Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.mft
File:                     9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.mft (raw, json)
Hash identifier:          4Rl84rBvJrg58RWDbvS7V4Of3xA92omEaxFMWEQNUM0=
Subject key identifier:   29:EE:E6:42:E3:B3:55:DE:AA:7A:CD:8D:EF:FB:F9:79:90:43:17:9D
Authority key identifier: 9B:0C:F4:B4:03:A0:2A:A9:15:DE:B2:A8:21:B7:60:D4:F7:AD:15:55
Certificate issuer:       /CN=9B0CF4B403A02AA915DEB2A821B760D4F7AD1555
Certificate serial:       11A26130CECB76EC00E7A457D90B7C2A93B83219
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.mft
Manifest number:          08
Signing time:             Fri 05 Jul 2024 12:04:59 +0000
Manifest this update:     Fri 05 Jul 2024 11:59:59 +0000
Manifest next update:     Sat 06 Jul 2024 15:12:59 +0000
Files and hashes:         1: 323830343a353030343a3a2f33322d3336203d3e20323638333634.roa (hash: ngmbtPndHd25AAXqeaOPCZ+20JSUTElxUrimTTePaYY=)
                          2: 9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.crl (hash: XhltQ90MrVBlKyR2SuSgzmQd6xDqLCGhBP492c6RSxo=)
                          3: 34352e3233382e3234302e302f32322d3238203d3e20323638333634.roa (hash: LCQEude20e5hYQuce9J/mYp/Qbg5aWjnF0tDcco2LtM=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a2:61:30:ce:cb:76:ec:00:e7:a4:57:d9:0b:7c:2a:93:b8:32:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B0CF4B403A02AA915DEB2A821B760D4F7AD1555
        Validity
            Not Before: Jul  5 11:59:59 2024 GMT
            Not After : Jul  6 15:12:59 2024 GMT
        Subject: CN=29EEE642E3B355DEAA7ACD8DEFFBF9799043179D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:2c:95:22:f4:b1:13:c5:6c:e3:e9:88:a0:
                    d9:1a:da:06:8b:51:d8:2d:a4:10:de:36:f3:9c:a8:
                    66:f9:97:8a:58:0b:b5:67:7e:9c:67:19:8f:db:16:
                    a7:e0:f5:7e:99:0c:d9:c1:95:17:52:53:63:e9:c2:
                    68:9b:0a:5e:62:c4:3a:4b:d6:e6:92:02:d3:15:4e:
                    ec:5b:42:38:c6:21:e2:20:0b:d8:c1:c6:e3:30:9e:
                    80:98:36:bb:b5:68:43:90:8d:77:db:35:51:f5:f7:
                    6b:53:2a:43:b0:fc:45:11:d1:13:35:ac:0d:9d:0b:
                    8a:6b:89:79:d7:28:4c:a6:df:11:ad:8c:6c:08:77:
                    a1:2a:73:1d:9b:c1:1a:38:bf:75:3f:a9:f4:8e:1f:
                    a3:ad:28:c6:9f:fa:cd:ce:4d:f6:b9:ac:33:f0:82:
                    8e:ad:f4:ca:d1:f2:9e:bc:78:4d:ce:2f:58:b2:78:
                    53:6b:4f:10:f9:ec:bd:ed:7b:43:9d:fe:0a:4f:aa:
                    20:69:90:2e:62:70:d1:c8:c7:d1:70:91:e9:49:39:
                    31:d8:be:3a:64:2f:15:5b:d8:e0:49:a7:4d:8c:17:
                    ad:5c:58:eb:90:4e:00:4d:5a:8d:3d:bf:81:aa:4c:
                    e4:e1:ba:08:89:33:2c:51:67:df:37:42:ba:20:72:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:E6:42:E3:B3:55:DE:AA:7A:CD:8D:EF:FB:F9:79:90:43:17:9D
