Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.mft
File:                     E9874D754A4F2E9B8149C3B894251362FDD83E90.mft (raw, json)
Hash identifier:          /LxzF3RGGxOC+T3bHp69gI8EXrgXe5Vi4yGuzQonGQ4=
Subject key identifier:   97:8E:72:EC:C9:21:A0:F5:81:CF:46:F3:E0:C8:D0:10:FD:C8:D5:F9
Authority key identifier: E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90
Certificate issuer:       /CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
Certificate serial:       101DAFF9039961E233B4398B64628DB6078506BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.mft
Manifest number:          3A
Signing time:             Mon 28 Apr 2025 16:07:44 +0000
Manifest this update:     Mon 28 Apr 2025 16:02:44 +0000
Manifest next update:     Tue 29 Apr 2025 18:08:44 +0000
Files and hashes:         1: 34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa (hash: f9orR80lB+xhLSp5xUzyHnaU8YWJ3WG+uhOrYgqinFU=)
                          2: 34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa (hash: WjRnzcBOy1vik2xXIStT703l1NHlIN8mp8OS8Vki8ns=)
                          3: 34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa (hash: dwTw+qLXFkxFMGypSdnSg8sNbmIJJcSk2SynXDp3gWo=)
                          4: E9874D754A4F2E9B8149C3B894251362FDD83E90.crl (hash: XsOpUCwjTBE5LS7PjnUi+QY6o2SnMRe4OSU+5t1dNqg=)
                          5: 34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (hash: P1YDvHnHLZj5HFoQxg4W7/3oIckGLAnpA6kp0zzdLpU=)
                          6: 34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa (hash: 3apf2DpTvbp6a8dk13WqViXa9G9U3QoeLT6Vppz7YpA=)
                          7: 34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (hash: wiKk85Ob9GG7HS8aA/W4GPRipAMLLyevnzrJ98IAs6M=)
                          8: 34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa (hash: ztg3S3V2WKB/HGSRrldglwRsFKpkkR60Y4iRo+wGv1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1d:af:f9:03:99:61:e2:33:b4:39:8b:64:62:8d:b6:07:85:06:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
        Validity
            Not Before: Apr 28 16:02:44 2025 GMT
            Not After : Apr 29 18:08:44 2025 GMT
        Subject: CN=978E72ECC921A0F581CF46F3E0C8D010FDC8D5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:03:99:2e:d1:d4:9b:8b:0f:86:47:dd:51:
                    5d:31:57:92:a7:7e:dc:bc:be:33:8c:70:fc:51:81:
                    15:e6:d5:4e:10:16:48:c5:c3:1e:0d:8a:70:b4:b2:
                    dc:9f:e6:bf:66:65:3a:f6:d1:67:e4:61:d1:27:77:
                    08:a7:3a:dc:ea:0a:9e:69:55:c2:b3:60:1f:22:6a:
                    64:bd:af:b7:f0:19:85:f9:25:a1:4e:97:5c:a9:4b:
                    c1:37:08:5f:23:ca:6f:98:8f:d3:03:d7:e6:ac:47:
                    bd:57:a8:54:eb:33:e6:c1:ba:58:fa:5c:d4:dd:ae:
                    47:43:fb:d9:50:f3:7d:b0:e9:d4:0d:77:f8:9e:e1:
                    80:cd:2a:b3:0b:bf:e6:ae:49:36:e7:42:50:ee:1a:
                    51:38:c4:42:11:c0:3b:ea:09:9d:d9:2e:b9:03:8d:
                    f4:b1:f9:63:1a:9d:61:4c:14:d1:bc:1a:37:0c:e2:
                    59:a3:89:5d:f5:0b:ed:14:c0:57:89:c3:03:b0:52:
                    c5:d9:76:1b:3f:fb:2a:01:6d:26:86:33:9d:cf:43:
                    01:5f:d6:6e:a0:27:2a:7e:04:b3:87:b9:aa:49:70:
                    71:d5:8f:a0:92:48:7b:a2:d3:7b:70:a3:03:93:be:
                    e7:0a:82:3d:0a:f9:f4:3f:b7:16:c6:64:30:44:cd:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8E:72:EC:C9:21:A0:F5:81:CF:46:F3:E0:C8:D0:10:FD:C8:D5:F9
            X509v3 Authority Key Identifier:
                keyid:E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:12:f9:13:d4:25:f6:5e:f7:be:71:14:97:1e:74:03:bb:56:
         90:fc:25:d4:3a:1b:1a:01:31:b5:96:00:2d:4f:93:81:f4:ed:
         5e:ff:89:b1:be:c8:72:b5:2a:15:e9:72:be:3b:85:22:3f:c1:
         f0:0f:b2:c0:35:fc:7f:1a:4a:eb:1b:a7:43:3b:7a:69:89:82:
         41:a1:62:fb:56:e8:17:43:32:65:9f:d5:03:16:97:8b:18:74:
         d3:be:02:e0:3c:ef:71:e9:0e:d5:9a:27:9e:87:f5:6e:a9:9f:
         35:ca:39:12:ff:3a:74:6b:90:33:cd:9b:45:9f:b6:5e:e6:d7:
         6c:59:10:89:5a:9d:2e:45:6d:ba:99:06:d2:a2:0c:dc:5d:e7:
         a9:21:57:70:42:f4:4c:e7:46:74:de:8a:55:97:83:dc:6f:58:
         23:7a:54:6e:ee:12:20:13:1f:76:bc:65:a9:c5:de:35:3c:c7:
         3a:a4:d1:68:95:3d:5d:97:eb:75:80:ce:86:6e:50:e1:09:8f:
         23:6a:d5:75:d5:7f:f9:27:0a:8e:44:fd:94:4f:41:3b:41:44:
         54:cc:80:b7:62:92:8a:15:8b:48:62:55:8a:0d:a9:ff:c3:f1:
         f8:3b:d2:62:c1:88:93:86:69:2f:9b:63:6a:c7:bc:d7:6b:89:
         22:7c:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----