Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/5F2847FF19664413E34F373356471BF3808443E8.mft
File:                     5F2847FF19664413E34F373356471BF3808443E8.mft (raw, json)
Hash identifier:          yniILsob6kqqmZ4BpWN51eGxmjBguG+dxAR5A2UVIyY=
Subject key identifier:   0C:46:61:8B:60:F1:36:88:7F:6B:0D:B4:60:E9:B4:68:F4:6E:4D:F0
Authority key identifier: 5F:28:47:FF:19:66:44:13:E3:4F:37:33:56:47:1B:F3:80:84:43:E8
Certificate issuer:       /CN=5F2847FF19664413E34F373356471BF3808443E8
Certificate serial:       5DBAD593A78D3301E22D61FF0FD211C1C9BEEFBD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F2847FF19664413E34F373356471BF3808443E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/5F2847FF19664413E34F373356471BF3808443E8.mft
Manifest number:          33
Signing time:             Sat 12 Mar 2022 03:30:00 +0000
Manifest this update:     Sat 12 Mar 2022 03:25:00 +0000
Manifest next update:     Sun 13 Mar 2022 04:14:00 +0000
Files and hashes:         1: 3137302e3233332e3131322e302f32322d3234203d3e20323635303738.roa (hash: heiITkXVYlViCF8dC8PEr8qqSYiAOnkR8GxZdvrWfdw=)
                          2: 5F2847FF19664413E34F373356471BF3808443E8.crl (hash: OqJ5oymQ7T5WGK5yM5RRL6UCpysdGZ/azpmvqFVCTA0=)
                          3: 323830343a333237303a3a2f33322d3332203d3e20323635303738.roa (hash: PgPHcIog4FQ8YtSvK+tnQ+icjUEVzPIv+BXpBxmOZp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ba:d5:93:a7:8d:33:01:e2:2d:61:ff:0f:d2:11:c1:c9:be:ef:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F2847FF19664413E34F373356471BF3808443E8
        Validity
            Not Before: Mar 12 03:25:00 2022 GMT
            Not After : Mar 13 04:14:00 2022 GMT
        Subject: CN=0C46618B60F136887F6B0DB460E9B468F46E4DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:5b:cc:29:34:e0:0f:4c:4f:da:4b:ef:8c:
                    9b:24:66:8f:62:fb:bf:d2:40:50:15:07:b7:4d:96:
                    d9:21:20:ae:28:c0:f8:8f:26:f9:00:26:49:60:24:
                    a1:1c:f4:52:da:83:5e:68:b9:81:ee:c4:8c:b5:fb:
                    6c:1a:15:02:d3:cc:5d:db:e8:50:f1:2f:4c:3a:ce:
                    83:20:d7:23:cf:98:46:68:90:7f:b0:cc:c8:20:c0:
                    bd:45:8e:d2:a0:e1:6f:e5:49:1e:17:1e:f7:cf:24:
                    6c:9f:f8:41:23:b5:57:8e:31:48:7f:7b:47:fa:c5:
                    35:6a:67:8d:93:b0:25:b7:b6:81:c9:ca:0a:65:4a:
                    2d:f7:36:03:c3:8f:b6:55:38:8e:4d:d4:0a:52:e0:
                    06:01:91:8d:ca:f2:78:94:4f:e4:7e:b8:a0:b8:00:
                    b4:e9:d8:c2:43:dd:7b:77:e4:5c:da:b5:88:08:e2:
                    6b:38:40:a0:a7:0e:b9:d5:2a:84:21:63:7d:45:24:
                    be:14:5e:83:b4:ff:b3:f3:96:2f:00:e6:f8:46:e8:
                    14:33:a1:0c:83:b7:ea:a5:34:ee:30:a8:27:b1:7b:
                    ec:76:e8:94:25:76:12:8a:f1:7a:34:34:ec:25:ec:
                    2e:33:7b:eb:49:2c:66:95:e0:4b:fb:f7:e3:b3:3e:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:46:61:8B:60:F1:36:88:7F:6B:0D:B4:60:E9:B4:68:F4:6E:4D:F0
