Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.mft
File:                     76BC8672B6C71CBFC423D1106E72877D60284FD6.mft (raw, json)
Hash identifier:          Vk+XQ8XUNHzmvguGdmZPeXAj1AWJCM8PRiCH7AFWEnk=
Subject key identifier:   21:F9:D1:93:FA:2B:4F:E6:EB:F1:01:C1:76:C8:08:BC:D7:C7:C0:CC
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       7789202740C22ABA0D1FF5A5C8309CABFF5C1077
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.mft
Manifest number:          23
Signing time:             Fri 05 Jul 2024 12:21:02 +0000
Manifest this update:     Fri 05 Jul 2024 12:16:02 +0000
Manifest next update:     Sat 06 Jul 2024 14:30:02 +0000
Files and hashes:         1: 3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa (hash: WsTtMt0X/SJD6CTdaFGhTvY4/kj2XHQQKpNsWc7807o=)
                          2: 323830343a333736633a3a2f33322d3336203d3e20323636343133.roa (hash: +7l4HFk4XuOPLO2qbs6Vy2q/uZFeBKNhmY4IvR5+9fE=)
                          3: 76BC8672B6C71CBFC423D1106E72877D60284FD6.crl (hash: xIUIYDw0uR5p89fD8Htf68tWuHLAmW0rWr9OF/IPPHQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:89:20:27:40:c2:2a:ba:0d:1f:f5:a5:c8:30:9c:ab:ff:5c:10:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  5 12:16:02 2024 GMT
            Not After : Jul  6 14:30:02 2024 GMT
        Subject: CN=21F9D193FA2B4FE6EBF101C176C808BCD7C7C0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:ba:af:52:34:4c:ae:09:c9:08:32:3d:22:
                    3f:ee:a6:e8:35:bd:ae:7f:b7:08:bb:97:a7:07:58:
                    fc:ac:11:23:eb:65:1c:e7:96:a8:74:58:e9:91:81:
                    c3:b9:c2:45:ad:42:e1:11:d6:ff:1e:08:4d:2f:1b:
                    28:8f:a1:e2:a3:8f:b7:23:fc:3e:9e:6b:ec:0d:3e:
                    67:8b:08:55:32:88:9d:ef:c8:61:f6:be:8a:fb:23:
                    43:f0:14:89:97:a3:1e:13:e0:6e:99:55:36:36:fd:
                    cf:11:60:02:02:a6:c5:40:f6:80:6b:e2:0e:28:bb:
                    26:2a:45:04:23:39:7d:20:e2:87:58:57:e0:44:50:
                    6c:ce:c6:b5:45:15:d9:32:73:e5:f4:d5:9a:88:d3:
                    04:42:e4:33:7d:61:08:e4:6f:7c:c5:8a:fe:5b:ba:
                    c4:6c:4b:d0:96:5c:cc:67:e7:91:f1:2e:03:7a:90:
                    64:bf:3b:ec:b3:35:97:9a:13:82:cf:56:76:fe:49:
                    34:24:33:2b:dc:f0:72:e8:26:75:47:45:d1:dc:c3:
                    a5:b3:db:ac:3f:e5:4c:cc:a1:6c:42:82:23:16:6f:
                    78:e1:b6:3d:30:97:cb:7d:1c:c2:d8:9e:10:01:59:
                    9d:38:9c:b4:d5:3f:36:a1:67:97:e0:fe:70:27:4f:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F9:D1:93:FA:2B:4F:E6:EB:F1:01:C1:76:C8:08:BC:D7:C7:C0:CC
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:2a:65:7d:87:fb:07:16:ca:22:71:1a:e1:7a:73:9c:80:
         5b:74:4c:a7:2b:4e:b0:be:15:e2:1e:d6:34:bc:f1:94:ea:91:
         7d:1e:d3:b7:8c:f2:fa:bf:57:cb:f3:b6:eb:00:d2:a2:92:e1:
         f9:d9:55:dd:7f:0e:54:36:6e:2e:4a:17:19:3f:8f:de:70:be:
         64:c2:84:52:9a:28:41:dd:65:fa:d2:63:79:ea:d1:20:f3:34:
         78:c5:75:02:40:95:ab:62:2e:7c:c8:11:71:e7:aa:97:09:4c:
         51:10:f5:ab:52:1f:23:bc:b3:b8:64:12:74:f2:88:ff:f3:0a:
         9b:64:f0:0a:89:73:3e:3e:9e:d5:ae:1f:61:8f:50:ec:45:0f:
         97:c0:ae:bc:0b:80:cf:4a:af:59:17:d5:e4:c5:c2:7b:37:73:
         96:58:96:6f:65:51:d1:6e:68:89:df:33:5e:d9:4d:e5:d6:40:
         66:04:3b:35:4d:59:c2:03:71:ca:ab:c6:a4:64:6f:f3:a6:f6:
         f7:c9:50:c2:80:4f:71:0a:ed:9b:08:29:99:6b:84:08:83:6d:
         6b:f6:bb:8d:1f:dd:11:f3:c6:f3:35:76:0d:41:fb:2b:91:d7:
         26:ec:c4:e9:85:0b:d6:2e:51:41:13:c5:60:93:4d:bc:02:b7:
         3c:fd:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 03:06:16 2024 by rpki-client on console.sobornost.net