Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.mft
File:                     CED693561B18E1F15DE112114489E7324E327A34.mft (raw, json)
Hash identifier:          19MyX5UoXCYdF3ETYlUfupmoqrsslZLkXgrAJOXX894=
Subject key identifier:   EB:57:3D:50:86:46:B4:64:CC:9B:48:99:A8:A8:4C:31:7A:00:30:35
Authority key identifier: CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34
Certificate issuer:       /CN=CED693561B18E1F15DE112114489E7324E327A34
Certificate serial:       6515861C79C472DE5109A306DB6EBD54BCE9F7FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.mft
Manifest number:          020B
Signing time:             Wed 17 Jan 2024 18:25:01 +0000
Manifest this update:     Wed 17 Jan 2024 18:20:01 +0000
Manifest next update:     Thu 18 Jan 2024 20:31:01 +0000
Files and hashes:         1: 323830343a376139343a313030303a3a2f34302d3430203d3e20323731333830.roa (hash: qRaFrjZ8NU7ikAbDUfQ8Xme6L9JCBA1xNuKOwnM50II=)
                          2: CED693561B18E1F15DE112114489E7324E327A34.crl (hash: bAkRNKoOTZMkZb+Kj95/8NZrgocHSIXPo6FRlCSPA7A=)
                          3: 3138312e3138392e382e302f32322d3234203d3e20323731333830.roa (hash: Y7s2ZuHRoyA2vWGGf90vCVVXH+1XMCHHBF2pLQhYcG8=)
                          4: 323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa (hash: AKCc4xmGTv+Dz0CYLSjhk28mUjEjMkzbUHJIvsASNyU=)
                          5: 323830343a376139343a313130303a3a2f34302d3432203d3e20323731333830.roa (hash: E1YILzzu3Ss8iacE8EmL3KCHqfMElj03dUzj1BeWP+0=)
                          6: 323830343a376139343a3a2f33322d3438203d3e20323731333830.roa (hash: a8Ek3T0wsOccj1YREYV33GDLQv3FLWtbMHqZdLKCQg0=)
                          7: 323830343a376139343a313230303a3a2f34302d3432203d3e20323731333830.roa (hash: YZupZ3coA+I8/3WagjGuRyQJQBVr3cuT27ibezrlTFQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:15:86:1c:79:c4:72:de:51:09:a3:06:db:6e:bd:54:bc:e9:f7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED693561B18E1F15DE112114489E7324E327A34
        Validity
            Not Before: Jan 17 18:20:01 2024 GMT
            Not After : Jan 18 20:31:01 2024 GMT
        Subject: CN=EB573D508646B464CC9B4899A8A84C317A003035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:60:62:74:cd:e4:76:3f:c2:a6:4e:12:a6:
                    aa:ab:98:f6:e8:2d:b0:fc:7b:9a:56:09:aa:6e:07:
                    df:5a:79:ef:94:af:b8:19:8d:39:13:ee:3a:fe:a0:
                    06:5d:bc:1f:15:0b:1d:12:d9:c6:ea:67:18:de:f8:
                    3e:dc:2e:8c:07:96:f0:b5:9f:bf:0c:c2:8c:82:fe:
                    63:86:c2:5f:54:ed:d0:7d:01:b8:c3:23:1d:f7:48:
                    15:4a:5e:d6:5d:d9:4a:db:ec:16:ca:1d:80:fa:e3:
                    f7:7b:58:1d:fa:bf:1b:aa:53:2f:96:ea:08:ed:fa:
                    b1:4b:ed:02:8d:0b:c2:33:27:d1:51:96:62:61:21:
                    3c:32:2e:eb:7a:0f:11:d8:0a:dd:65:dc:4f:dd:65:
                    d2:0e:72:3e:4e:2a:8a:f7:14:86:09:e5:73:57:09:
                    c9:66:ef:31:7a:7f:4a:ad:30:aa:27:19:6b:a1:94:
                    19:8c:aa:84:27:5e:87:2d:e9:cd:52:9b:7a:f4:d5:
                    6d:20:1e:8d:01:06:77:5a:c7:da:78:b2:eb:8f:68:
                    57:1f:0f:e8:26:88:e4:a9:74:ad:68:5c:95:3a:5f:
                    48:54:08:7c:a4:b3:e5:24:7a:88:d7:7b:8e:7a:6d:
                    61:9a:60:3d:32:11:e9:45:09:a3:9c:09:cf:93:ec:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:57:3D:50:86:46:B4:64:CC:9B:48:99:A8:A8:4C:31:7A:00:30:35
            X509v3 Authority Key Identifier:
                keyid:CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:30:28:e6:2b:20:c3:9d:48:1e:3b:26:6c:64:dd:aa:32:f0:
         f6:a7:71:42:1e:63:67:8b:61:73:64:9c:d5:1d:da:64:c3:54:
         ac:4b:eb:ea:d2:62:b2:d4:42:95:42:6f:f0:0a:fd:01:ce:53:
         b7:e4:1b:57:06:f2:df:c3:5d:ba:b3:6c:ac:89:92:57:72:36:
         9c:69:b3:36:89:d2:90:26:8b:2b:f5:5e:ed:39:09:f0:3a:10:
         2b:54:bc:0d:b5:8b:26:00:19:01:49:06:bc:4e:8c:9b:d7:1d:
         b7:f5:e9:30:26:dd:9b:f4:00:9f:09:f8:e1:5c:ec:33:85:51:
         20:da:bc:93:46:5a:dd:89:4a:e1:8e:37:a2:50:03:99:d2:48:
         36:cf:86:a6:a1:b3:d6:60:76:1d:de:e1:74:01:7a:08:77:64:
         5a:dd:66:78:17:6f:7c:67:e4:42:30:b0:ee:7e:b3:f2:ee:7c:
         e1:96:35:89:6d:39:13:bc:15:4b:66:04:58:ea:33:d9:e9:94:
         08:37:7b:db:de:42:a0:80:e5:6a:a1:7a:b5:ef:f7:cb:f1:b1:
         0a:c5:78:9d:30:89:32:5d:e4:ab:42:a3:ae:69:a2:d3:cc:f8:
         9d:f4:b5:b6:0b:d4:df:15:69:c1:7a:d2:4f:aa:50:ec:71:e5:
         e6:9e:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 12:18:54 2024 by rpki-client on console-fra.rpki-client.org