Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.mft
File:                     F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.mft (raw, json)
Hash identifier:          Xk77ENGit5qPd1cNWZqtPN7xLl0Y08X0+hEZ8aZYtUY=
Subject key identifier:   41:4B:CC:09:F3:C3:6F:5A:ED:C1:CB:FA:95:2B:C1:E9:09:57:40:94
Authority key identifier: F1:6C:AE:28:A9:DF:35:33:B6:F7:5C:D0:6E:A0:51:62:AA:08:D7:B2
Certificate issuer:       /CN=F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2
Certificate serial:       3A998E19FFC67B57200877D917A6AB09BF2B333F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.mft
Manifest number:          04
Signing time:             Fri 05 Jul 2024 12:21:03 +0000
Manifest this update:     Fri 05 Jul 2024 12:16:03 +0000
Manifest next update:     Sat 06 Jul 2024 15:52:03 +0000
Files and hashes:         1: 34352e3137392e36382e302f32322d3234203d3e20323639313039.roa (hash: cyZInocPHNhzF3rd82/7MNs0xbF0E5STLv2RY6dAUt8=)
                          2: 323830343a356639303a3a2f33322d3336203d3e20323639313039.roa (hash: FZJXAhFbaEonWJ76McqeaxHgrqQZxxQt1o7lVj2fzYA=)
                          3: F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.crl (hash: GcJwd+Yxu0sEWSSliuq/wj4f73DaeZgN+PVxlTdOXR4=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:99:8e:19:ff:c6:7b:57:20:08:77:d9:17:a6:ab:09:bf:2b:33:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2
        Validity
            Not Before: Jul  5 12:16:03 2024 GMT
            Not After : Jul  6 15:52:03 2024 GMT
        Subject: CN=414BCC09F3C36F5AEDC1CBFA952BC1E909574094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:51:d7:b0:e2:1f:e1:36:4e:d0:55:e2:0a:
                    74:8c:15:29:50:ec:f8:6f:fa:27:70:9b:f3:b2:70:
                    be:3c:b9:83:08:cb:62:27:a0:b4:2c:db:ee:66:62:
                    1e:c6:eb:53:92:ff:d4:84:9a:7e:31:6d:d1:cd:44:
                    e2:ad:b4:17:d3:6c:77:96:51:ab:8a:19:18:53:37:
                    4a:ee:9b:73:08:ad:d5:3c:a2:68:61:36:5b:6a:40:
                    7f:e4:2a:b7:ab:f6:4e:ba:35:41:51:e0:bb:c4:a8:
                    4a:0f:a8:3f:e8:29:e4:fc:8d:0a:3a:40:f3:2c:41:
                    74:05:51:a7:2f:8f:97:ce:a3:76:07:cb:13:ec:1e:
                    f2:dd:15:e0:14:ad:3c:4e:62:2d:c8:cd:d6:69:54:
                    d4:cb:89:16:72:fd:20:ce:8a:f5:f8:c4:7d:3c:58:
                    b7:f0:bf:4e:5e:f4:ab:4d:ff:a7:10:75:2f:71:23:
                    40:b7:22:72:84:e2:49:7f:77:13:f7:e8:a1:7d:85:
                    74:97:28:39:7f:18:03:c3:e5:03:8d:54:a2:58:f7:
                    6c:67:80:f5:4a:6e:9b:d7:cd:ec:e7:0a:84:89:63:
                    35:c1:e5:53:d7:21:9e:22:3d:1a:83:b5:8e:96:9c:
                    11:97:38:35:bf:b9:ee:84:e8:e1:77:7e:af:86:e9:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4B:CC:09:F3:C3:6F:5A:ED:C1:CB:FA:95:2B:C1:E9:09:57:40:94