            X509v3 Authority Key Identifier:
                keyid:5F:28:47:FF:19:66:44:13:E3:4F:37:33:56:47:1B:F3:80:84:43:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/5F2847FF19664413E34F373356471BF3808443E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F2847FF19664413E34F373356471BF3808443E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/5F2847FF19664413E34F373356471BF3808443E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ad:3f:c7:95:de:7f:5a:70:9a:c3:e0:1a:86:c7:7a:29:b9:
         23:52:f2:3f:32:b8:5b:b5:cf:44:15:59:11:72:d6:ff:43:2b:
         51:e2:58:f1:be:19:88:f2:41:20:70:71:8e:14:cf:41:05:21:
         d3:52:19:6d:7c:f6:8e:b1:0e:9b:89:fb:c3:cb:39:a9:6c:d4:
         61:4a:40:cb:de:c2:eb:b0:c5:8b:31:97:82:de:d0:0d:fc:10:
         b2:d3:75:c6:fe:d1:35:99:c5:02:fd:36:ac:a4:57:5d:35:af:
         ec:28:56:a3:19:35:af:9b:6f:52:d8:7f:05:c7:b5:16:cd:a8:
         02:93:1c:f7:2d:2a:c6:8f:34:d4:14:df:9f:de:7c:d2:71:da:
         f2:2b:d1:59:7e:1e:0e:9e:0f:2e:2a:f5:35:8d:1f:b1:36:d6:
         42:99:8c:09:3a:1c:8f:71:e3:41:56:52:28:41:5f:ab:e6:ad:
         3c:6e:ea:e2:6d:4b:7e:f3:df:7b:1a:7f:78:57:3d:fb:4c:8b:
         80:33:9e:ec:c5:00:36:e8:34:1c:59:eb:c8:c0:f3:ab:87:ef:
         b8:8c:31:32:de:d0:32:12:aa:b4:9b:72:ca:ce:9d:a3:52:35:
         ff:e9:e1:4b:21:74:ec:4b:38:28:c9:56:32:a3:8e:ac:2c:1c:
         6e:dc:c2:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXbrVk6eNMwHiLWH/D9IRwcm+770wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYyODQ3RkYxOTY2NDQxM0UzNEYzNzMzNTY0NzFCRjM4
MDg0NDNFODAeFw0yMjAzMTIwMzI1MDBaFw0yMjAzMTMwNDE0MDBaMDMxMTAvBgNV
BAMTKDBDNDY2MThCNjBGMTM2ODg3RjZCMERCNDYwRTlCNDY4RjQ2RTRERjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBA1vMKTTgD0xP2kvvjJskZo9i
+7/SQFAVB7dNltkhIK4owPiPJvkAJklgJKEc9FLag15ouYHuxIy1+2waFQLTzF3b
6FDxL0w6zoMg1yPPmEZokH+wzMggwL1FjtKg4W/lSR4XHvfPJGyf+EEjtVeOMUh/
e0f6xTVqZ42TsCW3toHJygplSi33NgPDj7ZVOI5N1ApS4AYBkY3K8niUT+R+uKC4
ALTp2MJD3Xt35FzatYgI4ms4QKCnDrnVKoQhY31FJL4UXoO0/7Pzli8A5vhG6BQz
oQyDt+qlNO4wqCexe+x26JQldhKK8Xo0NOwl7C4ze+tJLGaV4Ev79+OzPuzXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDEZhi2DxNoh/aw20YOm0aPRuTfAwHwYDVR0j
BBgwFoAUXyhH/xlmRBPjTzczVkcb84CEQ+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz
VHYvMC81RjI4NDdGRjE5NjY0NDEzRTM0RjM3MzM1NjQ3MUJGMzgwODQ0M0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGMjg0N0ZGMTk2NjQ0MTNF
MzRGMzczMzU2NDcxQkYzODA4NDQzRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdzVHYvMC81
RjI4NDdGRjE5NjY0NDEzRTM0RjM3MzM1NjQ3MUJGMzgwODQ0M0U4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYK0/x5Xef1pwmsPgGobHeim5I1LyPzK4W7XPRBVZEXLW/0MrUeJY8b4ZiPJB
IHBxjhTPQQUh01IZbXz2jrEOm4n7w8s5qWzUYUpAy97C67DFizGXgt7QDfwQstN1
xv7RNZnFAv02rKRXXTWv7ChWoxk1r5tvUth/Bce1Fs2oApMc9y0qxo801BTfn958
0nHa8ivRWX4eDp4PLir1NY0fsTbWQpmMCTocj3HjQVZSKEFfq+atPG7q4m1LfvPf
exp/eFc9+0yLgDOe7MUANug0HFnryMDzq4fvuIwxMt7QMhKqtJtyys6do1I1/+nh
SyF07Es4KMlWMqOOrCwcbtzCmA==
-----END CERTIFICATE-----