e:76:de:be:06:cf:d8:bc:
         30:f8:77:fa:d4:d3:7d:86:45:59:a7:0e:c1:2a:92:a2:73:79:
         88:f3:72:64:d3:6d:6a:d1:c9:ea:32:1e:8d:92:79:44:44:58:
         cc:34:aa:1b:83:d9:ee:95:01:98:b0:01:ec:09:eb:a4:dc:79:
         8f:e7:2f:27:f5:c0:d3:09:43:6a:b5:b3:96:52:de:79:ce:f6:
         a7:68:00:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEK9YjlELPDlwGOvDxixy2Cges/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU4NTAzN0QzNTgwQTQwNzc5M0I4NkIxMTYxNDQ1NDkz
RTgyNUIwNzAeFw0yNDA4MjQxNDM3NDNaFw0yNDA4MjUxNjEzNDNaMDMxMTAvBgNV
BAMTKDZFODhCQkE4RjFGQzgzREM4Rjc0MzBDQzAzMjgzNEFEODI0MjFDQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zB4gX/j57pyBJqiemCIcq4o0
jIhakoTLH7PaYGHou8W38wDPUAdTvs/2RRPnrT4gn2zJ3r662qZBATZ44mk1h+Il
Om4Pe0jXiQ9AClNVrxCqEYx7BtStNuGkf6mlNe9kJpbNUQ9RVfs89bN+5iHyQWFO
3gRmTm7WEXLy16YUyENa3r3Ll9PCALyuBI1BsSO6X3uxH5qxlozNkPRRZ+zspcmy
ChBJg9Xuldg1NS31J/ccsZdVespqiMgk3hOdk9GqvaMKlemwkiwcK9/DtJxmYwOv
mo64JdA60SdXF1ntAdDFPEyLh3N3edzYZ8bx493A5hwogL8s3+0qc4aTrZQrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUboi7qPH8g9yPdDDMAyg0rYJCHLIwHwYDVR0j
BBgwFoAU7oUDfTWApAd5O4axFhRFST6CWwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjEyQXM0WWozYmhhR3pGOEN4YmI3eTE5SzFFVnRUbXFMWWR0TjZKNkVV
M0cvMC9FRTg1MDM3RDM1ODBBNDA3NzkzQjg2QjExNjE0NDU0OTNFODI1QjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFODUwMzdEMzU4MEE0MDc3
OTNCODZCMTE2MTQ0NTQ5M0U4MjVCMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjEyQXM0WWozYmhhR3pGOEN4YmI3eTE5SzFFVnRUbXFMWWR0TjZKNkVVM0cvMC9F
RTg1MDM3RDM1ODBBNDA3NzkzQjg2QjExNjE0NDU0OTNFODI1QjA3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATmSTUbsklKfWCr1P62s6hwH69CrEHQJfSa8+QNUwDWmWi/PCuBgjaets9iAo
1wEvh1etIxrApV9esgZPYSQ1uOh6zx7/DmHQ3sA+WvQJTJoETW6E6LvPuaqnVfjS
0EdnuywaKNkKh0ylYPxkdAysnbiYp02M8Eb2NRnv8ZQnFtyRXpOHBKfOIsYNkqpS
E58oy/DUN6kWT/s/CdwqqQXSYgnwEXUIFuO0zekJAm523r4Gz9i8MPh3+tTTfYZF
WacOwSqSonN5iPNyZNNtatHJ6jIejZJ5RERYzDSqG4PZ7pUBmLAB7AnrpNx5j+cv
J/XA0wlDarWzllLeec72p2gA/A==
-----END CERTIFICATE-----