            X509v3 Authority Key Identifier:
                keyid:9B:0C:F4:B4:03:A0:2A:A9:15:DE:B2:A8:21:B7:60:D4:F7:AD:15:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:cb:45:b5:3a:86:14:51:65:ad:0b:01:b7:af:13:75:76:e6:
         09:ff:52:c6:3a:11:b4:d9:27:4c:24:29:aa:19:17:c9:93:df:
         01:fd:f6:2e:b9:da:02:f4:0c:ba:99:b5:3f:34:dd:a0:48:4c:
         dd:93:8e:ac:bc:b7:a0:92:e1:e1:78:da:3a:2a:c0:6b:a9:b5:
         ac:fd:90:4e:80:83:ff:24:38:ec:09:c5:63:5e:6f:b0:f2:1e:
         95:7c:52:ec:71:6a:0d:f2:c3:74:0e:40:d0:38:24:d4:2a:1e:
         4a:d5:0d:4b:89:68:95:69:96:00:df:8e:45:ff:69:0f:3b:95:
         dd:08:95:4c:db:e5:60:5a:12:dd:6d:87:1d:fb:ce:2a:4f:25:
         16:6d:89:f9:c1:33:26:de:76:c4:80:78:4e:a5:26:d9:40:4b:
         93:12:fe:f4:28:e9:06:81:dc:e5:59:02:7a:d3:1b:23:49:ba:
         40:72:ca:96:88:4f:8f:64:17:f2:0a:dd:92:9b:15:3b:48:33:
         97:49:d7:1a:8a:ff:7c:eb:01:0b:06:4e:08:37:ed:0b:a9:93:
         49:ca:31:b6:9a:a2:ed:59:cf:83:1e:7d:45:e7:da:6e:3f:5d:
         cc:39:49:32:a7:ce:99:ae:45:49:fd:7f:26:71:5d:97:81:50:
         04:f1:4d:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEaJhMM7LduwA56RX2Qt8KpO4MhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIwQ0Y0QjQwM0EwMkFBOTE1REVCMkE4MjFCNzYwRDRG
N0FEMTU1NTAeFw0yNDA3MDUxMTU5NTlaFw0yNDA3MDYxNTEyNTlaMDMxMTAvBgNV
BAMTKDI5RUVFNjQyRTNCMzU1REVBQTdBQ0Q4REVGRkJGOTc5OTA0MzE3OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnyyVIvSxE8Vs4+mIoNka2gaL
UdgtpBDeNvOcqGb5l4pYC7VnfpxnGY/bFqfg9X6ZDNnBlRdSU2PpwmibCl5ixDpL
1uaSAtMVTuxbQjjGIeIgC9jBxuMwnoCYNru1aEOQjXfbNVH192tTKkOw/EUR0RM1
rA2dC4priXnXKEym3xGtjGwId6Eqcx2bwRo4v3U/qfSOH6OtKMaf+s3OTfa5rDPw
go6t9MrR8p68eE3OL1iyeFNrTxD57L3te0Od/gpPqiBpkC5icNHIx9FwkelJOTHY
vjpkLxVb2OBJp02MF61cWOuQTgBNWo09v4GqTOThugiJMyxRZ983QrogcmJ9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKe7mQuOzVd6qes2N7/v5eZBDF50wHwYDVR0j
BBgwFoAUmwz0tAOgKqkV3rKoIbdg1PetFVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFoRTdpeHB1dEZOa3o3VGlrTmlMZXFuV2NTRW5pb0VpR0pTa3dIWTNa
QkwvMC85QjBDRjRCNDAzQTAyQUE5MTVERUIyQTgyMUI3NjBENEY3QUQxNTU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCMENGNEI0MDNBMDJBQTkx
NURFQjJBODIxQjc2MEQ0RjdBRDE1NTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDFoRTdpeHB1dEZOa3o3VGlrTmlMZXFuV2NTRW5pb0VpR0pTa3dIWTNaQkwvMC85
QjBDRjRCNDAzQTAyQUE5MTVERUIyQTgyMUI3NjBENEY3QUQxNTU1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApMtFtTqGFFFlrQsBt68TdXbmCf9SxjoRtNknTCQpqhkXyZPfAf32LrnaAvQM
upm1PzTdoEhM3ZOOrLy3oJLh4XjaOirAa6m1rP2QToCD/yQ47AnFY15vsPIelXxS
7HFqDfLDdA5A0Dgk1CoeStUNS4lolWmWAN+ORf9pDzuV3QiVTNvlYFoS3W2HHfvO
Kk8lFm2J+cEzJt52xIB4TqUm2UBLkxL+9CjpBoHc5VkCetMbI0m6QHLKlohPj2QX
8grdkpsVO0gzl0nXGor/fOsBCwZOCDftC6mTScoxtpqi7VnPgx59Refabj9dzDlJ
MqfOma5FSf1/JnFdl4FQBPFNmQ==
-----END CERTIFICATE-----
Generated at Tue Jul 9 03:07:13 2024 by rpki-client on console.sobornost.net