Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/9B989DC7A91476D29A2C5729F816BA85D3139DDB.mft
File: 9B989DC7A91476D29A2C5729F816BA85D3139DDB.mft (raw, json)
Hash identifier: yRs7C8K+mxd7SGsVRtcR71VbyM3VNzs8A5QnAyUhe1c=
Subject key identifier: 33:D8:D2:3D:B5:4E:3D:2B:CF:12:6B:A2:7F:1D:2A:9E:60:F8:C1:C3
Authority key identifier: 9B:98:9D:C7:A9:14:76:D2:9A:2C:57:29:F8:16:BA:85:D3:13:9D:DB
Certificate issuer: /CN=9B989DC7A91476D29A2C5729F816BA85D3139DDB
Certificate serial: 0C79C87564650AEF525D440AA862307BB1AA4777
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B989DC7A91476D29A2C5729F816BA85D3139DDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/9B989DC7A91476D29A2C5729F816BA85D3139DDB.mft
Manifest number: 0D
Signing time: Wed 12 Mar 2025 18:29:32 +0000
Manifest this update: Wed 12 Mar 2025 18:24:32 +0000
Manifest next update: Thu 13 Mar 2025 21:46:32 +0000
Files and hashes: 1: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (hash: vzP/v5u4IHuTdxY4zGtZ3tnBQUriGZAIU+v6ayfkcZg=)
2: 9B989DC7A91476D29A2C5729F816BA85D3139DDB.crl (hash: FzspuDNVCQP/LFaNmVYLfnYYkJt8wk8xh6IKh1GuZKY=)
3: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (hash: iA2zikyZ+oBSh15yLLIfv+meK3EQmdDHAq10r2q5huk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:79:c8:75:64:65:0a:ef:52:5d:44:0a:a8:62:30:7b:b1:aa:47:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B989DC7A91476D29A2C5729F816BA85D3139DDB
Validity
Not Before: Mar 12 18:24:32 2025 GMT
Not After : Mar 13 21:46:32 2025 GMT
Subject: CN=33D8D23DB54E3D2BCF126BA27F1D2A9E60F8C1C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:3f:75:19:bb:10:e0:c4:25:8b:2b:08:45:
55:19:11:de:f0:3a:fc:84:fe:1f:33:6a:08:a3:20:
33:fb:cb:75:97:8c:42:82:24:42:94:6b:a6:9f:8e:
03:ee:1d:01:80:4a:dc:32:f1:0f:d7:91:da:c2:cf:
4b:a8:9a:8a:66:ba:06:de:3c:00:b6:c7:3c:2b:da:
fb:1f:6d:52:49:83:97:0f:4d:88:b3:5d:16:77:0e:
fa:3a:bd:14:16:33:5f:c0:06:9d:45:13:3a:12:84:
01:00:61:b5:2d:eb:fa:c8:c6:49:34:bf:d3:5c:32:
51:12:1d:cd:bd:1a:d0:87:9f:1f:b1:17:f2:39:86:
5c:54:74:cc:ef:15:99:77:5b:6f:22:4e:da:ac:d9:
21:7d:28:d6:cb:f1:5c:af:27:a4:dc:18:14:29:f8:
ca:ec:7d:9b:93:86:8f:fa:af:2c:54:bd:72:de:80:
9c:f5:e7:e1:00:29:8c:c1:2d:ae:fe:33:0c:72:3e:
e1:e3:80:8a:43:8f:fd:08:cc:ce:77:c9:4f:17:5d:
04:ea:1d:e3:b8:91:41:f7:ed:79:e7:20:13:e5:b2:
46:bf:f9:aa:9d:5c:6f:70:1b:c2:ca:d7:38:c5:24:
f4:da:0f:0b:ab:e0:32:88:c8:6a:b7:d5:e1:9a:e7:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:D2:3D:B5:4E:3D:2B:CF:12:6B:A2:7F:1D:2A:9E:60:F8:C1:C3
X509v3 Authority Key Identifier:
