Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/E159D32D8E6E31BF3C129770C9174EF6F269A5FB.mft
File:                     E159D32D8E6E31BF3C129770C9174EF6F269A5FB.mft (raw, json)
Hash identifier:          We3pyP7jnkrhqpTDKU5Nhs3BVyjaglQrmmWyRxGyuoc=
Subject key identifier:   88:8F:11:B9:33:39:E9:07:D8:BD:B8:B5:9C:49:A6:4F:2D:17:46:3A
Authority key identifier: E1:59:D3:2D:8E:6E:31:BF:3C:12:97:70:C9:17:4E:F6:F2:69:A5:FB
Certificate issuer:       /CN=E159D32D8E6E31BF3C129770C9174EF6F269A5FB
Certificate serial:       7A93627687350E7BD147F2D4F97BCC7BE94F5C77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E159D32D8E6E31BF3C129770C9174EF6F269A5FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/E159D32D8E6E31BF3C129770C9174EF6F269A5FB.mft
Manifest number:          0A
Signing time:             Mon 13 Jun 2022 09:06:40 +0000
Manifest this update:     Mon 13 Jun 2022 09:01:40 +0000
Manifest next update:     Tue 14 Jun 2022 13:04:40 +0000
Files and hashes:         1: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: p8S6mm2ZjwpEB89GlPdg9STK5JkBZXmQ8KPMiXB6Dgo=)
                          2: E159D32D8E6E31BF3C129770C9174EF6F269A5FB.crl (hash: nhMlCB7Yt6uvL7x23kN+sKm9gZx5yvqHoFFcRgycoGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:93:62:76:87:35:0e:7b:d1:47:f2:d4:f9:7b:cc:7b:e9:4f:5c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E159D32D8E6E31BF3C129770C9174EF6F269A5FB
        Validity
            Not Before: Jun 13 09:01:40 2022 GMT
            Not After : Jun 14 13:04:40 2022 GMT
        Subject: CN=888F11B93339E907D8BDB8B59C49A64F2D17463A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:5d:08:10:5f:92:6b:fc:79:ca:21:58:00:
                    3e:d0:69:70:9b:dc:95:9b:d1:3e:b4:96:af:f8:f1:
                    7a:4f:2b:d4:35:14:bd:74:1e:bd:f6:16:92:f3:c9:
                    f8:f3:08:08:ed:58:2e:0c:6d:20:09:a6:6a:83:63:
                    4b:25:aa:00:0e:2e:e0:a8:16:41:48:3a:f9:31:b7:
                    b6:c8:cc:76:28:18:ed:a5:49:72:52:4d:f4:bc:30:
                    84:30:6c:97:83:05:8b:c3:8d:1e:61:01:13:69:c0:
                    5e:e5:b7:c5:68:e7:e8:1d:96:0d:8c:eb:fb:99:23:
                    91:98:07:f6:42:77:b9:11:3e:d1:d7:8e:6c:b0:f3:
                    bd:0a:49:39:77:9f:51:9b:96:42:76:39:92:01:ca:
                    e2:19:3f:bf:1e:20:cc:01:3b:91:f9:51:7b:5b:b8:
                    cb:dd:9c:bc:89:e9:69:38:07:0c:51:26:b6:48:90:
                    6c:a5:0b:f3:52:58:fb:c9:12:94:ba:88:5a:c8:6d:
                    36:43:94:6e:cc:a0:e1:4b:c2:fa:b1:13:df:ef:e9:
                    06:21:ec:27:ad:a8:7e:df:01:59:05:1a:47:5d:32:
                    46:b8:ce:5b:eb:c3:b1:99:ba:1e:fb:65:f4:03:d7:
                    1c:72:41:20:cd:bd:77:62:fa:01:5c:7d:18:a9:7e:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8F:11:B9:33:39:E9:07:D8:BD:B8:B5:9C:49:A6:4F:2D:17:46:3A
            X509v3 Authority Key Identifier:
                keyid:E1:59:D3:2D:8E:6E:31:BF:3C:12:97:70:C9:17:4E:F6:F2:69:A5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/E159D32D8E6E31BF3C129770C9174EF6F269A5FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E159D32D8E6E31BF3C129770C9174EF6F269A5FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/E159D32D8E6E31BF3C129770C9174EF6F269A5FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5f:aa:c8:52:92:0d:bd:74:98:8d:03:41:46:57:da:d0:e7:
         31:06:da:85:7a:be:6e:5b:f5:86:08:f3:d7:89:a2:fb:58:04:
         b8:9d:d9:e8:df:ec:d5:49:fc:e1:ed:47:fa:44:72:6b:e8:55:
         25:62:11:04:e7:da:54:5f:05:95:df:f1:c3:11:76:0d:42:1d:
         44:51:06:40:4f:c8:92:99:0a:5c:84:b9:07:4d:10:91:d2:b9:
         f3:94:29:28:b2:6c:4b:b0:84:f6:22:ce:4d:2f:57:0b:75:70:
         e9:2c:c8:a8:a2:4b:58:dd:0b:1e:c7:e6:e7:a2:0e:44:83:d4:
         d2:49:f5:15:fb:6d:f6:fb:a8:74:f0:07:29:9a:44:60:f0:c9:
         52:ac:78:2d:18:2a:c4:d1:97:04:c0:a7:1c:00:f4:31:2d:dc:
         2b:86:41:1d:52:7d:c7:66:13:2a:e7:6f:ff:77:ab:19:fa:16:
         02:ec:ba:99:52:25:65:8a:4c:5c:3e:34:ee:a0:98:d9:ec:b1:
         c1:15:b9:b9:fe:bf:72:a6:79:9d:ec:cc:01:0b:cb:3b:9a:7a:
         5d:34:43:8f:48:35:36:33:31:f0:42:66:97:04:bd:06:fb:a8:
         e3:5f:e6:a2:af:51:c0:7b:c4:1d:99:ba:24:53:52:74:b5:07:
         df:94:d8:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUepNidoc1DnvRR/LU+XvMe+lPXHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE1OUQzMkQ4RTZFMzFCRjNDMTI5NzcwQzkxNzRFRjZG
MjY5QTVGQjAeFw0yMjA2MTMwOTAxNDBaFw0yMjA2MTQxMzA0NDBaMDMxMTAvBgNV
BAMTKDg4OEYxMUI5MzMzOUU5MDdEOEJEQjhCNTlDNDlBNjRGMkQxNzQ2M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRS10IEF+Sa/x5yiFYAD7QaXCb
3JWb0T60lq/48XpPK9Q1FL10Hr32FpLzyfjzCAjtWC4MbSAJpmqDY0slqgAOLuCo
FkFIOvkxt7bIzHYoGO2lSXJSTfS8MIQwbJeDBYvDjR5hARNpwF7lt8Vo5+gdlg2M
6/uZI5GYB/ZCd7kRPtHXjmyw870KSTl3n1GblkJ2OZIByuIZP78eIMwBO5H5UXtb
uMvdnLyJ6Wk4BwxRJrZIkGylC/NSWPvJEpS6iFrIbTZDlG7MoOFLwvqxE9/v6QYh
7CetqH7fAVkFGkddMka4zlvrw7GZuh77ZfQD1xxyQSDNvXdi+gFcfRipfqy7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiI8RuTM56QfYvbi1nEmmTy0XRjowHwYDVR0j
BBgwFoAU4VnTLY5uMb88EpdwyRdO9vJppfswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5
MXgvMC9FMTU5RDMyRDhFNkUzMUJGM0MxMjk3NzBDOTE3NEVGNkYyNjlBNUZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxNTlEMzJEOEU2RTMxQkYz
QzEyOTc3MEM5MTc0RUY2RjI2OUE1RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC9F
MTU5RDMyRDhFNkUzMUJGM0MxMjk3NzBDOTE3NEVGNkYyNjlBNUZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOF+qyFKSDb10mI0DQUZX2tDnMQbahXq+blv1hgjz14mi+1gEuJ3Z6N/s1Un8
4e1H+kRya+hVJWIRBOfaVF8Fld/xwxF2DUIdRFEGQE/IkpkKXIS5B00QkdK585Qp
KLJsS7CE9iLOTS9XC3Vw6SzIqKJLWN0LHsfm56IORIPU0kn1Fftt9vuodPAHKZpE
YPDJUqx4LRgqxNGXBMCnHAD0MS3cK4ZBHVJ9x2YTKudv/3erGfoWAuy6mVIlZYpM
XD407qCY2eyxwRW5uf6/cqZ5nezMAQvLO5p6XTRDj0g1NjMx8EJmlwS9Bvuo41/m
oq9RwHvEHZm6JFNSdLUH35TYOQ==
-----END CERTIFICATE-----