Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft
File: 89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft (raw, json)
Hash identifier: jkEoYuTCv/4otiVFmD5zXyKWjrPsq0RJ8RHn/BaSPcU=
Subject key identifier: 6C:C5:54:41:D6:B6:4A:19:28:E6:E2:BF:46:3B:30:7C:7F:4C:9A:3A
Authority key identifier: 89:D0:EF:B5:A2:15:00:E4:54:E7:48:2B:40:2F:82:71:A8:C5:9A:B2
Certificate issuer: /CN=89D0EFB5A21500E454E7482B402F8271A8C59AB2
Certificate serial: 7A08070BE3D3C8E86C7775E7E10A3A475393CD1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89D0EFB5A21500E454E7482B402F8271A8C59AB2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft
Manifest number: 0A
Signing time: Mon 10 Feb 2025 20:17:25 +0000
Manifest this update: Mon 10 Feb 2025 20:12:25 +0000
Manifest next update: Tue 11 Feb 2025 23:55:25 +0000
Files and hashes: 1: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: u+Qk8Xpa7/Deibj2TRdA4jwMyHXxLwKRgFtaJE/l+/4=)
2: 89D0EFB5A21500E454E7482B402F8271A8C59AB2.crl (hash: ekkg++u3QDJtmgnIHNiswanxsdrJfCvbmI34Rc5kf3k=)
3: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: ufDr4eqcvWyMbq5VB9Kmt5v3AgBqgaeCy7gdRNnwl7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:08:07:0b:e3:d3:c8:e8:6c:77:75:e7:e1:0a:3a:47:53:93:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89D0EFB5A21500E454E7482B402F8271A8C59AB2
Validity
Not Before: Feb 10 20:12:25 2025 GMT
Not After : Feb 11 23:55:25 2025 GMT
Subject: CN=6CC55441D6B64A1928E6E2BF463B307C7F4C9A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:ad:10:0f:2d:14:21:16:21:cc:ee:c1:f8:
12:87:59:3e:c5:09:00:1c:48:f0:25:51:7c:74:92:
4e:b9:82:d4:de:3d:f2:72:e2:2e:2a:2c:ec:41:ee:
d9:89:01:6e:80:47:05:cd:50:c2:b4:6a:e0:15:a8:
24:82:e2:87:7f:90:fd:d5:ec:ef:a5:60:a8:58:0a:
ee:4c:f4:a0:11:9f:ae:2a:a4:83:6d:f3:3a:71:9f:
06:9c:29:15:89:93:5d:5c:0f:4a:47:96:89:f2:ab:
ae:9d:d0:45:9c:15:cb:66:fa:95:ba:09:ff:65:75:
c8:7b:5b:e5:58:de:d4:22:04:55:02:3d:d5:40:fb:
83:99:76:4a:fc:ec:b2:36:e2:ab:1c:ae:34:3f:f3:
59:8e:2f:94:93:ef:77:04:98:0d:06:9a:7d:39:28:
77:b1:e9:80:87:8b:4f:ef:93:8d:9f:ee:29:99:c0:
72:77:7b:e7:8f:d0:3f:36:ef:d8:0d:ae:70:bd:e6:
40:7a:b5:e5:53:d6:be:17:e7:f1:93:d8:66:8c:f1:
4b:46:5a:05:d4:52:ce:1f:81:68:b8:40:6e:92:d2:
02:14:29:6c:a7:26:e4:3c:4d:09:ff:a5:83:86:4d:
d6:81:3c:e3:70:03:8d:55:6e:c4:77:02:ab:26:20:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C5:54:41:D6:B6:4A:19:28:E6:E2:BF:46:3B:30:7C:7F:4C:9A:3A
X509v3 Authority Key Identifier:
keyid:89:D0:EF:B5:A2:15:00:E4:54:E7:48:2B:40:2F:82:71:A8:C5:9A:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89D0EFB5A21500E454E7482B402F8271A8C59AB2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a1:b2:de:fc:3a:0a:0a:ab:50:af:e2:f9:d7:e5:12:ae:e6:
f2:1d:9f:59:a9:8b:b3:d1:ee:64:ae:0b:63:f4:c0:8a:16:c3:
4e:ec:e3:bb:e4:40:bd:a7:f2:98:0a:04:66:b1:cb:58:6b:82:
a4:88:8e:22:68:37:21:5a:ce:64:02:59:af:78:5b:85:d5:e2:
9f:56:24:1c:75:7f:4d:e7:bf:aa:10:ab:9a:2d:42:91:f9:db:
0f:62:ef:36:cb:4f:ad:ec:12:70:52:35:16:94:4c:71:9f:78:
38:fe:65:82:db:91:e1:18:d7:bf:99:10:69:a7:fe:51:65:40:
31:ba:6d:48:e8:cb:37:10:ac:27:cf:97:19:1f:1b:7f:e8:f7:
f8:d5:4f:d0:ab:37:a2:e3:4a:29:e6:bf:f2:7d:e0:7c:29:a9:
c4:32:f8:e1:48:25:d2:3c:57:a7:4f:2f:bf:1d:9c:75:62:6c:
d3:81:ab:bb:1f:51:2a:e2:2a:be:97:bb:fe:55:53:27:50:a2:
a5:f9:75:a3:f7:ed:80:33:42:84:50:d3:ef:52:fe:de:61:6b:
b5:d0:d7:fb:56:03:80:a2:ef:d0:eb:c5:26:c5:f8:5e:1a:60:
fa:70:7a:36:e9:2e:85:6d:34:4d:e1:1a:07:12:d9:f0:3a:66:
27:c1:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:23 2025 by rpki-client