Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft
File:                     011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft (raw, json)
Hash identifier:          CvkrEGGTgtGaTM718E5OOw1sb90tEY4MuRqMYqvqO8w=
Subject key identifier:   68:2E:1F:6D:0A:34:B9:8F:87:31:85:56:55:72:93:27:5D:47:6B:ED
Authority key identifier: 01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
Certificate issuer:       /CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
Certificate serial:       21C8C137C6CCE8B373D4F82A86DC62FC77BC91A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft
Manifest number:          E4
Signing time:             Tue 01 Apr 2025 09:20:42 +0000
Manifest this update:     Tue 01 Apr 2025 09:15:42 +0000
Manifest next update:     Wed 02 Apr 2025 11:29:42 +0000
Files and hashes:         1: 323830343a31343a3a2f33322d313238203d3e203238333630.roa (hash: fxsMtFM9Q+eEfNju9tFWLjkWXVFHCaw+JtId8IbpjSw=)
                          2: 011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl (hash: 4CH+DPThcxaeyTsoC94+eROv6Mqtt5UAgTQ+0BSFUWs=)
                          3: 3133382e39342e382e302f32322d3332203d3e203238333630.roa (hash: 7xnUV8TVx1qFRE2xPZ6+p184T34Q01d6h8kLHhs8rKM=)
                          4: 3137372e382e302e302f32302d3332203d3e203238333630.roa (hash: sebdx+71V1SPfz5jgGt15p8vyYg1zNIocQGwTnYDiO0=)
                          5: 3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (hash: uCusOwfIODi2DkSCpf8sewOTENPUEMkwYuxsEf+tFVg=)
                          6: 3137372e382e31362e302f32302d3332203d3e203238333630.roa (hash: +SUzPeXZNx20d5vnZdAr1EAm2/lIuIjjo7pgMz2l96M=)
                          7: 3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (hash: oKaogbl14tCZm0YEgP3o16QWaRyZ/5vgl5pgFw/+WwQ=)
                          8: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (hash: VArEVVoQSo6mmgqgThge67qIEXk4nUeV07/UlQ+S2B0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c8:c1:37:c6:cc:e8:b3:73:d4:f8:2a:86:dc:62:fc:77:bc:91:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
        Validity
            Not Before: Apr  1 09:15:42 2025 GMT
            Not After : Apr  2 11:29:42 2025 GMT
        Subject: CN=682E1F6D0A34B98F87318556557293275D476BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:0e:5f:f4:0d:83:16:52:f9:60:3f:0c:06:
                    65:4f:16:81:24:b9:bf:8a:c0:77:a4:10:89:17:28:
                    97:e2:ad:00:6b:8f:73:cd:55:6a:c6:38:5f:24:61:
                    10:61:82:91:10:a4:11:c0:71:38:1b:b4:19:ad:f9:
                    03:af:bf:54:04:d9:b0:c1:0e:4e:c6:09:6d:d7:74:
                    d8:36:fc:34:88:c1:19:26:c8:1e:6d:61:71:28:9b:
                    f5:05:ba:41:bd:2d:f3:1f:76:47:31:e1:52:81:1a:
                    b6:ff:82:f3:5c:21:de:79:79:f3:6d:56:da:1d:39:
                    1b:ca:e9:92:80:4e:62:87:ee:8e:10:40:b9:e0:5f:
                    b9:bd:84:51:c9:b8:84:ba:7f:c1:68:3d:65:c8:31:
                    50:fa:5a:63:74:49:15:51:60:be:5d:11:d8:c4:b0:
                    a2:20:b2:bf:4b:51:93:79:06:61:6a:c7:ae:54:52:
                    64:d8:0f:b7:72:6a:c6:60:63:ed:ff:5e:3b:5d:da:
                    1e:07:1d:a7:bd:0a:09:6f:3f:f9:21:4d:07:cd:31:
                    99:89:13:5b:e1:7c:86:ee:73:46:0b:b4:4e:5d:7b:
                    5e:46:13:1f:58:fc:a4:0e:fb:ae:d2:c3:4d:4c:36:
                    29:d8:ae:69:23:82:63:97:11:22:54:b9:19:cc:8b:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2E:1F:6D:0A:34:B9:8F:87:31:85:56:55:72:93:27:5D:47:6B:ED
            X509v3 Authority Key Identifier:
                keyid:01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:cb:85:f4:82:e1:84:3c:49:a7:f4:48:22:b5:da:d3:15:
         86:42:8c:04:6c:15:3a:89:c1:63:97:1c:8f:96:3e:76:cb:c8:
         1c:4d:f1:86:e6:aa:63:9d:5a:ee:62:45:20:8c:19:78:bb:8a:
         16:e6:08:2b:53:07:53:2e:65:73:db:19:80:d9:b3:9f:a1:ae:
         a1:7e:c2:d0:d9:45:6f:59:b5:c9:b7:0e:da:2f:26:59:e8:f2:
         a1:44:a0:a4:95:08:c2:5e:8f:79:3b:2f:17:57:f7:44:90:78:
         77:97:d8:bb:d3:8f:db:d7:8b:e8:6c:1c:ba:88:0c:f2:1c:c2:
         51:5d:c1:05:e0:18:67:b0:c3:9c:e3:28:4a:60:8d:7a:6c:b3:
         65:a6:57:59:6c:83:f1:a0:9f:14:79:64:79:16:6a:31:c6:de:
         d0:e3:ad:1a:f8:aa:25:7e:c7:9d:66:88:0c:08:fe:99:9b:0a:
         8b:f3:33:ef:64:07:e1:c4:01:f7:26:1d:09:98:ec:d5:2d:1f:
         34:86:c9:b6:01:97:7c:22:d8:b9:34:f8:33:1b:8f:ac:7d:d5:
         33:d2:35:8d:d6:e0:97:84:9c:cd:ba:b5:61:55:99:01:9f:e4:
         b7:ef:51:f6:fe:70:09:6e:09:de:47:30:65:00:a6:d9:78:9f:
         3c:bd:e7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----