Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.mft
File:                     2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.mft (raw, json)
Hash identifier:          Nwab53z79k+c7F57PeNh/K3rWmZGZoS2+6RNtrWueHs=
Subject key identifier:   25:D1:3E:60:3A:E3:6E:EE:31:F9:6A:4F:FB:37:0B:D4:6A:EB:E7:C0
Authority key identifier: 2D:AF:A5:37:AE:3F:C9:D5:F3:2D:D3:B8:2D:AA:BE:64:8A:2C:70:18
Certificate issuer:       /CN=2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018
Certificate serial:       7C5678D9E0DC6AD4BA311691A6F97097C9BD7AB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.mft
Manifest number:          04
Signing time:             Fri 08 Nov 2024 20:57:04 +0000
Manifest this update:     Fri 08 Nov 2024 20:52:04 +0000
Manifest next update:     Sat 09 Nov 2024 23:34:04 +0000
Files and hashes:         1: 2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.crl (hash: IuSUWQyInoWxzVEJ/w02wtoGVlTM8I3oVJdEIYeeX7I=)
                          2: 3132382e3230312e34342e302f32322d3332203d3e20323636363136.roa (hash: bH0yCpXnj862NlzcKCkT9DZZZM76A+5/v3+BFqrOHLg=)
                          3: 323830343a336562343a3a2f33322d313238203d3e20323636363136.roa (hash: hjg67B3lTluIkLXm1Ge1+/vW7yP3YpdoBHTHL3NBPfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:56:78:d9:e0:dc:6a:d4:ba:31:16:91:a6:f9:70:97:c9:bd:7a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018
        Validity
            Not Before: Nov  8 20:52:04 2024 GMT
            Not After : Nov  9 23:34:04 2024 GMT
        Subject: CN=25D13E603AE36EEE31F96A4FFB370BD46AEBE7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:97:2b:d2:3d:31:b2:cf:64:28:c6:ca:7e:
                    11:e1:a9:60:62:27:64:cd:b5:18:ed:dd:e6:3b:68:
                    e9:3f:d7:14:e9:66:59:5a:87:7d:96:26:08:e9:c9:
                    08:38:49:83:6d:5f:63:84:75:91:4f:8d:88:42:c0:
                    e2:9e:4f:4c:05:52:ad:5a:79:20:b7:b2:ea:1d:f3:
                    45:12:c2:12:69:1f:83:8b:11:a3:5e:a5:37:cd:99:
                    bc:1a:a6:50:b0:b5:c7:ea:18:71:b3:38:33:d8:d5:
                    63:a0:17:63:11:c0:aa:dc:26:78:17:63:19:8d:9f:
                    3c:54:25:0e:52:a6:33:17:bd:f8:1d:f0:01:92:ca:
                    63:6d:be:06:55:24:c3:38:5b:4a:b1:51:63:95:28:
                    48:ef:68:f8:a2:3f:75:44:8b:47:89:47:0f:57:17:
                    a3:d0:6e:05:63:03:46:71:2d:39:bb:a3:f8:34:66:
                    d1:a7:f0:c2:28:ca:f8:86:76:d3:65:fb:85:f2:1a:
                    12:6d:af:6a:e3:d0:e9:e8:06:dd:02:28:21:5b:02:
                    70:e2:6d:02:a9:a0:92:84:65:c4:53:c2:2f:b0:dd:
                    1a:77:c8:a7:9e:58:5a:57:6f:bc:48:32:cf:3c:65:
                    80:b5:16:b3:6d:b2:97:60:91:79:55:88:6f:5d:80:
                    7b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D1:3E:60:3A:E3:6E:EE:31:F9:6A:4F:FB:37:0B:D4:6A:EB:E7:C0
            X509v3 Authority Key Identifier:
                keyid:2D:AF:A5:37:AE:3F:C9:D5:F3:2D:D3:B8:2D:AA:BE:64:8A:2C:70:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b9:78:d4:d8:09:e5:31:61:fc:89:f4:41:68:de:6c:dc:e6:
         b9:39:3f:49:35:2b:7f:e2:8c:55:7d:99:af:6b:4e:3f:cc:04:
         28:da:dc:f1:8e:3b:c5:3c:07:92:87:3b:3b:cc:0c:3b:f1:01:
         42:64:a3:71:b6:d3:14:3f:6a:c3:6b:01:35:2e:43:42:c8:50:
         a1:97:29:cc:82:ef:a3:96:a5:2e:1a:29:57:10:b0:c7:72:8e:
         56:b9:f4:2a:a5:19:02:d2:59:35:7e:d0:a0:72:ef:8a:ed:35:
         ba:2b:4b:51:04:50:ae:4b:3d:ab:f8:06:e5:22:09:db:95:f9:
         f3:fc:ae:54:f1:5e:90:93:64:e9:62:11:21:85:18:50:1b:91:
         51:9a:0f:ea:7e:5e:9d:3a:b5:ab:53:58:51:64:11:26:a8:e2:
         c2:f3:1d:7e:99:f9:ae:9b:d1:74:09:5d:9b:b8:a6:34:8e:45:
         ab:28:b6:97:db:1a:8c:e2:c5:bd:ab:2d:ae:8a:78:a1:9e:f7:
         f2:d4:d3:d4:b7:06:38:da:b9:97:4d:01:99:e4:4d:e2:83:66:
         89:3c:0b:fd:13:f9:93:d4:a0:c3:93:f9:36:32:6c:59:c3:3c:
         d4:7e:c5:6a:19:1f:0a:c8:c1:c2:a9:92:b5:dd:77:f4:17:01:
         f5:07:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----