Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/218965930961CE95EFA3EF552D5E5C845E401D2A.mft
File:                     218965930961CE95EFA3EF552D5E5C845E401D2A.mft (raw, json)
Hash identifier:          cUDQdTdWkXP49TULL5hcITVORQ0J3/+BwsfhgUGzZJw=
Subject key identifier:   B4:3E:CF:CF:86:03:44:4D:E0:23:57:87:56:69:CB:FB:0D:EA:E6:C1
Authority key identifier: 21:89:65:93:09:61:CE:95:EF:A3:EF:55:2D:5E:5C:84:5E:40:1D:2A
Certificate issuer:       /CN=218965930961CE95EFA3EF552D5E5C845E401D2A
Certificate serial:       6C1C94E099DA2070C32AFEF80C7B2A1FF33B70A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/218965930961CE95EFA3EF552D5E5C845E401D2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/218965930961CE95EFA3EF552D5E5C845E401D2A.mft
Manifest number:          44
Signing time:             Mon 16 Oct 2023 20:09:40 +0000
Manifest this update:     Mon 16 Oct 2023 20:04:40 +0000
Manifest next update:     Tue 17 Oct 2023 22:10:40 +0000
Files and hashes:         1: 34352e3232362e3135362e302f32322d3232203d3e20323636393730.roa (hash: 1z/R/Po7W2kXUaBN3YMEbqVSplyVwGQrvCzpg/KDZNk=)
                          2: 323830343a343632303a3a2f33322d3332203d3e20323636393730.roa (hash: U52MrGcy9hXzpo0yVcTELkfgoS7npg/rYlwjAv3USEY=)
                          3: 218965930961CE95EFA3EF552D5E5C845E401D2A.crl (hash: RVJlWQ15uTcI2C5+qzvS2Drc2siMUge+WoXOTsd2vT4=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1c:94:e0:99:da:20:70:c3:2a:fe:f8:0c:7b:2a:1f:f3:3b:70:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218965930961CE95EFA3EF552D5E5C845E401D2A
        Validity
            Not Before: Oct 16 20:04:40 2023 GMT
            Not After : Oct 17 22:10:40 2023 GMT
        Subject: CN=B43ECFCF8603444DE02357875669CBFB0DEAE6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:b6:a0:bf:4a:f3:2f:54:81:89:1e:74:5e:
                    4e:25:4f:78:c4:3c:ea:28:31:23:b2:db:90:fe:d2:
                    a3:da:19:ce:8b:78:11:6e:5d:9c:06:00:ab:3d:89:
                    0a:03:02:78:37:58:fb:d2:ae:4c:25:0d:a1:0a:c9:
                    ce:4b:af:9c:9b:50:ea:b2:9f:64:e4:ac:63:d7:23:
                    c1:27:90:28:5c:29:e2:fb:f7:02:c7:5b:1d:ad:9e:
                    79:ac:c3:b5:07:73:e1:4d:bd:50:8a:4a:22:da:59:
                    28:eb:67:42:e9:41:95:ae:5e:72:50:44:05:c1:57:
                    2a:43:8c:4a:b1:ee:de:99:dd:3f:86:a6:00:ee:4f:
                    16:83:70:6e:58:6d:e7:7f:26:87:0c:1a:09:c4:e1:
                    88:03:0b:06:20:b5:cf:3e:69:79:14:d1:47:cf:aa:
                    bd:96:4e:65:2e:e9:36:d5:f3:61:c6:d3:91:f9:bb:
                    4c:27:6a:cb:24:60:4a:c3:27:df:81:2d:b3:49:14:
                    f8:59:cc:e5:d7:98:16:7d:6d:4e:cb:6b:2a:eb:27:
                    40:6b:76:ea:1f:2c:d3:f2:6d:fd:43:04:73:4c:2c:
                    02:86:db:c1:88:e5:53:53:07:3e:60:14:f4:38:f6:
                    e5:da:a9:da:d9:7a:f4:a8:bd:d0:49:01:f4:4d:38:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3E:CF:CF:86:03:44:4D:E0:23:57:87:56:69:CB:FB:0D:EA:E6:C1
            X509v3 Authority Key Identifier:
                keyid:21:89:65:93:09:61:CE:95:EF:A3:EF:55:2D:5E:5C:84:5E:40:1D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/218965930961CE95EFA3EF552D5E5C845E401D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/218965930961CE95EFA3EF552D5E5C845E401D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/218965930961CE95EFA3EF552D5E5C845E401D2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:81:77:21:34:28:ba:5d:1c:87:c4:24:b5:d5:a0:72:4f:d5:
         32:bf:42:83:8b:58:8e:e2:41:ad:28:fc:14:18:fb:6e:95:3a:
         6d:68:77:07:d9:84:c3:94:91:0a:3b:e5:d4:01:96:57:ea:ff:
         40:dc:39:b3:1f:16:6b:47:a4:6b:f9:e0:29:2a:3e:22:48:82:
         da:48:3b:a6:0d:e8:bd:1b:0d:cc:93:19:e4:67:72:31:6b:6c:
         95:5d:31:8d:dc:19:87:83:89:02:51:06:5f:09:59:a5:65:71:
         64:89:66:94:92:4e:67:33:d6:ba:f3:e8:ea:11:f3:d1:a6:15:
         93:c6:ae:d5:af:03:99:a4:1e:55:08:56:48:e7:6f:3c:8b:a4:
         bb:1a:7c:5a:72:8b:b0:18:d5:65:88:c4:ba:0b:12:fa:12:cd:
         4c:2a:23:22:65:16:06:f8:d9:61:6c:d0:e0:27:51:72:6f:e5:
         e6:2b:03:d9:ba:56:42:54:47:ae:b6:a0:4d:44:46:0b:e1:e4:
         04:93:c9:ca:26:a1:ba:57:ca:de:96:42:83:8a:8c:59:35:a9:
         4c:f6:3a:07:8c:e9:41:50:11:7e:3a:96:47:64:02:3e:70:d2:
         ce:34:7a:86:9c:a6:31:89:b0:a2:3e:e6:fd:6d:c0:58:57:9c:
         ce:a9:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----