Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.mft
File:                     82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.mft (raw, json)
Hash identifier:          R+972b0vEg49k0dG3SDb/AT4PTAwBmv7L8hf5FYVsPo=
Subject key identifier:   51:8D:D6:8E:52:E3:31:F9:0D:9E:4B:90:8B:35:72:2D:8A:98:E4:1A
Authority key identifier: 82:C0:DC:A4:53:DA:01:49:23:0A:B2:0F:F5:CF:0E:95:CD:57:7E:8B
Certificate issuer:       /CN=82C0DCA453DA0149230AB20FF5CF0E95CD577E8B
Certificate serial:       3FEB5CEA03EBF3D9204006001B7A21A090F359DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.mft
Manifest number:          C5
Signing time:             Thu 29 Aug 2024 00:44:31 +0000
Manifest this update:     Thu 29 Aug 2024 00:39:31 +0000
Manifest next update:     Fri 30 Aug 2024 02:33:31 +0000
Files and hashes:         1: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: tMqHRVT7WZisgQQ/IyNR+KLXVUsmJKTf+KveY8JC7Zw=)
                          2: 82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.crl (hash: u5Op+TTi/OnjpIkaO2eqA0Ufx4P/+KhCyghjTaUAC9w=)
                          3: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: W1nz6eddwnI5Y1rHtWpZS77U9qom9c0LhhHiiEq7Vc8=)
                          4: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: VkUqkkTznF77yryEeMuWiOU9z5XK3Kypih0IeuLTnV8=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:eb:5c:ea:03:eb:f3:d9:20:40:06:00:1b:7a:21:a0:90:f3:59:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82C0DCA453DA0149230AB20FF5CF0E95CD577E8B
        Validity
            Not Before: Aug 29 00:39:31 2024 GMT
            Not After : Aug 30 02:33:31 2024 GMT
        Subject: CN=518DD68E52E331F90D9E4B908B35722D8A98E41A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:3f:2d:7a:c4:c1:b1:40:fa:44:b4:72:2c:
                    f8:02:ee:46:f3:4c:bd:e0:19:a3:c0:f4:a3:f9:c0:
                    98:0d:f6:80:bd:1b:fd:89:16:22:99:9c:1c:f5:25:
                    ad:11:a3:c7:c2:d4:bb:98:2e:0e:a5:28:20:94:05:
                    af:56:08:41:4e:26:d0:8b:75:19:df:0e:c7:52:22:
                    4f:ae:cc:c9:d2:7f:d4:ea:dd:3f:39:d2:63:c8:6e:
                    eb:6f:35:87:63:ca:0d:c4:41:8b:09:bc:9d:c9:11:
                    85:3b:2e:a7:21:13:10:44:10:6b:e9:fb:fa:f6:11:
                    86:a4:8d:1e:d0:78:53:f1:94:ca:b4:66:31:99:d4:
                    0e:df:b8:14:30:f0:ed:eb:49:46:88:c0:21:97:4d:
                    f2:e9:06:25:d8:ee:f1:5c:e7:0b:e0:52:a7:92:4a:
                    35:5c:49:b9:9e:05:56:44:44:ea:96:9a:03:ed:7e:
                    84:65:7b:36:c8:15:e3:73:7e:02:22:30:02:af:42:
                    44:69:51:ac:3f:11:48:97:d2:68:79:0f:fe:de:1e:
                    fe:20:e3:b8:05:75:f0:49:e9:a5:eb:99:7d:60:a5:
                    71:99:3b:71:70:9d:49:30:17:ac:e8:83:1a:82:06:
