Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2A595312C7CDFF5A76DBAE734D50E12527241A24.mft
File:                     2A595312C7CDFF5A76DBAE734D50E12527241A24.mft (raw, json)
Hash identifier:          mQ4LJn29dqsbwL4LNtPMSgvJhqovW+ARLmhSb6dCvXY=
Subject key identifier:   41:3A:55:BB:48:AB:A1:58:E6:00:C0:B8:54:21:20:1C:26:9D:7A:FF
Authority key identifier: 2A:59:53:12:C7:CD:FF:5A:76:DB:AE:73:4D:50:E1:25:27:24:1A:24
Certificate issuer:       /CN=2A595312C7CDFF5A76DBAE734D50E12527241A24
Certificate serial:       3099156F2CEBDFD40906B3577CFFCD6883AF5153
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A595312C7CDFF5A76DBAE734D50E12527241A24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2A595312C7CDFF5A76DBAE734D50E12527241A24.mft
Manifest number:          3B
Signing time:             Mon 11 Nov 2024 20:16:36 +0000
Manifest this update:     Mon 11 Nov 2024 20:11:36 +0000
Manifest next update:     Tue 12 Nov 2024 21:22:36 +0000
Files and hashes:         1: 3139302e38392e342e302f32322d3332203d3e20323730333939.roa (hash: acN8e8SZ39MK446EfdQG75V7FMjBGUv07zjgZLOZSzQ=)
                          2: 323830343a366236633a3a2f33322d313238203d3e20323730333939.roa (hash: INsHTOs5Kd0zBx5We/rze24+qukOZhsBLpkNaTFbOTM=)
                          3: 2A595312C7CDFF5A76DBAE734D50E12527241A24.crl (hash: 5Di/8Zse0BzdTREdZI79cBf+wbMtUmnrHhjToK18uhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:99:15:6f:2c:eb:df:d4:09:06:b3:57:7c:ff:cd:68:83:af:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A595312C7CDFF5A76DBAE734D50E12527241A24
        Validity
            Not Before: Nov 11 20:11:36 2024 GMT
            Not After : Nov 12 21:22:36 2024 GMT
        Subject: CN=413A55BB48ABA158E600C0B85421201C269D7AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:72:67:02:d8:03:3f:98:d2:ea:fa:0e:24:
                    79:9a:69:12:d6:68:dc:51:c9:ae:ac:ed:68:4b:16:
                    4a:58:f4:26:7a:d3:1c:4e:7d:b8:67:cf:a0:83:16:
                    88:3f:62:6c:cb:b9:0e:a6:5b:a7:1a:e7:8a:83:53:
                    08:15:f4:59:db:1e:d9:41:b3:73:3d:36:3d:0e:23:
                    16:40:65:95:e4:12:3c:ae:d9:89:5c:ec:9e:15:b2:
                    32:a1:3c:e9:b2:6a:a8:67:45:10:c7:5b:c3:7d:43:
                    46:36:8d:6d:45:e7:65:8b:27:f3:f2:ba:a5:4f:66:
                    ab:67:9c:be:c2:9a:fd:2b:6b:97:c6:5c:37:2b:dc:
                    6c:9d:9e:fe:7d:e3:74:bb:61:27:cd:32:6c:60:fc:
                    4b:6c:1b:ec:28:4a:4c:35:60:e0:10:14:89:61:45:
                    7d:ea:6e:4b:1a:82:95:6a:75:50:24:17:33:d0:ba:
                    09:b6:6e:6c:fc:a9:c3:db:55:b2:e4:7c:a8:99:f4:
                    e0:4a:33:0d:8a:01:ed:f7:77:7e:9e:b6:ce:3a:cd:
                    f2:f8:48:4d:ea:01:24:98:cd:a6:b0:59:21:e6:94:
                    e6:d6:78:97:d2:58:c9:72:68:cb:bc:72:26:c5:de:
                    6a:62:1a:98:9b:d1:56:d1:20:f9:aa:bb:d7:60:c7:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3A:55:BB:48:AB:A1:58:E6:00:C0:B8:54:21:20:1C:26:9D:7A:FF
            X509v3 Authority Key Identifier:
                keyid:2A:59:53:12:C7:CD:FF:5A:76:DB:AE:73:4D:50:E1:25:27:24:1A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2A595312C7CDFF5A76DBAE734D50E12527241A24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A595312C7CDFF5A76DBAE734D50E12527241A24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2A595312C7CDFF5A76DBAE734D50E12527241A24.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:b4:b9:2e:da:95:e5:ee:f8:4b:20:48:3e:48:83:c6:3f:
         28:42:8d:0a:e4:c1:6e:3b:29:c2:75:01:b3:93:30:8c:c5:59:
         0b:04:97:5d:8d:31:b1:f6:44:3b:dc:a6:a6:3b:c0:37:45:e1:
         71:ad:d6:f3:8b:0e:28:61:6a:e4:3e:14:57:ec:63:e9:40:4b:
         f5:7f:c8:6f:cc:6c:9b:3e:39:2d:b6:a8:08:f8:1e:9a:7b:93:
         2d:15:52:dd:85:36:7f:66:68:de:46:74:08:6c:9a:3b:50:4c:
         f5:38:60:10:a4:fc:39:3a:84:66:2d:05:e0:39:14:99:1d:4c:
         30:09:a2:81:58:0e:d7:ba:2d:6f:e1:f9:e2:a1:e2:68:04:cc:
         09:4a:74:e5:6c:c5:9b:f8:7b:48:68:d2:e7:e4:ac:91:34:e9:
         00:c2:f7:fe:13:0e:52:2e:ca:1d:00:ac:a8:04:69:56:bd:02:
         5d:07:40:0a:23:45:62:fe:af:07:6e:af:b5:50:07:ac:fd:d8:
         75:da:aa:75:f0:94:b3:a5:e0:b9:19:4f:9b:25:18:b1:30:f2:
         30:ea:4b:3e:d2:2f:b8:9a:64:61:15:68:a2:1d:c9:7c:61:28:
         7d:fc:65:d5:a2:c8:60:78:8a:06:5e:53:bf:ee:1d:17:90:40:
         67:e0:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----