Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/436A9B90ED51860630E8C108585933E381FE4900.mft
File: 436A9B90ED51860630E8C108585933E381FE4900.mft (raw, json)
Hash identifier: I0XOCzBEgGWVN/PoqL4YxfAWcvKUNPnnFa0GIC99fic=
Subject key identifier: 3C:0B:63:AA:6F:DA:C0:44:E8:91:99:8B:BD:F3:F3:90:AF:A6:D2:78
Authority key identifier: 43:6A:9B:90:ED:51:86:06:30:E8:C1:08:58:59:33:E3:81:FE:49:00
Certificate issuer: /CN=436A9B90ED51860630E8C108585933E381FE4900
Certificate serial: 016E309F869F54B8E6007E92D894D8B2CCB355CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436A9B90ED51860630E8C108585933E381FE4900.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/436A9B90ED51860630E8C108585933E381FE4900.mft
Manifest number: 08
Signing time: Mon 17 Mar 2025 20:43:52 +0000
Manifest this update: Mon 17 Mar 2025 20:38:52 +0000
Manifest next update: Tue 18 Mar 2025 21:44:52 +0000
Files and hashes: 1: 436A9B90ED51860630E8C108585933E381FE4900.crl (hash: fANs86dwHm7PSj2WUcHfMFqW4q9tIwPsYMkvTVBAams=)
2: 3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa (hash: 28kXy6EiVYsIlMLqICfj/gn0E5+VXGtV0pVLIxKC9lo=)
3: 3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa (hash: a1192uDS6WGT637bkcnqHAIwKUDBC+iooD9I/VedaUk=)
4: 3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa (hash: qLm4US5KZa5p9zefWmwgpmpg4CfFNfIHLe6D9U+s1is=)
5: 3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa (hash: w1IfywlWVk0BLEIwAxaahHdP1u090BRFvx+rJAZ72Do=)
6: 323830343a313364383a3a2f33322d3438203d3e20323632363639.roa (hash: 4b82TzmQ5/BZcgXkvYqItIkedSABFCczjbc0BEGYJp0=)
7: 3137302e37382e36382e302f32322d3234203d3e20323632363639.roa (hash: kS987pfkTyGbo9M94ORQKlwgJHjWxdAq7+kSdt2J5n0=)
8: 3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa (hash: KaL+mRvDpDj60cthIzrJb0q4iKz960Fxi7syV38/MqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6e:30:9f:86:9f:54:b8:e6:00:7e:92:d8:94:d8:b2:cc:b3:55:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436A9B90ED51860630E8C108585933E381FE4900
Validity
Not Before: Mar 17 20:38:52 2025 GMT
Not After : Mar 18 21:44:52 2025 GMT
Subject: CN=3C0B63AA6FDAC044E891998BBDF3F390AFA6D278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:5f:94:9a:be:d5:05:e1:2c:f1:f6:29:4a:
96:a0:19:64:d0:6a:9a:0a:f8:6b:e8:9a:a6:40:a8:
e6:45:55:a2:14:93:9d:35:34:b7:d5:6c:be:b3:b1:
4e:12:64:0b:e8:f7:5c:65:7b:fb:3f:4b:a9:3b:64:
f4:c2:9a:44:8b:89:b0:1b:11:bb:8b:db:da:5b:2e:
a9:db:19:88:32:24:28:13:cb:fa:70:ed:c9:0a:ba:
08:4b:94:6d:11:47:b9:ec:12:00:ca:ad:9d:af:60:
1c:f5:9a:99:b7:82:07:aa:90:fd:5f:a3:65:4e:ff:
5f:32:67:bb:1b:61:64:b6:3f:9d:74:66:40:79:7b:
9c:51:9a:d1:6d:f1:54:35:e4:80:18:0d:1d:6a:c2:
c5:c9:95:7e:43:71:92:a3:11:97:ac:20:da:94:6b:
b4:1f:59:63:0b:f8:c2:04:4a:a8:e2:f9:e9:42:a2:
0a:30:5b:15:de:19:da:a4:65:30:72:46:bd:54:6c:
ed:d9:58:ea:3c:0b:bd:06:ae:42:93:7e:3f:d3:e8:
26:cc:c2:e9:98:90:3a:9c:f8:60:6f:16:62:e1:f4:
f8:fe:8d:a0:32:dc:4e:17:45:e9:24:45:57:08:f4:
5e:76:8d:09:8a:d2:7d:c6:de:e4:9a:83:de:ba:8d:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:63:AA:6F:DA:C0:44:E8:91:99:8B:BD:F3:F3:90:AF:A6:D2:78
X509v3 Authority Key Identifier:
keyid:43:6A:9B:90:ED:51:86:06:30:E8:C1:08:58:59:33:E3:81:FE:49:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/436A9B90ED51860630E8C108585933E381FE4900.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436A9B90ED51860630E8C108585933E381FE4900.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/436A9B90ED51860630E8C108585933E381FE4900.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:48:79:02:2b:99:0e:bd:71:3a:d3:a4:0b:46:7d:b4:82:29:
9c:46:28:27:31:15:cd:78:05:ca:88:c8:a0:22:f2:ea:5a:02:
d0:70:cf:74:b1:a4:88:98:69:85:8c:7a:aa:1f:39:5b:c3:22:
ed:fd:76:51:77:f8:f8:4b:d0:a3:9b:7a:d7:b6:3d:3d:28:f6:
16:05:c8:4a:5c:b0:c7:bc:da:e4:54:90:11:5c:e4:06:8f:5b:
d8:a8:4d:ea:81:f9:fe:34:17:33:ce:48:db:49:01:a9:d1:e0:
26:66:a6:5a:bb:88:bb:63:ab:86:a4:c5:ca:14:64:c5:90:ec:
00:7e:90:0c:d0:b7:54:21:5e:d8:86:67:d1:75:59:0a:2d:dc:
99:75:cc:b4:5f:70:14:8d:92:8f:8b:e9:65:60:07:13:84:b9:
b3:25:90:0f:5f:6c:e8:a2:86:b5:5c:ef:89:c0:38:ac:72:63:
22:f4:d8:44:c1:7d:33:3e:2d:d7:ec:a5:f2:74:cf:ea:98:45:
4f:c4:12:34:5e:30:73:b3:2d:38:6e:28:f6:42:60:31:f9:79:
30:22:49:f5:e5:38:dc:03:49:ca:33:63:38:a4:2f:58:5e:20:
5b:b9:49:61:db:39:fb:50:8f:62:d0:c9:44:92:27:23:08:2a:
48:1b:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:30:00 2025 by rpki-client