Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/2/FB86541E9DFA56DDD683917C91A062EE3769DDFA.mft
File:                     FB86541E9DFA56DDD683917C91A062EE3769DDFA.mft (raw, json)
Hash identifier:          C+7GJpmuZNYVEDhStIFVMvXBbMXHLmiQIau3lqQnN88=
Subject key identifier:   7D:A0:DE:CE:3F:E4:D6:67:2A:4F:04:E3:C9:C9:28:15:69:0B:DC:66
Authority key identifier: FB:86:54:1E:9D:FA:56:DD:D6:83:91:7C:91:A0:62:EE:37:69:DD:FA
Certificate issuer:       /CN=FB86541E9DFA56DDD683917C91A062EE3769DDFA
Certificate serial:       1899CDA281CD5D1D3DA792433DD10F2E7531E459
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB86541E9DFA56DDD683917C91A062EE3769DDFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/2/FB86541E9DFA56DDD683917C91A062EE3769DDFA.mft
Manifest number:          7D
Signing time:             Fri 05 Jul 2024 16:43:51 +0000
Manifest this update:     Fri 05 Jul 2024 16:38:51 +0000
Manifest next update:     Sat 06 Jul 2024 17:56:51 +0000
Files and hashes:         1: 34352e352e3231322e302f32322d3234203d3e20323636313031.roa (hash: 8MSL2w1CrJ+ZvDZHQK4c52AOlqgOK+WnzNdAQIh5fnQ=)
                          2: FB86541E9DFA56DDD683917C91A062EE3769DDFA.crl (hash: gMRpSsAba1Ku9GvHF5WBCBRhUTwC+au1zWuVfsWG9TA=)
                          3: 323830343a336161343a3a2f33322d3436203d3e20323636313031.roa (hash: f8vBBA6DlTA1Vzm/IsOMOkAEYFIqvtvBb1FvB79DR1Y=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:99:cd:a2:81:cd:5d:1d:3d:a7:92:43:3d:d1:0f:2e:75:31:e4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB86541E9DFA56DDD683917C91A062EE3769DDFA
        Validity
            Not Before: Jul  5 16:38:51 2024 GMT
            Not After : Jul  6 17:56:51 2024 GMT
        Subject: CN=7DA0DECE3FE4D6672A4F04E3C9C92815690BDC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:df:b1:0b:31:5a:fd:f1:47:5d:78:9b:08:
                    d7:57:2e:68:34:76:67:40:b3:8e:a7:40:c5:9d:bb:
                    20:0b:6c:4a:98:ae:aa:33:60:a8:7d:28:51:14:bc:
                    55:0a:07:af:49:9d:5f:92:16:2c:f8:44:d4:05:86:
                    86:a1:2b:43:d0:52:83:5e:5b:11:a0:56:2b:7a:12:
                    bc:8f:f7:9b:0e:bb:60:be:08:4e:9d:e5:6d:3c:97:
                    e2:6a:94:9d:a2:01:c4:5e:d9:61:5a:e1:ec:70:9b:
                    8b:aa:3e:ef:fc:97:c5:a2:bb:fc:2f:fc:95:60:39:
                    b2:9a:08:d6:d1:de:b1:4a:d9:0f:b6:e2:2a:5a:cd:
                    86:99:9a:06:22:06:d2:ea:33:40:13:16:a1:d5:41:
                    b5:9c:3a:9c:c0:20:15:db:7e:1a:87:2c:e9:75:4f:
                    23:84:3e:fd:8e:5b:17:f7:67:58:f5:fe:23:08:5d:
                    96:d1:72:55:a4:d4:71:f0:4e:32:b3:47:84:b6:b3:
                    c8:80:e1:4f:a7:7c:ab:ae:50:3b:2b:85:59:02:65:
                    d6:80:d5:6b:13:b9:32:0c:b2:cc:48:0a:6f:1a:c8:
                    ae:fa:96:9f:78:2d:d9:c8:42:d6:42:f4:58:d7:06:
                    72:61:7f:3d:83:94:7a:b7:95:53:c4:c5:92:1e:fe:
                    f5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A0:DE:CE:3F:E4:D6:67:2A:4F:04:E3:C9:C9:28:15:69:0B:DC:66
            X509v3 Authority Key Identifier:
                keyid:FB:86:54:1E:9D:FA:56:DD:D6:83:91:7C:91:A0:62:EE:37:69:DD:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/2/FB86541E9DFA56DDD683917C91A062EE3769DDFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB86541E9DFA56DDD683917C91A062EE3769DDFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/2/FB86541E9DFA56DDD683917C91A062EE3769DDFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:02:76:e0:8c:16:bb:92:66:67:13:c7:8d:2d:0b:f4:07:
         fd:5b:c9:93:fe:44:31:df:4f:93:61:5d:0a:1c:92:ed:f4:b4:
         4b:bd:39:57:46:42:95:39:51:56:01:94:bb:de:ff:d6:9a:c6:
         fd:f9:e1:7c:50:d4:fb:1c:ca:be:21:17:40:b2:b6:5c:7a:f6:
         cc:c8:67:0d:ee:d1:f1:14:7e:f5:6c:2f:9d:f0:71:e9:cc:af:
         26:d4:bc:19:b0:ad:0a:1b:a6:2b:7f:1c:69:23:6d:77:3a:3e:
         04:fd:5f:85:ee:6b:70:f9:dc:b5:88:f6:ba:60:34:29:d6:0e:
         67:34:5f:bb:08:75:c8:e0:f8:8a:3a:b5:7f:0b:b0:01:31:7a:
         b4:09:da:ce:eb:e9:ba:26:4d:bf:b9:08:8b:45:59:bc:ad:9c:
         fa:92:2d:07:f7:ce:91:54:e7:69:a9:dd:73:bc:f8:ed:83:ec:
         ed:db:59:dc:de:c9:f3:5f:f4:e5:96:47:d1:40:1f:96:2d:a8:
         67:6e:d4:9f:e0:ce:93:97:f3:14:66:b1:a1:04:25:00:b5:36:
         82:fd:57:97:af:08:bd:14:7f:0c:dc:43:e0:8c:6b:c0:db:6a:
         97:42:b4:30:84:3a:43:0f:06:31:39:2a:62:e0:16:b5:53:a9:
         fc:47:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 03:06:25 2024 by rpki-client on console.sobornost.net