Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.mft
File:                     96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.mft (raw, json)
Hash identifier:          uYyqoLLGSiOsY6BmdgB33y2pk5dcVOgIrFTZVDW3Ja4=
Subject key identifier:   CD:DA:73:D5:57:34:F0:00:4A:73:57:A0:19:4A:42:08:05:28:1F:17
Authority key identifier: 96:B8:FD:8F:C2:71:B3:CB:BC:CA:36:DE:D3:B1:3B:3A:7E:6F:3B:00
Certificate issuer:       /CN=96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00
Certificate serial:       64AC19F27EE13FB999C0E33A8E70B8D63C7F80A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.mft
Manifest number:          06
Signing time:             Fri 05 Jul 2024 11:34:57 +0000
Manifest this update:     Fri 05 Jul 2024 11:29:57 +0000
Manifest next update:     Sat 06 Jul 2024 14:57:57 +0000
Files and hashes:         1: 3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa (hash: NULwMfKDb6NKZ04sLJdRB9cub1QvcMywnWfrfEY7nhg=)
                          2: 96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.crl (hash: c+rlQQHBN4vT6nOXtYZEmR9TxMCaF3WWPid8f1Dz4Z4=)
                          3: 323830343a316539343a3a2f33322d3336203d3e20323634343337.roa (hash: imrr4a1Rz3IJnX7VrFYj/JHMDLT5su4SJJNtg82NMPA=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ac:19:f2:7e:e1:3f:b9:99:c0:e3:3a:8e:70:b8:d6:3c:7f:80:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00
        Validity
            Not Before: Jul  5 11:29:57 2024 GMT
            Not After : Jul  6 14:57:57 2024 GMT
        Subject: CN=CDDA73D55734F0004A7357A0194A420805281F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:73:90:3f:79:38:0d:70:b6:1e:f8:cc:8f:
                    fd:45:66:ac:a4:4f:36:ad:d0:6f:c0:bc:bf:b6:af:
                    5f:23:a1:3e:cb:a4:25:57:ad:a3:45:46:e2:8c:68:
                    b1:39:dd:25:70:b9:22:cb:f1:60:31:51:74:cb:36:
                    ff:fa:51:13:84:7b:39:43:31:68:b0:64:1c:54:57:
                    ef:aa:62:39:3c:21:c8:06:30:0f:14:de:7c:09:99:
                    b8:30:73:31:28:a1:a2:36:d0:77:78:cb:d6:81:a9:
                    5e:c9:89:08:74:93:90:11:72:9e:bc:72:4e:b8:f3:
                    82:bd:36:16:b1:0a:51:86:57:32:c2:b9:a1:cc:c5:
                    19:b9:9d:64:f1:81:a1:18:aa:8e:6c:e6:29:0e:b9:
                    c1:63:da:43:bf:de:57:18:ca:dc:51:28:4a:bc:fe:
                    26:6b:c4:03:7e:3c:23:8c:d2:35:64:f7:ed:f9:47:
                    54:79:e7:64:82:83:9a:57:1f:52:93:95:dc:a7:9d:
                    cb:ad:23:f5:bb:06:d9:f6:85:e6:0f:62:bb:93:60:
                    df:be:cd:2c:e1:e1:a9:4b:39:73:2a:28:ae:9e:de:
                    ad:a8:e7:f9:e4:a2:d7:58:0e:cc:57:6d:16:86:b1:
                    cd:21:99:27:1e:08:f4:8a:d5:27:7d:6b:9e:98:94:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DA:73:D5:57:34:F0:00:4A:73:57:A0:19:4A:42:08:05:28:1F:17
            X509v3 Authority Key Identifier:
                keyid:96:B8:FD:8F:C2:71:B3:CB:BC:CA:36:DE:D3:B1:3B:3A:7E:6F:3B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:d7:25:3d:13:95:02:5d:c1:d7:dd:00:56:3d:05:dc:0c:
         ce:d9:d1:91:02:ee:21:f4:d2:32:27:79:c2:26:aa:5f:78:74:
         0e:08:2d:65:ab:04:85:6a:39:a8:94:8a:33:21:d2:73:6d:8d:
         d8:96:9f:81:9a:ff:7c:51:44:18:6b:03:99:c9:7e:10:28:ae:
         c4:c8:d2:af:0a:78:bc:b6:6e:78:96:65:15:b7:b3:6f:6a:01:
         57:ca:0d:a6:25:69:d1:f9:c8:1d:3e:26:f2:db:a2:6a:59:c3:
         93:27:cd:96:c7:7c:bd:2a:de:5b:3e:23:20:b9:0a:07:17:45:
         8d:4b:eb:1e:8f:4a:70:68:b5:09:58:2f:1a:d7:77:73:46:69:
         4c:91:20:2e:63:4c:b6:e8:87:24:a5:d8:1b:1b:fc:81:33:7f:
         b7:df:94:e7:ab:16:05:0a:44:e7:c2:97:68:66:e9:e9:a0:73:
         05:ad:2f:59:e2:82:28:1d:dc:23:74:ba:59:3a:4e:a6:22:39:
         99:60:51:fc:ff:83:af:a8:e8:ed:a9:7f:8a:e2:29:e0:5d:7f:
         d4:65:3c:6c:bd:ee:b6:bd:7f:b7:4a:dc:48:39:30:28:3f:46:
         8d:eb:e7:0e:4d:89:f7:a8:a3:88:0f:53:67:56:22:4a:5d:cb:
         b5:c0:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----