keyid:9B:98:9D:C7:A9:14:76:D2:9A:2C:57:29:F8:16:BA:85:D3:13:9D:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/9B989DC7A91476D29A2C5729F816BA85D3139DDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B989DC7A91476D29A2C5729F816BA85D3139DDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/9B989DC7A91476D29A2C5729F816BA85D3139DDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9f:dc:cc:3d:fe:cf:c1:4a:81:82:93:25:21:1d:77:fc:6d:
ce:89:44:4f:e4:e5:c1:72:62:37:b7:ed:8e:da:96:be:dc:39:
26:52:dd:c0:fd:b6:36:1c:b4:45:1b:50:03:f8:0f:cf:21:5e:
16:ff:e5:39:77:6c:84:33:08:e4:49:f7:8f:51:20:07:09:dd:
13:e9:cc:eb:ef:3d:a5:cb:28:68:e9:7e:f7:79:ae:6d:fe:45:
53:95:d9:9d:fb:73:e5:47:57:3e:05:c4:f2:2a:1a:e3:8e:0a:
3a:f3:61:a8:fb:13:83:58:18:62:2a:cc:c2:35:b6:da:2e:c0:
9c:cc:aa:38:43:10:dd:a4:65:3d:99:48:40:ef:83:84:73:76:
b7:38:04:6c:cf:64:21:f9:02:1b:ba:6f:18:38:51:d5:90:27:
c1:f8:78:08:4a:7a:41:96:35:16:f2:1b:cf:5d:97:f2:cf:17:
95:41:91:c6:b9:6c:32:79:ec:bf:71:90:1e:dc:24:af:18:f6:
a4:e9:a6:da:06:9a:94:21:e3:06:f0:71:f8:27:fe:63:a0:ee:
e5:5f:f9:06:f9:3f:5f:9f:71:a0:85:6f:d0:01:ef:2e:9c:7f:
33:29:8c:95:8f:d5:38:1c:c8:ca:3f:ef:82:00:dc:08:e6:bc:
dd:9a:ed:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDHnIdWRlCu9SXUQKqGIwe7GqR3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI5ODlEQzdBOTE0NzZEMjlBMkM1NzI5RjgxNkJBODVE
MzEzOUREQjAeFw0yNTAzMTIxODI0MzJaFw0yNTAzMTMyMTQ2MzJaMDMxMTAvBgNV
BAMTKDMzRDhEMjNEQjU0RTNEMkJDRjEyNkJBMjdGMUQyQTlFNjBGOEMxQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFD91GbsQ4MQliysIRVUZEd7w
OvyE/h8zagijIDP7y3WXjEKCJEKUa6afjgPuHQGAStwy8Q/XkdrCz0uomopmugbe
PAC2xzwr2vsfbVJJg5cPTYizXRZ3Dvo6vRQWM1/ABp1FEzoShAEAYbUt6/rIxkk0
v9NcMlESHc29GtCHnx+xF/I5hlxUdMzvFZl3W28iTtqs2SF9KNbL8VyvJ6TcGBQp
+MrsfZuTho/6ryxUvXLegJz15+EAKYzBLa7+MwxyPuHjgIpDj/0IzM53yU8XXQTq
HeO4kUH37XnnIBPlska/+aqdXG9wG8LK1zjFJPTaDwur4DKIyGq31eGa5xK5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUM9jSPbVOPSvPEmuifx0qnmD4wcMwHwYDVR0j
BBgwFoAUm5idx6kUdtKaLFcp+Ba6hdMTndswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RL
cjQvMC85Qjk4OURDN0E5MTQ3NkQyOUEyQzU3MjlGODE2QkE4NUQzMTM5RERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCOTg5REM3QTkxNDc2RDI5
QTJDNTcyOUY4MTZCQTg1RDMxMzlEREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RLcjQvMC85
Qjk4OURDN0E5MTQ3NkQyOUEyQzU3MjlGODE2QkE4NUQzMTM5RERCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp5/czD3+z8FKgYKTJSEdd/xtzolET+TlwXJiN7ftjtqWvtw5JlLdwP22Nhy0
RRtQA/gPzyFeFv/lOXdshDMI5En3j1EgBwndE+nM6+89pcsoaOl+93mubf5FU5XZ
nftz5UdXPgXE8ioa444KOvNhqPsTg1gYYirMwjW22i7AnMyqOEMQ3aRlPZlIQO+D
hHN2tzgEbM9kIfkCG7pvGDhR1ZAnwfh4CEp6QZY1FvIbz12X8s8XlUGRxrlsMnns
v3GQHtwkrxj2pOmm2gaalCHjBvBx+Cf+Y6Du5V/5Bvk/X59xoIVv0AHvLpx/MymM
lY/VOBzIyj/vggDcCOa83ZrtkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:04:06 2025 by rpki-client