Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.mft
File: 28857FFB1C89717722FA38DFF8D836C0ED8999DF.mft (raw, json)
Hash identifier: pClOTeGeKaeCYsF69u6kbO/4x8LEj8srWear7p2ZLJI=
Subject key identifier: AE:8C:2E:CD:33:74:4D:91:C7:88:60:EA:4B:6A:DF:0D:A4:E0:F3:5F
Authority key identifier: 28:85:7F:FB:1C:89:71:77:22:FA:38:DF:F8:D8:36:C0:ED:89:99:DF
Certificate issuer: /CN=28857FFB1C89717722FA38DFF8D836C0ED8999DF
Certificate serial: 55C1934A3F6FBD7D467DD1B2FCEF6E9F9207F2F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.mft
Manifest number: 03F3
Signing time: Mon 15 Apr 2024 11:10:00 +0000
Manifest this update: Mon 15 Apr 2024 11:05:00 +0000
Manifest next update: Tue 16 Apr 2024 11:10:00 +0000
Files and hashes: 1: 323830343a383432343a3a2f33322d3332203d3e20323732323432.roa (hash: 7EeXuL7INif1OVUF/t81ERCLQzicsowfhpaSrxRiELE=)
2: 28857FFB1C89717722FA38DFF8D836C0ED8999DF.crl (hash: +s2KCOCVdBdXJ94CI7tkGU3KtXvAUQBf1FkXE7IY5Hw=)
3: 323830343a383432343a343030303a3a2f34302d3430203d3e20323732323432.roa (hash: iygxjZ5Le7uzXiyKSQ7fMiCUbQeap0IsLrncmJ6Wf/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c1:93:4a:3f:6f:bd:7d:46:7d:d1:b2:fc:ef:6e:9f:92:07:f2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28857FFB1C89717722FA38DFF8D836C0ED8999DF
Validity
Not Before: Apr 15 11:05:00 2024 GMT
Not After : Apr 16 11:10:00 2024 GMT
Subject: CN=3082010A0282010100CCBB3B9A2B47E498F108F82C36988300ECFDEC52CC77D8CED18A09BE18DD45CBA3C6AD11BD26C6B3DF0E1C80E1DEFC98C2A45540D6E3DE01809DBC2D34D57097B9F3329A9B7CA4F8E6E823CC5BFDE73FFA66D6BFC5C13F8084EDDEDF642ED095EEDB66785D78E11334E5B8C981ECC8BCE209A3B8C2AFE154A97FC9147DF42661AD83BEB6E7166116AAAB406C02391AC255DCB1CBA4E0961B6DF0D97DFD8B6D000B608B93564FD73B20EAEB67DD0213476EE74E4B10CAD9445241A5D04A4C7394B523849248436ABDC200A328FD61ECBE046054525FF3AE96BDFCAD40256681336CC2E6F1B43CD4F2559D0629FF4110A2D9601290266DC7E78AAA64B6234414A10203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:3b:9a:2b:47:e4:98:f1:08:f8:2c:36:98:
83:00:ec:fd:ec:52:cc:77:d8:ce:d1:8a:09:be:18:
dd:45:cb:a3:c6:ad:11:bd:26:c6:b3:df:0e:1c:80:
e1:de:fc:98:c2:a4:55:40:d6:e3:de:01:80:9d:bc:
2d:34:d5:70:97:b9:f3:32:9a:9b:7c:a4:f8:e6:e8:
23:cc:5b:fd:e7:3f:fa:66:d6:bf:c5:c1:3f:80:84:
ed:de:df:64:2e:d0:95:ee:db:66:78:5d:78:e1:13:
34:e5:b8:c9:81:ec:c8:bc:e2:09:a3:b8:c2:af:e1:
54:a9:7f:c9:14:7d:f4:26:61:ad:83:be:b6:e7:16:
61:16:aa:ab:40:6c:02:39:1a:c2:55:dc:b1:cb:a4:
e0:96:1b:6d:f0:d9:7d:fd:8b:6d:00:0b:60:8b:93:
56:4f:d7:3b:20:ea:eb:67:dd:02:13:47:6e:e7:4e:
4b:10:ca:d9:44:52:41:a5:d0:4a:4c:73:94:b5:23:
84:92:48:43:6a:bd:c2:00:a3:28:fd:61:ec:be:04:
60:54:52:5f:f3:ae:96:bd:fc:ad:40:25:66:81:33:
6c:c2:e6:f1:b4:3c:d4:f2:55:9d:06:29:ff:41:10:
a2:d9:60:12:90:26:6d:c7:e7:8a:aa:64:b6:23:44:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8C:2E:CD:33:74:4D:91:C7:88:60:EA:4B:6A:DF:0D:A4:E0:F3:5F
X509v3 Authority Key Identifier:
keyid:28:85:7F:FB:1C:89:71:77:22:FA:38:DF:F8:D8:36:C0:ED:89:99:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ba:93:e4:58:fc:17:63:64:e4:e2:fb:da:e5:c7:af:3e:7c:
ff:62:8c:9c:5a:7e:0e:4d:bc:d6:d5:b9:a2:ed:9a:d0:00:29:
4c:63:a1:04:1f:d3:b4:a9:d2:79:b7:fd:1a:bf:23:b3:1d:d9:
1f:e7:04:f8:a8:0e:73:dc:9f:11:10:dc:26:b4:27:40:c3:c2:
3d:8b:22:21:df:56:0d:59:3b:35:c6:2f:f2:91:bb:41:b6:fa:
3f:12:c2:b6:41:ed:48:c2:0f:08:69:46:35:60:fc:ab:a1:12:
87:b5:8d:a3:b4:0d:f7:18:00:99:77:32:fd:1c:dc:9f:77:7e:
0b:83:0b:a7:19:8c:01:71:c1:c9:e1:10:78:6e:82:fd:d0:f1:
a9:83:eb:19:3d:58:0a:d3:e8:95:4d:09:a6:fa:f5:bd:96:f5:
48:8d:e9:1c:25:51:58:a5:53:02:18:2f:4b:b1:cd:93:47:10:
59:1f:be:44:f6:07:c2:5b:dd:b6:e3:51:39:3a:c9:61:1a:ac:
ce:fd:e6:31:28:cd:85:4d:a7:7d:6e:39:4e:44:df:cf:d3:88:
1c:11:0b:90:fe:8d:9f:7a:ba:47:21:c1:19:a0:9b:86:c1:4b:
e8:e0:2b:7b:3a:af:77:7d:d7:c2:2a:48:24:cb:88:9e:29:8e:
e9:65:af:14
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUVcGTSj9vvX1GfdGy/O9un5IH8vUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg4NTdGRkIxQzg5NzE3NzIyRkEzOERGRjhEODM2QzBF
RDg5OTlERjAeFw0yNDA0MTUxMTA1MDBaFw0yNDA0MTYxMTEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NCQjNCOUEyQjQ3RTQ5OEYx
MDhGODJDMzY5ODgzMDBFQ0ZERUM1MkNDNzdEOENFRDE4QTA5QkUxOERENDVDQkEz
QzZBRDExQkQyNkM2QjNERjBFMUM4MEUxREVGQzk4QzJBNDU1NDBENkUzREUwMTgw
OURCQzJEMzRENTcwOTdCOUYzMzI5QTlCN0NBNEY4RTZFODIzQ0M1QkZERTczRkZB
NjZENkJGQzVDMTNGODA4NEVEREVERjY0MkVEMDk1RUVEQjY2Nzg1RDc4RTExMzM0
RTVCOEM5ODFFQ0M4QkNFMjA5QTNCOEMyQUZFMTU0QTk3RkM5MTQ3REY0MjY2MUFE
ODNCRUI2RTcxNjYxMTZBQUFCNDA2QzAyMzkxQUMyNTVEQ0IxQ0JBNEUwOTYxQjZE
RjBEOTdERkQ4QjZEMDAwQjYwOEI5MzU2NEZENzNCMjBFQUVCNjdERDAyMTM0NzZF
RTc0RTRCMTBDQUQ5NDQ1MjQxQTVEMDRBNEM3Mzk0QjUyMzg0OTI0ODQzNkFCREMy
MDBBMzI4RkQ2MUVDQkUwNDYwNTQ1MjVGRjNBRTk2QkRGQ0FENDAyNTY2ODEzMzZD
QzJFNkYxQjQzQ0Q0RjI1NTlEMDYyOUZGNDExMEEyRDk2MDEyOTAyNjZEQzdFNzhB
QUE2NEI2MjM0NDE0QTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzLs7mitH5JjxCPgsNpiDAOz97FLMd9jO0YoJvhjdRcujxq0RvSbG
s98OHIDh3vyYwqRVQNbj3gGAnbwtNNVwl7nzMpqbfKT45ugjzFv95z/6Zta/xcE/
gITt3t9kLtCV7ttmeF144RM05bjJgezIvOIJo7jCr+FUqX/JFH30JmGtg7625xZh
FqqrQGwCORrCVdyxy6Tglhtt8Nl9/YttAAtgi5NWT9c7IOrrZ90CE0du505LEMrZ
RFJBpdBKTHOUtSOEkkhDar3CAKMo/WHsvgRgVFJf866WvfytQCVmgTNswubxtDzU
8lWdBin/QRCi2WASkCZtx+eKqmS2I0QUoQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FK6MLs0zdE2Rx4hg6ktq3w2k4PNfMB8GA1UdIwQYMBaAFCiFf/sciXF3Ivo43/jY
NsDtiZnfMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNxc1cyV2hwVHM2eEQx
RHJQNEZ4ZjJZZWU1b3RHZnc0N3RIaUdxRU1IZWdyLzAvMjg4NTdGRkIxQzg5NzE3
NzIyRkEzOERGRjhEODM2QzBFRDg5OTlERi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yODg1N0ZGQjFDODk3MTc3MjJGQTM4REZGOEQ4MzZDMEVEODk5
OURGLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNxc1cyV2hwVHM2eEQxRHJQNEZ4
ZjJZZWU1b3RHZnc0N3RIaUdxRU1IZWdyLzAvMjg4NTdGRkIxQzg5NzE3NzIyRkEz
OERGRjhEODM2QzBFRDg5OTlERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIi6k+RY/BdjZOTi+9rlx68+
fP9ijJxafg5NvNbVuaLtmtAAKUxjoQQf07Sp0nm3/Rq/I7Md2R/nBPioDnPcnxEQ
3Ca0J0DDwj2LIiHfVg1ZOzXGL/KRu0G2+j8SwrZB7UjCDwhpRjVg/KuhEoe1jaO0
DfcYAJl3Mv0c3J93fguDC6cZjAFxwcnhEHhugv3Q8amD6xk9WArT6JVNCab69b2W
9UiN6RwlUVilUwIYL0uxzZNHEFkfvkT2B8Jb3bbjUTk6yWEarM795jEozYVNp31u
OU5E38/TiBwRC5D+jZ96ukchwRmgm4bBS+jgK3s6r3d918IqSCTLiJ4pjullrxQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org