                    53:e9:3d:9d:4b:6d:8f:78:26:00:ee:a8:d6:4f:c1:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8D:D6:8E:52:E3:31:F9:0D:9E:4B:90:8B:35:72:2D:8A:98:E4:1A
            X509v3 Authority Key Identifier:
                keyid:82:C0:DC:A4:53:DA:01:49:23:0A:B2:0F:F5:CF:0E:95:CD:57:7E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:79:c5:05:c3:57:e3:4e:7d:cb:6b:5f:f5:e0:84:ec:67:
         75:c9:47:77:d5:2c:68:95:9a:55:be:14:c3:ca:3e:62:2f:ef:
         9e:37:60:66:bf:43:8e:3e:00:9a:95:6b:ae:75:c8:e4:5b:15:
         d6:a8:4e:7f:bc:db:0b:24:ef:8b:cb:f3:1d:a6:c5:4f:c8:98:
         84:a3:6f:b0:6a:63:a5:76:b8:46:35:c4:b9:a3:9e:03:7e:39:
         78:b2:97:31:6d:ad:52:45:2e:fd:32:a5:1a:ae:fd:84:83:d6:
         83:10:43:78:d9:75:2a:4f:41:ff:56:b5:a8:6f:93:f3:69:89:
         f3:da:21:7a:71:40:31:d0:f1:fe:e2:20:73:af:9c:d0:f5:a3:
         bc:8e:18:50:4f:76:5b:11:0b:76:7a:ec:ff:ff:f4:fd:20:1b:
         98:9b:28:a5:20:b5:a1:eb:9d:88:37:ad:ca:51:53:e3:78:31:
         ad:5e:8c:ce:c5:70:28:f9:cb:27:d4:d6:d2:9b:1c:80:0a:d4:
         df:eb:2c:80:92:3e:3d:b6:43:4b:72:cd:71:5e:94:e2:0b:7e:
         3c:30:f9:51:c4:44:09:d1:a9:dc:96:83:58:50:3b:d4:79:80:
         32:ea:d7:c4:4c:9f:e2:06:59:2c:ee:d1:c0:86:2d:20:f4:f7:
         07:9b:73:75
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUP+tc6gPr89kgQAYAG3ohoJDzWd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJDMERDQTQ1M0RBMDE0OTIzMEFCMjBGRjVDRjBFOTVD
RDU3N0U4QjAeFw0yNDA4MjkwMDM5MzFaFw0yNDA4MzAwMjMzMzFaMDMxMTAvBgNV
BAMTKDUxOERENjhFNTJFMzMxRjkwRDlFNEI5MDhCMzU3MjJEOEE5OEU0MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTT8tesTBsUD6RLRyLPgC7kbz
TL3gGaPA9KP5wJgN9oC9G/2JFiKZnBz1Ja0Ro8fC1LuYLg6lKCCUBa9WCEFOJtCL
dRnfDsdSIk+uzMnSf9Tq3T850mPIbutvNYdjyg3EQYsJvJ3JEYU7LqchExBEEGvp
+/r2EYakjR7QeFPxlMq0ZjGZ1A7fuBQw8O3rSUaIwCGXTfLpBiXY7vFc5wvgUqeS
SjVcSbmeBVZEROqWmgPtfoRlezbIFeNzfgIiMAKvQkRpUaw/EUiX0mh5D/7eHv4g
47gFdfBJ6aXrmX1gpXGZO3FwnUkwF6zogxqCBlPpPZ1LbY94JgDuqNZPweT/AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUUY3WjlLjMfkNnkuQizVyLYqY5BowHwYDVR0j
BBgwFoAUgsDcpFPaAUkjCrIP9c8Olc1XfoswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz
LzEvODJDMERDQTQ1M0RBMDE0OTIzMEFCMjBGRjVDRjBFOTVDRDU3N0U4Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MkMwRENBNDUzREEwMTQ5MjMw
QUIyMEZGNUNGMEU5NUNENTc3RThCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv
aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMS84MkMw
RENBNDUzREEwMTQ5MjMwQUIyMEZGNUNGMEU5NUNENTc3RThCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
T8l5xQXDV+NOfctrX/XghOxndclHd9UsaJWaVb4Uw8o+Yi/vnjdgZr9Djj4AmpVr
rnXI5FsV1qhOf7zbCyTvi8vzHabFT8iYhKNvsGpjpXa4RjXEuaOeA345eLKXMW2t
UkUu/TKlGq79hIPWgxBDeNl1Kk9B/1a1qG+T82mJ89ohenFAMdDx/uIgc6+c0PWj
vI4YUE92WxELdnrs///0/SAbmJsopSC1oeudiDetylFT43gxrV6MzsVwKPnLJ9TW
0pscgArU3+ssgJI+PbZDS3LNcV6U4gt+PDD5UcRECdGp3JaDWFA71HmAMurXxEyf
4gZZLO7RwIYtIPT3B5tzdQ==
-----END CERTIFICATE-----