Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
File: 1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft (raw, json)
Hash identifier: a7odKIwWr02IH5ynl8ntDajPxXKBGQfaZ0MZnH1rNTA=
Subject key identifier: EF:83:80:65:E7:2B:86:01:E8:CD:34:35:42:32:B6:CA:50:A5:F2:94
Authority key identifier: 12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE
Certificate issuer: /CN=1254D60C0E743AE17BC43FD38413C27FDD4AE0CE
Certificate serial: 7D2F69282426D07D08981964709F1941DF01FC6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
Manifest number: 66
Signing time: Mon 06 Jan 2025 15:58:57 +0000
Manifest this update: Mon 06 Jan 2025 15:53:57 +0000
Manifest next update: Tue 07 Jan 2025 19:28:57 +0000
Files and hashes: 1: 3137372e32332e32302e302f32322d3332203d3e203532373537.roa (hash: BL/Itfvnx45bbm6nQRJXFTZMwuepTKIU9PAmM+XtjvI=)
2: 1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl (hash: HQM04mG4sX/TemufUdbYYjsdD1tzxoPmAyn8FzELMNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2f:69:28:24:26:d0:7d:08:98:19:64:70:9f:19:41:df:01:fc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1254D60C0E743AE17BC43FD38413C27FDD4AE0CE
Validity
Not Before: Jan 6 15:53:57 2025 GMT
Not After : Jan 7 19:28:57 2025 GMT
Subject: CN=EF838065E72B8601E8CD34354232B6CA50A5F294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:7a:ae:76:fc:ef:41:d9:d9:46:7c:55:b2:
27:74:ea:be:a7:8a:fd:fc:29:be:89:d9:6c:a4:96:
e7:b4:ae:6a:09:2d:35:8f:25:ea:b3:c7:c1:56:21:
05:5a:e3:71:6b:04:c1:75:23:71:57:b6:9f:8f:52:
15:e2:1c:83:05:09:d4:1c:61:79:08:0c:46:42:f0:
90:ae:bf:cc:a5:50:cc:5a:53:01:0b:7a:c0:2c:fd:
6a:3d:66:35:12:82:44:bb:bb:f1:3d:3d:2b:30:79:
63:95:50:1b:f4:d6:64:d2:51:e8:36:7f:f8:b5:92:
70:a2:b3:d1:70:b5:c7:51:1c:97:c9:ad:06:4d:99:
27:aa:7f:49:15:41:54:00:0a:31:b1:eb:cc:84:a6:
f4:5b:d5:28:6e:43:39:f9:38:db:54:86:b7:85:ca:
ee:37:2c:f8:05:56:10:fc:0d:84:ca:4d:35:13:3d:
5d:18:be:61:e3:97:e4:78:3b:a5:80:12:4e:f2:45:
be:78:3a:23:99:77:e0:c3:0e:6b:15:47:0f:01:cb:
ae:bd:3c:35:16:0a:53:8a:1e:56:22:7c:c1:28:1d:
e2:34:63:2c:2f:e8:3b:6a:30:4a:fe:ee:a1:57:43:
b1:c1:63:9b:9e:5e:99:61:59:10:b2:de:79:dd:3d:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:83:80:65:E7:2B:86:01:E8:CD:34:35:42:32:B6:CA:50:A5:F2:94
X509v3 Authority Key Identifier:
keyid:12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f4:71:bd:45:ba:0a:23:c5:04:32:bc:b5:0e:b2:2f:d8:4c:
14:bc:ae:44:2d:8d:de:7c:11:f3:90:58:96:f4:1f:34:f6:f1:
08:46:43:44:1d:fc:3e:5c:90:a8:ce:57:dd:a3:47:3e:21:14:
a5:e1:dd:11:ad:ed:e1:b3:88:b5:db:4e:f5:49:52:b7:d5:c0:
e9:ea:24:19:cb:4f:be:79:cd:88:e4:b5:f4:36:28:68:a4:e7:
25:4d:bd:a3:44:9e:75:1b:c8:f5:1d:e5:6b:97:de:e1:7b:a7:
35:f8:ac:1f:28:f3:fe:df:01:cc:9c:d8:c5:8f:72:ed:39:18:
92:c7:88:57:fe:2a:81:39:59:17:09:2d:1b:80:c2:d9:53:4c:
d1:7f:ec:17:50:62:f4:81:df:e3:9c:0a:3a:be:98:fc:21:b8:
e0:a9:3c:83:a5:a5:7c:1a:78:be:c4:78:bd:af:70:b2:88:6e:
1b:53:bd:1a:cb:66:9d:77:5c:44:3f:f4:9f:1f:cb:ef:24:ed:
23:62:bc:3f:31:aa:01:08:82:3d:8e:ff:bc:ae:7b:24:a3:3c:
28:89:04:d4:79:52:c0:31:4d:d9:cc:dc:1c:11:1d:82:35:65:
fb:30:24:f6:3a:f5:79:68:ba:38:25:c7:8f:74:75:ec:03:a3:
43:d0:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:36:14 2025 by rpki-client