Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.mft
File: 0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.mft (raw, json)
Hash identifier: ZB2qiDh20YLthTrBf+ZKKzNFxBgYllzOtfsHyGPGdfg=
Subject key identifier: 0F:E1:7E:CD:55:42:7B:C6:81:85:9C:AE:08:89:70:0E:9E:50:C3:B7
Authority key identifier: 0C:B5:FA:63:FE:8A:75:BC:46:31:3C:51:DF:1E:80:C1:7F:64:03:9C
Certificate issuer: /CN=0CB5FA63FE8A75BC46313C51DF1E80C17F64039C
Certificate serial: 15EDF77ED5CBF51E0E2891DF55B3791083AD8F48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.mft
Manifest number: DC
Signing time: Tue 21 Jan 2025 09:32:07 +0000
Manifest this update: Tue 21 Jan 2025 09:27:07 +0000
Manifest next update: Wed 22 Jan 2025 11:27:07 +0000
Files and hashes: 1: 34352e3136322e3131322e302f32322d3332203d3e20323638353035.roa (hash: rT71IKt1INZ30BgjDNNE7yS66m/wHDjQTUXjGxkgXJQ=)
2: 0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.crl (hash: /EUYkBAkyO8Sj9uaFDCe4DrOYbGJVxcfgCdFjTOgpuc=)
3: 323830343a353234303a3a2f33322d313238203d3e20323638353035.roa (hash: ubKKfKAOrKdFisp41lmSV/Bz0MnBfuMsh2l+Grn/NaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ed:f7:7e:d5:cb:f5:1e:0e:28:91:df:55:b3:79:10:83:ad:8f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CB5FA63FE8A75BC46313C51DF1E80C17F64039C
Validity
Not Before: Jan 21 09:27:07 2025 GMT
Not After : Jan 22 11:27:07 2025 GMT
Subject: CN=0FE17ECD55427BC681859CAE0889700E9E50C3B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:4e:b9:de:e5:92:86:0a:bc:5a:90:5b:0e:
1b:86:ee:8a:74:b1:3d:e4:97:18:08:b3:bd:d1:44:
4b:bc:9a:2a:f6:32:71:bc:8d:54:bb:14:02:73:94:
cd:19:0a:9f:6d:95:4e:80:c1:a1:c5:cb:aa:94:56:
f9:1c:df:98:c9:f4:4a:e8:0a:b7:9b:8e:58:51:6d:
d5:ce:8e:7c:16:fe:1e:ec:c6:9e:f5:58:2a:4d:ab:
5a:f1:7c:d4:5d:d9:11:ae:de:aa:06:ad:d4:31:50:
45:1b:82:e7:c0:3d:94:35:8d:88:2f:b5:80:78:79:
a2:c5:b1:36:02:2a:49:88:3c:00:6f:e4:fd:71:19:
44:f3:84:69:60:ab:6b:d8:a0:02:78:ad:81:e4:34:
39:b7:e7:fc:aa:d6:cb:21:6e:35:db:0d:77:c0:95:
68:31:76:04:f5:4e:a8:86:f9:14:17:e0:77:8f:90:
80:c8:45:c9:5e:9f:30:22:99:4d:be:1a:d5:1b:0b:
66:04:33:e5:da:39:c1:10:0c:d0:a6:b4:d4:1c:1a:
17:74:e8:d7:69:ee:c9:f8:67:9a:b8:b6:ee:f4:1e:
e7:78:95:e8:83:3b:c6:52:ad:f5:f9:af:43:79:6d:
5c:ca:17:96:8a:63:4b:b0:8e:94:94:62:e7:d1:bd:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:7E:CD:55:42:7B:C6:81:85:9C:AE:08:89:70:0E:9E:50:C3:B7
X509v3 Authority Key Identifier:
keyid:0C:B5:FA:63:FE:8A:75:BC:46:31:3C:51:DF:1E:80:C1:7F:64:03:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2c:11:e3:8a:7c:0e:64:8f:64:76:2d:d5:0e:4d:36:06:25:
a3:9e:e8:30:d9:96:e9:ef:5d:b2:cb:b3:51:9c:bf:ca:6e:8d:
1b:74:e6:9c:91:27:cb:dd:24:8e:ef:c2:5f:3e:84:fa:b3:c9:
e7:96:47:a7:59:3b:be:24:0d:ad:3d:5c:65:d0:28:f5:6f:2d:
33:17:f2:ae:14:96:13:1f:4d:78:5d:14:18:a1:c1:c4:72:69:
f2:57:04:60:91:36:5d:cc:e8:2d:39:ee:a7:c1:4a:b1:ec:80:
92:3c:46:14:81:64:06:01:29:21:b7:69:39:2e:be:b7:91:0b:
73:1a:7b:fd:34:fa:d0:2a:30:e1:1a:2a:51:76:94:7c:0b:79:
6a:56:dd:9e:6c:65:7c:63:c1:cc:3b:9f:18:3b:80:5b:55:f5:
fc:dd:6e:c7:1f:46:7a:59:56:4d:b2:42:d4:07:1a:27:4c:7d:
c2:c3:7b:f7:94:23:87:35:50:b5:50:6d:be:33:20:c8:ac:e8:
26:07:c4:73:cd:9e:1a:07:49:dd:f6:a8:3b:32:fe:a1:29:3c:
c5:f1:52:8b:d1:89:f8:aa:5a:6c:bb:5f:b4:ec:dd:3a:03:e7:
3b:5f:2b:e1:9f:4a:84:a9:1b:8d:22:69:7c:ef:39:5a:13:89:
34:61:e8:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFe33ftXL9R4OKJHfVbN5EIOtj0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENCNUZBNjNGRThBNzVCQzQ2MzEzQzUxREYxRTgwQzE3
RjY0MDM5QzAeFw0yNTAxMjEwOTI3MDdaFw0yNTAxMjIxMTI3MDdaMDMxMTAvBgNV
BAMTKDBGRTE3RUNENTU0MjdCQzY4MTg1OUNBRTA4ODk3MDBFOUU1MEMzQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aE653uWShgq8WpBbDhuG7op0
sT3klxgIs73RREu8mir2MnG8jVS7FAJzlM0ZCp9tlU6AwaHFy6qUVvkc35jJ9Ero
CrebjlhRbdXOjnwW/h7sxp71WCpNq1rxfNRd2RGu3qoGrdQxUEUbgufAPZQ1jYgv
tYB4eaLFsTYCKkmIPABv5P1xGUTzhGlgq2vYoAJ4rYHkNDm35/yq1sshbjXbDXfA
lWgxdgT1TqiG+RQX4HePkIDIRclenzAimU2+GtUbC2YEM+XaOcEQDNCmtNQcGhd0
6Ndp7sn4Z5q4tu70Hud4leiDO8ZSrfX5r0N5bVzKF5aKY0uwjpSUYufRvdd5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUD+F+zVVCe8aBhZyuCIlwDp5Qw7cwHwYDVR0j
BBgwFoAUDLX6Y/6KdbxGMTxR3x6AwX9kA5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1FHVHV6aGdyVzgxZ1pvTkhOYk1hTGNadWZjQW9RWEwzOGRIRUtlTnZS
SEsvMC8wQ0I1RkE2M0ZFOEE3NUJDNDYzMTNDNTFERjFFODBDMTdGNjQwMzlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDQjVGQTYzRkU4QTc1QkM0
NjMxM0M1MURGMUU4MEMxN0Y2NDAzOUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1FHVHV6aGdyVzgxZ1pvTkhOYk1hTGNadWZjQW9RWEwzOGRIRUtlTnZSSEsvMC8w
Q0I1RkE2M0ZFOEE3NUJDNDYzMTNDNTFERjFFODBDMTdGNjQwMzlDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiywR44p8DmSPZHYt1Q5NNgYlo57oMNmW6e9dssuzUZy/ym6NG3TmnJEny90k
ju/CXz6E+rPJ55ZHp1k7viQNrT1cZdAo9W8tMxfyrhSWEx9NeF0UGKHBxHJp8lcE
YJE2XczoLTnup8FKseyAkjxGFIFkBgEpIbdpOS6+t5ELcxp7/TT60Cow4RoqUXaU
fAt5albdnmxlfGPBzDufGDuAW1X1/N1uxx9GellWTbJC1AcaJ0x9wsN795QjhzVQ
tVBtvjMgyKzoJgfEc82eGgdJ3faoOzL+oSk8xfFSi9GJ+KpabLtftOzdOgPnO18r
4Z9KhKkbjSJpfO85WhOJNGHoUg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:56:28 2025 by rpki-client