Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.mft
File:                     E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.mft (raw, json)
Hash identifier:          ms/8QBjQp+sBNSyGAM84CYyIXQ7a8MTebIa7eAyGI/g=
Subject key identifier:   66:48:8A:51:C3:96:1B:E5:8C:B1:3B:76:F5:E2:F0:C1:08:30:8E:1F
Authority key identifier: E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9
Certificate issuer:       /CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
Certificate serial:       5B619BD8D80632FC0C65DC0CA1309121D9B24B67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.mft
Manifest number:          4F
Signing time:             Tue 09 Jan 2024 12:40:32 +0000
Manifest this update:     Tue 09 Jan 2024 12:35:32 +0000
Manifest next update:     Wed 10 Jan 2024 16:24:32 +0000
Files and hashes:         1: 3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (hash: IE8IX4JFBa3F1VkT5igv4SwLmFw6k06OrmNbz5PcpVo=)
                          2: 3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa (hash: eiUm7OUnih7Y7KC6OQGQAmMsliauBIi9Sv7mIhjzq2s=)
                          3: 3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (hash: fLkTzX6LPp/a/Cp7cOU635Ykj02ThVMS24AQpCCOaOA=)
                          4: 323830343a6636383a3a2f33322d3332203d3e20323633353834.roa (hash: Lot6O1/NaIjzgwTfvFkdk2Lb9JtFlOk7eEr2BiP8Wik=)
                          5: 3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa (hash: 7CkazhlaCGzDyH7kZkkd8dFqDU7DdsLLwYcxfwY+c6U=)
                          6: E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.crl (hash: t7U6G8QNMMSMeywrQsXw1HXm7lJ/KkTZFvqOzcUNpJ4=)
                          7: 3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa (hash: keDWQUMCznNaBEUODEwriXz4X05lfhB7zGShNOhDP+M=)
                          8: 3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa (hash: vPWuHCepQ3gN4suTtmVYEkB1XqHhz50JuETdZLGtG/s=)
                          9: 3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa (hash: MZ/BexGIgNQShiNyw2BP9vczTLTSR0joOjYpRhvdybQ=)
                          10: 3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa (hash: Ro3jQ4BiUXjpB+jmw5dB0RXXhALpIJYPEf+4eU6jDXQ=)
                          11: 3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (hash: 58AwzwiBNObCgU44t98tNJSdXTDew9garF5uYR1k5xU=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:61:9b:d8:d8:06:32:fc:0c:65:dc:0c:a1:30:91:21:d9:b2:4b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
        Validity
            Not Before: Jan  9 12:35:32 2024 GMT
            Not After : Jan 10 16:24:32 2024 GMT
        Subject: CN=66488A51C3961BE58CB13B76F5E2F0C108308E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:59:57:3b:08:b6:c2:c6:fa:a9:44:a0:35:22:
                    56:01:a9:35:c9:66:da:34:ac:1d:50:98:51:7f:2e:
                    0f:36:75:5a:48:36:2c:df:b5:fd:64:9e:f4:7f:50:
                    42:23:31:4d:0f:88:81:a8:dc:6a:26:ab:25:5f:4c:
                    14:fa:bc:d3:a3:fa:8f:82:f5:04:4c:80:fe:91:24:
                    c6:8f:3a:48:0c:53:1a:b3:e8:f9:5b:ad:76:59:90:
                    90:cb:f3:50:63:68:d4:47:9d:ca:f9:0e:94:ce:ab:
                    93:d3:8b:90:6d:29:94:ed:50:20:cf:bc:20:75:24:
                    76:25:5e:2b:91:7d:f2:a3:6e:7d:7b:a4:6c:3a:b5:
                    a1:b8:22:11:94:60:fd:cb:e8:c2:a0:a4:18:96:00:
                    6e:ec:30:b2:0a:10:b9:7f:ae:2c:09:dd:3e:48:5a:
                    2a:37:80:b5:36:6f:da:c1:af:1a:48:41:71:31:f8:
                    94:7f:cb:46:04:b5:f6:09:46:4b:0d:43:e5:00:8f:
                    82:8e:e2:d0:a0:00:14:2e:9e:f9:9a:60:c2:a9:3e:
                    3f:06:78:c5:ee:ef:1b:5a:dd:4f:32:32:f0:a9:f1:
                    a1:48:f4:e0:13:0c:e1:16:2a:64:df:c1:73:d2:4b:
                    53:c5:c7:62:ad:4a:eb:bd:c0:49:29:a2:aa:64:86:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:48:8A:51:C3:96:1B:E5:8C:B1:3B:76:F5:E2:F0:C1:08:30:8E:1F
            X509v3 Authority Key Identifier:
                keyid:E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:60:09:f6:4b:34:1e:a6:4b:0b:97:32:93:04:cd:c6:41:3a:
         25:64:05:d7:fe:96:7b:e9:da:31:b1:de:32:05:98:42:54:96:
         11:d1:3c:b6:cc:72:47:4b:99:bb:d3:75:73:ce:f6:9a:8f:eb:
         9e:59:f1:3a:7c:d6:cb:0f:0c:ef:53:37:0f:af:d2:29:4a:b7:
         ac:56:45:ba:03:62:b0:2e:52:1f:8a:00:4e:41:a0:0b:d4:3f:
         eb:8c:53:75:be:46:9a:c9:6c:16:22:65:c3:b2:63:d8:ad:e4:
         8d:ab:53:86:4e:55:58:9d:15:1f:89:b2:16:1d:13:25:1d:46:
         3d:6f:36:7d:1f:da:48:97:3a:29:61:9f:26:6f:b9:47:07:39:
         8a:e3:ff:f2:aa:66:98:c7:4a:6a:9c:7e:95:96:fa:ed:f6:8b:
         eb:f6:63:a0:42:fd:97:7b:87:5a:97:35:9e:14:13:47:10:e3:
         31:e7:f8:1f:0d:cd:6c:97:46:62:04:1c:fe:81:2e:19:63:ed:
         30:8e:fe:d7:58:bc:ba:1f:c5:97:36:8f:81:70:63:1f:c0:11:
         40:5b:c5:1d:f8:98:05:53:e9:c2:21:24:cf:4c:48:b8:70:3d:
         9f:a7:de:4b:87:1e:a7:52:64:82:80:6d:d3:64:3b:fb:61:37:
         1c:29:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:58 2024 by rpki-client on console.sobornost.net