Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft
File: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft (raw, json)
Hash identifier: +jL/azYOpxXpzMC5xfuGvhHD/rSsq6zCqE3/Q9gB0r8=
Subject key identifier: CA:4F:AE:DE:21:4F:71:08:41:D9:89:A5:5E:14:E4:6C:68:1F:7B:36
Authority key identifier: DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42
Certificate issuer: /CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542
Certificate serial: 4321BEB1D5A5654C1E8543D9A2A58EB017C82312
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft
Manifest number: 87
Signing time: Fri 28 Mar 2025 17:37:18 +0000
Manifest this update: Fri 28 Mar 2025 17:32:18 +0000
Manifest next update: Sat 29 Mar 2025 20:41:18 +0000
Files and hashes: 1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: zkubuxRpLG1gutEslbctXHKpEp2A7E4iQzNQuetKYz4=)
2: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl (hash: dRBYXq1U0FPldioWZshal7Bx+qIeU6DrE9RgUy4F4OM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:21:be:b1:d5:a5:65:4c:1e:85:43:d9:a2:a5:8e:b0:17:c8:23:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542
Validity
Not Before: Mar 28 17:32:18 2025 GMT
Not After : Mar 29 20:41:18 2025 GMT
Subject: CN=CA4FAEDE214F710841D989A55E14E46C681F7B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:10:be:ad:d2:1a:a3:ff:b2:54:26:b2:51:
ab:a7:96:c0:92:ad:cd:16:db:79:d5:55:56:d9:fa:
c3:29:13:73:b2:d9:66:57:7e:76:85:2a:4d:04:59:
b2:ae:4a:eb:1a:c6:c2:a6:89:f6:ed:bb:f9:e8:e6:
11:06:ce:2e:8b:de:23:3e:2f:09:e7:c9:eb:64:41:
b2:9d:fe:10:29:95:5c:a1:7e:13:bc:6f:24:35:ed:
c9:55:83:11:f7:2b:48:0b:68:be:2a:a9:45:18:a5:
d9:76:29:e6:7b:13:2f:ba:fe:26:7a:7d:58:b7:f9:
d4:22:df:bc:66:05:65:84:5c:46:9c:c5:cc:a1:dd:
6a:21:83:43:f7:f8:57:3b:55:6c:a3:7a:48:0e:e4:
4b:03:ca:37:5f:84:a8:ed:f7:38:82:bd:45:6d:45:
ed:e5:34:6a:cb:a9:bc:77:0f:f6:e2:5f:e5:b4:af:
0f:d2:6f:d3:b1:c2:9c:e0:51:8d:57:ce:b9:38:3f:
6d:0b:99:6f:4c:f7:b8:bb:21:44:b0:2b:c6:d9:33:
12:53:6e:c1:da:22:91:85:4a:31:5e:31:45:5c:27:
6b:f8:c9:fa:e1:b4:89:4a:3b:72:0d:b6:46:82:1f:
e6:e2:47:f5:8a:85:57:5f:c0:d4:36:e8:c3:60:a0:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:AE:DE:21:4F:71:08:41:D9:89:A5:5E:14:E4:6C:68:1F:7B:36
X509v3 Authority Key Identifier:
keyid:DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:08:2c:4c:9c:bc:31:ee:85:d5:18:04:af:68:0f:21:25:
01:86:61:d5:d1:9c:df:15:92:c2:87:65:60:e2:99:1d:7a:c1:
9a:e4:ed:f0:53:59:f0:bc:c9:79:ab:c9:c8:fd:1a:d2:d9:58:
5b:99:87:99:f3:d0:b7:14:a1:a4:51:19:f6:6a:40:46:c4:6f:
c2:84:d5:7d:5d:b0:cd:b6:3d:75:f7:ab:b2:ff:0c:a9:11:31:
47:d6:a4:71:8f:be:03:70:01:ae:a5:aa:90:85:32:c2:45:45:
f1:e1:24:29:9d:93:01:fb:cf:30:f0:df:af:2d:5b:15:18:0b:
66:6a:26:2b:ab:c2:cf:38:00:4c:37:cf:15:a5:20:d5:7a:e5:
ac:c2:00:7a:cb:be:81:63:2c:e9:19:b4:d6:38:f4:d3:48:85:
78:c0:ef:9c:85:1b:c5:a8:02:72:d8:b6:bf:5c:24:21:8f:be:
cf:87:b2:d6:4a:a4:11:e6:d6:0b:62:8d:13:45:8a:c5:c9:32:
50:08:59:d1:b8:fc:2c:2f:c8:6a:40:e4:3f:87:38:ec:98:b5:
da:56:3e:19:5a:27:5a:d5:cc:72:86:d3:51:00:a8:b6:74:ae:
20:f3:dc:81:82:55:55:f3:99:1e:d9:cb:eb:17:53:82:e7:58:
18:5a:34:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:12 2025 by rpki-client