Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/7870F98336F86FA196354F3B2E2B6919E08F6F69.mft
File:                     7870F98336F86FA196354F3B2E2B6919E08F6F69.mft (raw, json)
Hash identifier:          ctfozlwUdvsPjyNClPPQVN6vB+UVBgf3D9Prb2wYehQ=
Subject key identifier:   CC:1F:BB:C0:B8:2D:08:50:5F:1D:26:24:50:22:94:66:43:09:F8:1E
Authority key identifier: 78:70:F9:83:36:F8:6F:A1:96:35:4F:3B:2E:2B:69:19:E0:8F:6F:69
Certificate issuer:       /CN=7870F98336F86FA196354F3B2E2B6919E08F6F69
Certificate serial:       218584C88D1A7B585502A733CD0A2248D6B40A9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7870F98336F86FA196354F3B2E2B6919E08F6F69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/7870F98336F86FA196354F3B2E2B6919E08F6F69.mft
Manifest number:          01D5
Signing time:             Wed 20 Jul 2022 13:16:10 +0000
Manifest this update:     Wed 20 Jul 2022 13:11:10 +0000
Manifest next update:     Thu 21 Jul 2022 16:17:10 +0000
Files and hashes:         1: 34352e3138352e39322e302f32322d3234203d3e20323639333830.roa (hash: Ai4WNpQuuUJwsje9r2gDVzPKFufBjVv0bJD42x+PoPk=)
                          2: 7870F98336F86FA196354F3B2E2B6919E08F6F69.crl (hash: Rkli5GGxVGkxjbwF5eD3AYEczdmEOzzBzPsSzzvl0No=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:85:84:c8:8d:1a:7b:58:55:02:a7:33:cd:0a:22:48:d6:b4:0a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7870F98336F86FA196354F3B2E2B6919E08F6F69
        Validity
            Not Before: Jul 20 13:11:10 2022 GMT
            Not After : Jul 21 16:17:10 2022 GMT
        Subject: CN=CC1FBBC0B82D08505F1D2624502294664309F81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:14:1c:4f:76:2d:89:11:c8:43:0c:8b:4b:
                    cf:62:72:f6:86:58:b4:10:f7:be:9b:f4:89:08:27:
                    29:27:55:21:f7:d1:c2:52:3c:43:40:6f:0c:cf:12:
                    25:1c:5b:9b:0c:60:d4:f5:55:89:5f:42:d3:90:ca:
                    b3:82:ab:f4:63:61:22:0d:f9:17:f6:90:0e:61:59:
                    9f:27:60:78:94:f9:25:5c:4b:5c:79:92:91:d2:66:
                    dc:e2:f0:79:41:d8:b1:fc:8a:db:17:e9:cb:c2:c2:
                    aa:30:a7:27:42:92:71:49:0d:53:08:f4:ae:05:e3:
                    a8:f4:f1:b2:af:d5:28:33:7a:f8:ea:ac:d0:20:a3:
                    79:25:7f:d5:31:e2:10:c4:28:2a:02:c4:a4:a4:ad:
                    75:7f:29:5d:cf:cf:1b:70:8d:a9:3f:31:07:f2:5e:
                    f4:05:ec:e1:08:79:56:a0:4c:c0:7b:99:61:2c:b6:
                    28:a2:cc:51:4d:32:9b:af:d2:4a:b9:ef:91:c5:df:
                    d4:df:32:c6:b6:b4:c1:c2:32:78:7b:63:2b:27:d1:
                    cf:ca:19:c8:89:73:90:86:87:cb:d3:f8:fa:81:6d:
                    c4:3b:20:a0:0b:35:45:ec:b0:55:bf:19:39:ec:34:
                    e6:ab:e9:fb:7d:9d:ee:70:0c:33:8f:75:65:35:e8:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1F:BB:C0:B8:2D:08:50:5F:1D:26:24:50:22:94:66:43:09:F8:1E
            X509v3 Authority Key Identifier:
                keyid:78:70:F9:83:36:F8:6F:A1:96:35:4F:3B:2E:2B:69:19:E0:8F:6F:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/7870F98336F86FA196354F3B2E2B6919E08F6F69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7870F98336F86FA196354F3B2E2B6919E08F6F69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/7870F98336F86FA196354F3B2E2B6919E08F6F69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:98:3a:17:e0:70:e2:de:c7:22:97:01:2b:5a:15:2a:85:c1:
         44:bd:6b:91:a8:e6:42:db:dd:d4:9a:2c:db:c8:78:93:51:c7:
         b8:e7:74:81:d5:2d:89:9d:23:84:ab:bc:c9:2a:1e:06:0f:5c:
         e7:3f:18:b1:3d:e1:15:23:7e:93:51:72:4f:f8:ae:c0:9d:94:
         77:76:22:00:63:05:bb:02:3d:3a:ce:79:af:0e:57:42:36:0e:
         2c:13:0e:7e:ec:e1:60:82:d8:84:76:22:c7:25:84:a4:1f:d6:
         d2:98:68:fd:47:aa:1a:60:95:fb:8a:ed:55:c8:eb:83:db:41:
         01:d1:2e:b0:9d:60:54:95:ae:e3:91:86:37:a3:65:0e:39:a6:
         55:47:07:f0:15:5d:f9:50:e7:34:ce:5c:66:5f:f0:5c:c8:2f:
         ce:c1:80:06:59:ee:1b:ee:57:98:06:f6:ee:fa:fc:be:eb:16:
         de:f6:5e:64:3f:26:5b:eb:34:f7:48:6f:33:8f:96:27:71:89:
         e5:fa:a7:14:ae:f7:de:41:d4:ad:b9:18:c8:7d:0d:b6:f2:ce:
         da:de:0c:3a:88:e7:e7:a4:e2:32:ee:ee:ba:08:d7:b8:09:61:
         c3:d7:e2:d9:4c:55:9c:ec:7c:b6:f7:6a:df:a2:0e:fc:7a:21:
         fb:75:42:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIYWEyI0ae1hVAqczzQoiSNa0Cp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3MEY5ODMzNkY4NkZBMTk2MzU0RjNCMkUyQjY5MTlF
MDhGNkY2OTAeFw0yMjA3MjAxMzExMTBaFw0yMjA3MjExNjE3MTBaMDMxMTAvBgNV
BAMTKENDMUZCQkMwQjgyRDA4NTA1RjFEMjYyNDUwMjI5NDY2NDMwOUY4MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqRQcT3YtiRHIQwyLS89icvaG
WLQQ976b9IkIJyknVSH30cJSPENAbwzPEiUcW5sMYNT1VYlfQtOQyrOCq/RjYSIN
+Rf2kA5hWZ8nYHiU+SVcS1x5kpHSZtzi8HlB2LH8itsX6cvCwqowpydCknFJDVMI
9K4F46j08bKv1SgzevjqrNAgo3klf9Ux4hDEKCoCxKSkrXV/KV3Pzxtwjak/MQfy
XvQF7OEIeVagTMB7mWEstiiizFFNMpuv0kq575HF39TfMsa2tMHCMnh7Yysn0c/K
GciJc5CGh8vT+PqBbcQ7IKALNUXssFW/GTnsNOar6ft9ne5wDDOPdWU16BpRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzB+7wLgtCFBfHSYkUCKUZkMJ+B4wHwYDVR0j
BBgwFoAUeHD5gzb4b6GWNU87LitpGeCPb2kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBzVU1teEJLQmhOTktGaVN4Y3JFY1pFbThMcWdQSnlwTlN3RlNmb3BV
S1QvMC83ODcwRjk4MzM2Rjg2RkExOTYzNTRGM0IyRTJCNjkxOUUwOEY2RjY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc4NzBGOTgzMzZGODZGQTE5
NjM1NEYzQjJFMkI2OTE5RTA4RjZGNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFBzVU1teEJLQmhOTktGaVN4Y3JFY1pFbThMcWdQSnlwTlN3RlNmb3BVS1QvMC83
ODcwRjk4MzM2Rjg2RkExOTYzNTRGM0IyRTJCNjkxOUUwOEY2RjY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAy5g6F+Bw4t7HIpcBK1oVKoXBRL1rkajmQtvd1Jos28h4k1HHuOd0gdUtiZ0j
hKu8ySoeBg9c5z8YsT3hFSN+k1FyT/iuwJ2Ud3YiAGMFuwI9Os55rw5XQjYOLBMO
fuzhYILYhHYixyWEpB/W0pho/UeqGmCV+4rtVcjrg9tBAdEusJ1gVJWu45GGN6Nl
DjmmVUcH8BVd+VDnNM5cZl/wXMgvzsGABlnuG+5XmAb27vr8vusW3vZeZD8mW+s0
90hvM4+WJ3GJ5fqnFK733kHUrbkYyH0NtvLO2t4MOojn56TiMu7uugjXuAlhw9fi
2UxVnOx8tvdq36IO/Hoh+3VC/w==
-----END CERTIFICATE-----