            X509v3 Authority Key Identifier:
                keyid:F1:6C:AE:28:A9:DF:35:33:B6:F7:5C:D0:6E:A0:51:62:AA:08:D7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:a8:20:75:a8:41:1a:c8:3f:d3:39:f1:a3:84:07:52:34:
         bc:30:71:56:e9:2b:d3:f9:26:32:e5:33:7d:43:27:bd:f5:77:
         1b:49:06:f0:20:84:7c:fd:60:e7:bb:00:89:c3:7f:f1:76:58:
         a1:95:06:11:73:81:18:c3:d9:2d:75:18:73:8f:f6:29:b3:9d:
         71:38:bf:c6:16:c7:12:41:99:64:01:64:6e:41:cd:59:66:ac:
         e4:ed:e7:b1:a3:08:f7:51:0d:d3:01:10:10:69:f4:a3:90:19:
         11:c8:39:c1:f0:bf:53:c5:08:6f:0a:4e:a9:a7:57:da:75:8a:
         0c:0d:d2:b4:56:e8:37:c7:b8:58:87:86:9c:0d:92:5b:35:b2:
         a1:80:f2:41:98:43:03:e7:ba:75:ba:19:25:00:3c:d7:c7:da:
         dd:78:66:d7:a1:49:d0:e5:23:87:d3:59:b4:b7:f3:8b:a5:e1:
         66:1d:44:2c:ee:6b:25:fc:a8:c8:8e:41:0d:c1:b9:d0:bb:41:
         08:81:f4:77:26:42:48:d9:0d:e5:cd:72:9e:b8:0f:cf:11:57:
         47:a4:ce:a6:5c:fd:ca:1c:f9:2a:59:f7:3b:c2:32:05:98:9c:
         20:9d:24:e4:d1:18:97:22:a7:cb:c1:e7:ec:38:69:64:36:aa:
         1b:35:da:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOpmOGf/Ge1cgCHfZF6arCb8rMz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2Q0FFMjhBOURGMzUzM0I2Rjc1Q0QwNkVBMDUxNjJB
QTA4RDdCMjAeFw0yNDA3MDUxMjE2MDNaFw0yNDA3MDYxNTUyMDNaMDMxMTAvBgNV
BAMTKDQxNEJDQzA5RjNDMzZGNUFFREMxQ0JGQTk1MkJDMUU5MDk1NzQwOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPlHXsOIf4TZO0FXiCnSMFSlQ
7Phv+idwm/OycL48uYMIy2InoLQs2+5mYh7G61OS/9SEmn4xbdHNROKttBfTbHeW
UauKGRhTN0rum3MIrdU8omhhNltqQH/kKrer9k66NUFR4LvEqEoPqD/oKeT8jQo6
QPMsQXQFUacvj5fOo3YHyxPsHvLdFeAUrTxOYi3IzdZpVNTLiRZy/SDOivX4xH08
WLfwv05e9KtN/6cQdS9xI0C3InKE4kl/dxP36KF9hXSXKDl/GAPD5QONVKJY92xn
gPVKbpvXzeznCoSJYzXB5VPXIZ4iPRqDtY6WnBGXODW/ue6E6OF3fq+G6XJDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQUvMCfPDb1rtwcv6lSvB6QlXQJQwHwYDVR0j
BBgwFoAU8WyuKKnfNTO291zQbqBRYqoI17IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3Rnox
ZFQvMC9GMTZDQUUyOEE5REYzNTMzQjZGNzVDRDA2RUEwNTE2MkFBMDhEN0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxNkNBRTI4QTlERjM1MzNC
NkY3NUNEMDZFQTA1MTYyQUEwOEQ3QjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3RnoxZFQvMC9G
MTZDQUUyOEE5REYzNTMzQjZGNzVDRDA2RUEwNTE2MkFBMDhEN0IyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoCWoIHWoQRrIP9M58aOEB1I0vDBxVukr0/kmMuUzfUMnvfV3G0kG8CCEfP1g
57sAicN/8XZYoZUGEXOBGMPZLXUYc4/2KbOdcTi/xhbHEkGZZAFkbkHNWWas5O3n
saMI91EN0wEQEGn0o5AZEcg5wfC/U8UIbwpOqadX2nWKDA3StFboN8e4WIeGnA2S
WzWyoYDyQZhDA+e6dboZJQA818fa3Xhm16FJ0OUjh9NZtLfzi6XhZh1ELO5rJfyo
yI5BDcG50LtBCIH0dyZCSNkN5c1ynrgPzxFXR6TOplz9yhz5Kln3O8IyBZicIJ0k
5NEYlyKny8Hn7DhpZDaqGzXaXQ==
-----END CERTIFICATE-----