Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft
File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json)
Hash identifier: 0qLgc/Uki9RU2YXx/YV5IuKQqcnaXqCllnNL5zKck9U=
Subject key identifier: E4:34:B9:84:56:1C:34:54:62:6B:24:B8:46:13:AD:22:E7:A8:29:3C
Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC
Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC
Certificate serial: 5BE0A4B00CDA784D27CE65D94B415AFA8FE1AD71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft
Manifest number: 4B
Signing time: Fri 28 Mar 2025 21:39:31 +0000
Manifest this update: Fri 28 Mar 2025 21:34:31 +0000
Manifest next update: Sat 29 Mar 2025 23:16:31 +0000
Files and hashes: 1: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: BchCpf6yXFcb8ejWExBnO+P6wq6BAYEOjfH2VtA/AXY=)
2: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: ZIjfSo+Y8U8r36JCVeoF2b5UMYHuJK9csANlSvslsHk=)
3: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: vIm2Zj8tyzVDc+8CKc8N8ILHLVLvBtHG21RZkNA4OZE=)
4: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: 3g8/sjxV8E647/HAZRmu2PV+IP7H3yOgtmHvSu2jRew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e0:a4:b0:0c:da:78:4d:27:ce:65:d9:4b:41:5a:fa:8f:e1:ad:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC
Validity
Not Before: Mar 28 21:34:31 2025 GMT
Not After : Mar 29 23:16:31 2025 GMT
Subject: CN=E434B984561C3454626B24B84613AD22E7A8293C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:4b:c8:7a:eb:4b:dd:be:ce:d7:e5:95:cf:
77:61:91:d2:82:5a:f2:5a:78:36:49:fc:a7:31:94:
de:ca:be:c5:ad:05:aa:42:95:32:50:f9:32:84:8a:
51:c0:04:89:6b:f0:83:4a:82:e1:b6:71:6f:13:80:
ca:b0:84:8b:3c:70:aa:a6:2d:c9:2c:77:05:4c:f1:
e5:1e:2f:7d:19:aa:50:c0:32:fa:f9:fd:d6:e6:88:
9a:d6:02:17:80:51:4b:6e:ab:89:f6:65:80:f4:a9:
a4:bb:58:4c:91:66:8d:a3:39:63:1e:58:5c:a5:95:
78:2a:58:e5:8f:81:66:86:d9:e0:de:b6:a7:0f:da:
42:75:0d:99:5c:8f:d2:e7:cd:2a:2e:c1:c7:f7:b6:
2c:6f:2c:29:95:8e:d1:60:b6:d1:9f:60:a4:64:47:
d1:66:bf:86:96:8e:44:b6:01:0c:37:ff:90:55:f3:
26:c0:21:d8:58:58:a9:f0:3b:69:5e:bc:87:77:24:
e8:56:88:6e:2d:7a:51:bd:9d:aa:72:32:59:7a:38:
32:c7:fe:db:cd:9a:6f:aa:7d:a6:c0:59:94:d4:2e:
89:73:60:09:0c:1f:ae:b1:9a:3c:9a:48:ec:66:3b:
60:2e:80:56:70:aa:d0:09:03:5f:bd:12:5b:7b:ef:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:34:B9:84:56:1C:34:54:62:6B:24:B8:46:13:AD:22:E7:A8:29:3C
X509v3 Authority Key Identifier:
keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dc:a6:1b:ed:6a:cd:32:c6:9a:0a:da:66:ea:fc:a0:33:b1:
e2:b2:6a:04:a0:b4:e7:ec:4d:88:77:2b:c4:16:43:44:d0:94:
0b:ff:23:78:49:40:1b:42:59:82:57:39:2d:75:13:61:8b:3f:
c8:37:49:d7:bb:e8:a8:6b:e0:9a:2f:7e:39:2b:8d:5f:e0:5c:
e4:10:ad:0e:9e:d4:5f:d4:e1:5e:41:06:73:ee:ef:e7:fd:6e:
ae:dd:eb:e3:fd:c0:e8:f2:73:b2:9d:4c:28:e4:6e:27:65:33:
a2:95:43:04:7d:a7:77:37:44:c1:25:1a:84:ea:ff:d4:74:3d:
62:e8:66:67:a0:33:72:c4:99:57:6c:7d:a6:f1:0b:e2:49:ed:
bc:6b:0f:4d:b7:79:24:4c:54:7e:c1:aa:72:b6:a9:22:fa:ca:
b7:f8:ed:83:05:df:02:34:d3:96:21:27:c8:6a:74:48:7a:99:
ce:68:ba:4f:19:a0:5f:91:0e:40:73:46:32:0e:36:eb:ef:15:
ca:b5:64:12:5f:3a:75:11:76:ae:23:8c:af:a5:8b:97:b4:24:
d5:2f:49:66:ad:a7:e7:57:52:c6:7a:53:00:cd:f9:f1:b5:a6:
cc:e7:92:53:4e:10:0f:b2:6a:fb:58:7a:7b:b1:01:01:ac:d4:
2e:0b:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:00:39 2025 by rpki-client