Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft
File: 02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft (raw, json)
Hash identifier: 2onbUavJMZuRK0wwszm8uz98nomq25DH2WpzwvnaMKs=
Subject key identifier: 2B:55:20:D4:58:B2:D8:80:81:A9:DE:C2:90:BD:BE:D2:9A:FB:F4:19
Authority key identifier: 02:A8:99:EE:C2:9A:12:C9:18:BD:AF:B4:FE:9E:A4:EE:76:04:F5:7B
Certificate issuer: /CN=02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B
Certificate serial: 3B03033F566CF9E05E57DCA8D0B304B611DDE3A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft
Manifest number: 017E
Signing time: Thu 16 Jan 2025 00:53:42 +0000
Manifest this update: Thu 16 Jan 2025 00:48:40 +0000
Manifest next update: Fri 17 Jan 2025 00:57:40 +0000
Files and hashes: 1: 02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.crl (hash: qknHd9ZyQ4t1kv1HRQ81dAYjTO8rCvOjth67/Wcl6eM=)
2: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: GTMmaps83KIyQfD52BupOZEennV0bzOePHnC0MGWVz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:03:03:3f:56:6c:f9:e0:5e:57:dc:a8:d0:b3:04:b6:11:dd:e3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B
Validity
Not Before: Jan 16 00:48:40 2025 GMT
Not After : Jan 17 00:57:40 2025 GMT
Subject: CN=2B5520D458B2D88081A9DEC290BDBED29AFBF419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:af:5c:c6:30:e5:48:50:fb:fc:89:42:7b:
1b:5f:89:ad:e5:6a:26:f0:fd:5a:77:e7:3f:59:f8:
c6:ee:f9:b1:2f:a5:36:39:ba:1c:32:90:bf:ab:b7:
13:04:f9:51:c8:02:b2:9f:ed:48:65:1a:fd:8e:7d:
d2:dc:b6:8f:cd:2c:2d:b4:97:ad:02:f7:5e:ae:a7:
69:26:73:a6:29:46:6a:33:6d:c4:3a:5c:ce:96:ee:
18:ee:24:fa:7d:0d:61:fa:17:e0:f3:1a:db:f7:3e:
12:7b:7e:5e:3a:38:9f:ee:36:8f:fb:c7:ec:91:8b:
e4:19:de:8a:c6:02:52:3a:d8:b0:3a:7a:ab:5e:84:
7e:78:03:2f:07:2d:cc:e1:fc:bf:e8:b1:05:fe:f8:
51:c8:51:32:06:9d:9e:99:d8:51:54:8c:21:fc:55:
19:c9:70:93:b1:9b:3b:81:38:b0:1f:37:db:a1:4c:
c2:e6:f3:97:79:8f:96:ca:85:4d:e2:cf:18:61:4e:
d5:f2:4a:66:37:a0:5c:e3:79:8b:f4:9c:1d:77:f5:
23:89:3b:e6:e5:f4:21:4c:5f:75:92:f7:33:32:6d:
6b:1c:33:09:04:a6:3c:51:83:48:4c:0c:50:d3:45:
a6:88:6f:d5:4e:28:80:45:83:f2:e0:11:40:e6:02:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:20:D4:58:B2:D8:80:81:A9:DE:C2:90:BD:BE:D2:9A:FB:F4:19
X509v3 Authority Key Identifier:
keyid:02:A8:99:EE:C2:9A:12:C9:18:BD:AF:B4:FE:9E:A4:EE:76:04:F5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:dc:e9:69:25:14:19:0e:05:6c:2e:bf:fc:1e:c5:66:28:50:
10:83:76:bc:cd:82:1f:c7:56:ba:0d:f2:6b:7a:0f:16:21:cb:
f3:a4:1c:59:db:af:9f:d7:47:90:a1:a3:89:22:9f:70:47:66:
67:e9:12:00:67:0c:7b:bb:fa:cf:8a:5b:7a:a5:78:38:d5:51:
44:42:8f:23:41:a9:24:e3:29:33:3a:ea:ad:45:80:1e:77:4c:
13:62:6e:b2:0c:a7:85:63:2d:c7:28:12:50:65:6c:a2:f9:02:
47:f4:96:47:ac:44:84:a0:69:85:b9:27:d7:46:ff:46:9e:af:
1b:99:d7:38:41:2f:0f:65:c0:93:81:63:bd:02:bc:20:ce:4e:
4c:b0:eb:8e:5e:5f:55:f2:dd:17:9c:47:a0:c9:21:e9:db:b9:
ab:34:61:5f:b1:41:3a:48:c0:0f:5e:32:0e:e8:38:ef:2c:39:
cc:73:94:cf:06:a9:98:30:2e:05:94:7c:53:8f:16:c3:22:ad:
54:f3:27:3c:5d:1f:ff:41:bd:eb:75:1c:70:9f:6e:1f:d4:62:
61:0b:fd:be:f2:37:3f:bf:0a:e3:60:ec:ed:0e:0b:75:14:fc:
3d:8c:52:fa:b7:90:89:75:bf:65:37:68:36:f8:3f:27:9f:4f:
cd:b5:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:32:29 2025 by rpki-client