Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.mft
File:                     FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.mft (raw, json)
Hash identifier:          kOP6vslnEBrgmzM+Hy4Mc9xjxKkkDZ5mRL8/DkqTsLs=
Subject key identifier:   C3:7F:D2:11:4B:EC:1B:59:06:A0:F2:60:F2:5F:CE:0B:89:D7:B6:D7
Authority key identifier: FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97
Certificate issuer:       /CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
Certificate serial:       166FEBBEB0656EC12031321D84B1BB0FF2FB4CB1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.mft
Manifest number:          AC
Signing time:             Fri 09 Aug 2024 12:24:53 +0000
Manifest this update:     Fri 09 Aug 2024 12:19:53 +0000
Manifest next update:     Sat 10 Aug 2024 13:46:53 +0000
Files and hashes:         1: 323830343a386235633a3a2f33342d3334203d3e20323733373238.roa (hash: GWK+FjnB7L5UQNuvaZwemI/f6XrBlJN53e+xPg0Mev4=)
                          2: 323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (hash: 98Ye6kGjL2DGKdqy9Leh8CVZiaGnCtc1UTuMZF9ZNTE=)
                          3: FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.crl (hash: PJafWI4yHcqUJyTBGkhiIbgPV09+bqqRrwG+NFgDALE=)
                          4: 323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (hash: 2mQ2PnB7TXB1tN4PBKZ5pF891a3FJgaw79b7ExuOnxk=)
                          5: 323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (hash: 9zRsN0bmzfi+izq1ZJu/w5Cag1QL86a1NHVvLIrKjyc=)
                          6: 323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (hash: BbYbyHDyffVS4WyYb6VaVRe1Q9NtDJGpMGlPdbcxbDI=)
                          7: 323830343a386235633a3a2f33332d3333203d3e20323733373238.roa (hash: qfBKsaEt4y+WaeNjzwBOHM5KM9dh7o0l+n10AeS+un8=)
                          8: 323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (hash: IAr1JKr3LCyVEeEUPlrgS7efpnUopuIIcsrV6uBjHqE=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6f:eb:be:b0:65:6e:c1:20:31:32:1d:84:b1:bb:0f:f2:fb:4c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
        Validity
            Not Before: Aug  9 12:19:53 2024 GMT
            Not After : Aug 10 13:46:53 2024 GMT
        Subject: CN=C37FD2114BEC1B5906A0F260F25FCE0B89D7B6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:3f:cf:49:42:da:ca:3e:3d:f5:b1:cf:73:
                    64:55:4b:fd:56:88:32:d2:3f:fd:38:e5:7a:e5:7c:
                    e6:0b:a4:ae:ef:ad:fb:1c:13:9f:17:4b:8d:e0:42:
                    95:b0:4d:9d:74:2c:2e:73:05:0f:13:63:ab:a8:6d:
                    db:a8:83:d4:6f:a7:f2:58:f5:18:00:39:da:77:ee:
                    cd:92:8e:6f:52:8b:1f:e6:a6:c2:dd:a4:f6:f1:99:
                    e5:ec:0b:45:72:43:73:f2:92:23:ae:9b:b2:70:36:
                    0b:5d:10:fe:2a:9f:a5:40:cd:54:ae:77:5c:5e:cc:
                    6a:37:53:49:50:f2:56:02:bc:d2:c1:04:66:ba:a9:
                    e8:f7:cf:2a:87:89:68:42:ca:39:3b:0f:3f:bf:56:
                    97:ac:eb:d0:3b:66:bd:12:02:92:35:81:46:89:01:
                    c2:84:ff:27:dd:af:00:23:3a:8f:77:8a:e3:4d:49:
                    1b:07:44:d3:94:5d:3e:95:d2:90:f2:a2:85:3a:86:
                    a8:82:99:5c:a4:dd:60:9f:94:d4:4a:b1:31:1f:8e:
                    66:a3:4a:83:d9:94:39:7a:6a:23:17:84:b4:6d:8d:
                    95:c1:59:32:cb:69:ee:1d:c0:2a:c6:e1:17:8c:10:
                    8b:f0:ab:c1:75:99:79:3e:d5:1e:7d:66:be:3a:52:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7F:D2:11:4B:EC:1B:59:06:A0:F2:60:F2:5F:CE:0B:89:D7:B6:D7
            X509v3 Authority Key Identifier:
                keyid:FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:c1:d9:f3:cd:d9:a9:30:38:19:05:cb:29:a0:3a:35:fa:
         ef:2d:a1:96:72:cd:9e:56:db:52:6f:94:5f:1f:18:1e:02:23:
         3c:5e:98:77:d5:cd:d9:6d:8f:cf:8d:67:74:7b:4e:f9:01:fb:
         08:63:e4:4a:d3:3c:5b:9d:41:10:b3:3e:7d:52:5a:2d:f5:9b:
         2b:69:9a:cf:cb:2e:93:45:c6:a0:b9:5f:63:a5:58:1d:e2:7c:
         25:ee:7a:21:b1:dc:42:07:e5:91:44:8e:19:20:41:7b:96:14:
         f3:b3:a0:85:a5:59:2c:e0:7b:64:33:10:75:27:b1:47:93:63:
         4a:2c:a0:08:0d:be:00:8a:04:a6:f5:ca:cf:78:7e:90:42:d1:
         9c:f3:80:58:4e:31:d5:85:9e:c1:8b:73:a5:3a:e8:7a:b3:bb:
         32:bb:57:68:7c:9f:a2:b6:4b:db:d9:78:80:c0:64:76:5e:6c:
         87:10:ba:6b:19:81:9c:7c:41:e0:63:8c:19:6e:3e:58:63:db:
         ba:44:cb:32:f0:12:c8:31:33:ea:97:23:a9:31:41:45:93:04:
         62:d4:25:c1:b1:b0:22:a7:f6:6e:32:e1:fe:dd:e5:79:38:f7:
         7e:65:59:08:7f:2f:a5:8a:c7:15:cf:0a:f1:ad:98:10:52:92:
         0c:ee:c6:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFm/rvrBlbsEgMTIdhLG7D/L7TLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQwOTNBRDMwRkREQzcyODBBNzJDNUQ1RTE2MTRFRDM0
RUU4Q0Q5NzAeFw0yNDA4MDkxMjE5NTNaFw0yNDA4MTAxMzQ2NTNaMDMxMTAvBgNV
BAMTKEMzN0ZEMjExNEJFQzFCNTkwNkEwRjI2MEYyNUZDRTBCODlEN0I2RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc5D/PSULayj499bHPc2RVS/1W
iDLSP/045XrlfOYLpK7vrfscE58XS43gQpWwTZ10LC5zBQ8TY6uobduog9Rvp/JY
9RgAOdp37s2Sjm9Six/mpsLdpPbxmeXsC0VyQ3PykiOum7JwNgtdEP4qn6VAzVSu
d1xezGo3U0lQ8lYCvNLBBGa6qej3zyqHiWhCyjk7Dz+/Vpes69A7Zr0SApI1gUaJ
AcKE/yfdrwAjOo93iuNNSRsHRNOUXT6V0pDyooU6hqiCmVyk3WCflNRKsTEfjmaj
SoPZlDl6aiMXhLRtjZXBWTLLae4dwCrG4ReMEIvwq8F1mXk+1R59Zr46UogZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUw3/SEUvsG1kGoPJg8l/OC4nXttcwHwYDVR0j
BBgwFoAU/Qk60w/dxygKcsXV4WFO007ozZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMi9GRDA5M0FEMzBGRERDNzI4MEE3MkM1RDVFMTYxNEVEMzRFRThDRDk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEMDkzQUQzMEZEREM3Mjgw
QTcyQzVENUUxNjE0RUQzNEVFOENEOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpRWm8vMi9G
RDA5M0FEMzBGRERDNzI4MEE3MkM1RDVFMTYxNEVEMzRFRThDRDk3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMOzB2fPN2akwOBkFyymgOjX67y2hlnLNnlbbUm+UXx8YHgIjPF6Yd9XN2W2P
z41ndHtO+QH7CGPkStM8W51BELM+fVJaLfWbK2maz8suk0XGoLlfY6VYHeJ8Je56
IbHcQgflkUSOGSBBe5YU87OghaVZLOB7ZDMQdSexR5NjSiygCA2+AIoEpvXKz3h+
kELRnPOAWE4x1YWewYtzpTroerO7MrtXaHyforZL29l4gMBkdl5shxC6axmBnHxB
4GOMGW4+WGPbukTLMvASyDEz6pcjqTFBRZMEYtQlwbGwIqf2bjLh/t3leTj3fmVZ
CH8vpYrHFc8K8a2YEFKSDO7GJQ==
-----END CERTIFICATE-----
Generated at Mon Aug 12 10:20:59 2024 by rpki-client on console-fra.rpki-client.org