Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/2AF85BAFD4434B24FA2D29805168A6F9CE782B72.mft
File:                     2AF85BAFD4434B24FA2D29805168A6F9CE782B72.mft (raw, json)
Hash identifier:          EidAaz5+R3F+rwuYbUuMLCAZ0KpgGSuqlNTuX7qGizw=
Subject key identifier:   5D:CD:0A:6C:52:15:E5:60:A7:0A:4E:ED:B2:7B:3B:83:7B:95:B0:1E
Authority key identifier: 2A:F8:5B:AF:D4:43:4B:24:FA:2D:29:80:51:68:A6:F9:CE:78:2B:72
Certificate issuer:       /CN=2AF85BAFD4434B24FA2D29805168A6F9CE782B72
Certificate serial:       57FA00F8C0836310DA1DBD078C1B0A49A1853266
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AF85BAFD4434B24FA2D29805168A6F9CE782B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/2AF85BAFD4434B24FA2D29805168A6F9CE782B72.mft
Manifest number:          38
Signing time:             Mon 25 Sep 2023 07:20:10 +0000
Manifest this update:     Mon 25 Sep 2023 07:15:10 +0000
Manifest next update:     Tue 26 Sep 2023 10:34:10 +0000
Files and hashes:         1: 3137302e38332e38382e302f32322d3332203d3e20323636343831.roa (hash: 1Dfv1HWGyeGFIbE6i02HVCAb3SlxocQzum1QdMi0e0Q=)
                          2: 323830343a333837633a3a2f33322d313238203d3e20323636343831.roa (hash: ReNng1+icx4kcKTRP0vti+K3xCtRRdADCgFtuZoBCtU=)
                          3: 2AF85BAFD4434B24FA2D29805168A6F9CE782B72.crl (hash: HYq87hhJ+tQfo4pBpnaxd0pOlukC3JdURai/rJ1gJ7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fa:00:f8:c0:83:63:10:da:1d:bd:07:8c:1b:0a:49:a1:85:32:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AF85BAFD4434B24FA2D29805168A6F9CE782B72
        Validity
            Not Before: Sep 25 07:15:10 2023 GMT
            Not After : Sep 26 10:34:10 2023 GMT
        Subject: CN=5DCD0A6C5215E560A70A4EEDB27B3B837B95B01E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:3b:42:57:e3:61:7f:32:6b:cd:69:09:b4:
                    39:f1:e8:3f:e0:52:5e:95:57:28:de:23:a7:34:2f:
                    dc:5f:5a:91:93:7d:4b:cf:27:0e:5f:92:a8:d4:fd:
                    c0:43:b3:16:5b:df:80:59:4b:4b:03:5e:aa:63:74:
                    12:30:c8:54:78:6c:c0:91:9a:75:d0:1e:d7:27:4f:
                    4e:fb:70:87:05:9e:56:cc:66:2e:6f:be:27:3b:42:
                    59:cb:fc:5e:83:03:15:ce:c0:cc:7f:f9:61:ee:72:
                    b4:a4:b7:5b:13:f4:2c:3d:ba:e6:10:7c:f0:77:00:
                    54:cf:f3:91:33:0d:e5:e6:dc:89:cf:25:4a:01:5f:
                    13:7b:6e:9c:02:6b:18:10:4d:7f:1d:37:16:a3:d4:
                    6f:23:e5:01:27:51:a9:23:83:09:be:fd:c8:ca:7a:
                    fe:a5:5f:04:f1:d0:24:17:bc:ba:aa:76:74:17:66:
                    af:52:fd:0d:a6:c6:38:43:f5:e3:d1:26:86:37:28:
                    c9:ea:7b:96:7a:f5:09:b7:67:a8:d5:7e:cb:19:b9:
                    58:cd:26:7b:e7:23:30:d6:06:fa:35:7c:74:d2:72:
                    82:e5:fa:d8:35:17:58:a9:df:3c:9f:19:5b:90:c0:
                    ee:ed:3c:e2:e3:9c:a6:a9:f3:1d:b3:74:be:c3:23:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CD:0A:6C:52:15:E5:60:A7:0A:4E:ED:B2:7B:3B:83:7B:95:B0:1E
            X509v3 Authority Key Identifier:
                keyid:2A:F8:5B:AF:D4:43:4B:24:FA:2D:29:80:51:68:A6:F9:CE:78:2B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/2AF85BAFD4434B24FA2D29805168A6F9CE782B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AF85BAFD4434B24FA2D29805168A6F9CE782B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/2AF85BAFD4434B24FA2D29805168A6F9CE782B72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e4:60:c7:d7:d6:29:44:56:dc:e8:40:7a:19:23:d6:8f:08:
         ea:44:fd:06:d7:8e:dd:31:53:de:b4:b3:e9:dd:70:d9:da:52:
         41:06:63:cb:b7:d4:a8:ec:c2:ab:04:7c:8e:59:1f:2f:e9:cf:
         93:8a:63:8c:cc:f1:f3:ce:69:1d:d1:5b:fd:fc:c8:11:d0:2b:
         86:1f:f3:21:7e:fb:90:81:d7:5d:98:9e:c1:26:50:e1:39:e0:
         87:b6:2c:e8:1f:ab:cc:61:b7:05:da:cc:cf:9e:83:6b:6b:d5:
         85:55:55:f1:52:bb:19:fa:5b:23:db:29:de:12:6e:df:c0:55:
         04:41:f8:f6:83:4e:3f:0d:75:32:55:ce:ac:9b:1a:ca:e7:d5:
         a6:7a:61:b3:5c:91:85:63:f8:ba:bb:ed:87:3a:1c:aa:75:be:
         c9:7b:93:5a:c7:93:c4:a4:da:53:6e:79:4a:80:43:75:ae:fb:
         03:38:fb:cc:9a:0c:f3:5f:bb:ad:a4:be:e0:1e:17:90:c1:e8:
         76:94:2d:3e:2f:95:0b:98:af:a9:56:05:ee:82:7b:d3:9f:17:
         96:a4:6b:c9:c2:18:5c:6c:11:72:74:b5:2a:7f:1a:39:a6:29:
         04:61:31:b7:74:c8:90:fd:8c:c2:99:0f:b1:79:51:9c:cd:77:
         dc:1e:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----