Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.mft
File:                     B29355F34D84FEFB940F79B0B63F241ED834BDD3.mft (raw, json)
Hash identifier:          G8QFvsHaA/rXMzzCLPpTYESnaD5XHB+vRa6mb9okJBg=
Subject key identifier:   55:9D:E9:7E:64:89:1F:DF:A3:3F:17:D1:13:D1:47:F7:52:87:58:32
Authority key identifier: B2:93:55:F3:4D:84:FE:FB:94:0F:79:B0:B6:3F:24:1E:D8:34:BD:D3
Certificate issuer:       /CN=B29355F34D84FEFB940F79B0B63F241ED834BDD3
Certificate serial:       257570D463252A9AEFC57BD94F51B66CF4D6E2C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.mft
Manifest number:          0110
Signing time:             Tue 09 Jan 2024 06:00:24 +0000
Manifest this update:     Tue 09 Jan 2024 05:55:24 +0000
Manifest next update:     Wed 10 Jan 2024 09:27:24 +0000
Files and hashes:         1: 3230312e372e3231322e302f32322d3234203d3e203631363937.roa (hash: r0rT2kPqAcmUoRoh2FRAPWeQZEQ28a/9RyF38H8RrtI=)
                          2: B29355F34D84FEFB940F79B0B63F241ED834BDD3.crl (hash: f7T60nCfgBHBGZ2sduH5vptaUxOd+2Y/IdXP3zqpEWU=)
                          3: 323830343a316165343a3a2f33322d3334203d3e203631363937.roa (hash: MMh2bCQfdUahMO/5GfeZs4gvRMm+X4GUraNnpmcDyYs=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:75:70:d4:63:25:2a:9a:ef:c5:7b:d9:4f:51:b6:6c:f4:d6:e2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29355F34D84FEFB940F79B0B63F241ED834BDD3
        Validity
            Not Before: Jan  9 05:55:24 2024 GMT
            Not After : Jan 10 09:27:24 2024 GMT
        Subject: CN=559DE97E64891FDFA33F17D113D147F752875832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:22:d6:41:18:2a:0a:3e:a4:a0:dc:fb:39:
                    65:e5:52:a3:02:d5:33:80:b9:74:99:58:af:ab:3c:
                    32:09:c5:eb:0e:a3:90:d8:e4:d7:2a:0e:aa:c7:88:
                    d0:5a:0b:e5:bf:1c:78:95:72:52:0a:44:19:2b:a0:
                    a2:bc:c3:bd:bb:09:34:b7:0c:1b:77:ee:1d:83:6b:
                    7f:cc:da:b4:dc:ce:f1:23:94:7d:c4:11:4d:77:85:
                    44:2e:46:a4:7e:b2:c6:24:e8:22:ec:fb:03:d9:4e:
                    a1:4f:70:f8:32:ef:d8:55:6c:da:e2:54:6c:b7:3d:
                    4e:33:b8:17:f5:ee:7d:7e:34:77:76:ac:8b:88:86:
                    27:e4:5b:8b:fb:0e:90:15:39:50:60:b7:08:81:cc:
                    ba:0c:28:e0:fd:01:94:06:20:3d:2d:85:b7:ca:89:
                    80:a1:d5:b5:a6:42:0c:ca:63:8f:40:c5:c3:b5:24:
                    cf:6f:3d:09:d5:da:6c:78:a2:0a:8f:4b:44:ac:13:
                    b6:11:e0:af:2e:c0:34:3e:5b:e7:2f:19:ff:ba:36:
                    41:e9:60:36:c2:bb:a1:73:23:3b:8c:de:67:80:ab:
                    15:ae:eb:17:cb:74:2c:33:a8:17:ac:51:e7:21:5d:
                    9a:4a:11:91:43:fc:13:99:0a:59:c0:f7:7e:e6:0b:
                    f8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9D:E9:7E:64:89:1F:DF:A3:3F:17:D1:13:D1:47:F7:52:87:58:32
            X509v3 Authority Key Identifier:
                keyid:B2:93:55:F3:4D:84:FE:FB:94:0F:79:B0:B6:3F:24:1E:D8:34:BD:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9f:1d:1c:9f:68:41:40:e5:a3:59:e9:28:db:ff:f4:ec:3b:
         24:2f:1e:c9:92:f6:da:bd:db:ab:73:8d:92:f4:d3:72:e2:be:
         03:2c:ff:f4:d2:3f:12:70:d0:5d:a8:70:70:b1:59:50:86:56:
         bb:3d:e2:42:68:8f:ed:29:8d:76:e3:79:f9:41:33:25:f0:c3:
         45:aa:26:c5:b6:f3:cd:98:b9:38:8b:23:a3:76:f2:87:df:be:
         c1:30:09:d6:e5:d9:e8:13:cb:8c:b1:3a:a0:64:31:8c:6d:8d:
         4e:b9:80:b1:80:8a:92:45:7d:4e:5a:23:60:53:0e:4a:ac:23:
         d3:2c:60:ee:41:28:d1:d7:88:c5:d2:c8:12:86:83:79:63:69:
         2b:d6:17:48:6c:bf:a2:fe:7b:ee:3b:be:83:55:2f:1a:31:c0:
         48:50:fc:2e:d4:ef:d3:d6:43:e8:4b:60:67:2d:eb:f3:3d:7c:
         09:b6:18:08:8b:8a:69:00:10:f9:03:d4:01:66:5d:25:7c:a5:
         29:51:6c:9e:8a:65:57:5c:25:17:c3:81:d5:67:73:df:42:4e:
         e6:da:76:5c:d8:4c:a5:34:be:af:53:07:5a:9e:c3:4c:87:7e:
         bb:54:2b:bd:d3:fd:aa:8c:96:02:16:e0:59:c6:f7:5f:9a:9f:
         b8:1e:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:58 2024 by rpki-client on console.sobornost.net