Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/2/120A9C3453B5738E8A876659112F7012CE9B71A6.mft
File: 120A9C3453B5738E8A876659112F7012CE9B71A6.mft (raw, json)
Hash identifier: Z8T3x+JJm2qJrfrgY3nlD4pQYxwuTvbNXCeNb7A2Kb4=
Subject key identifier: 28:CB:85:31:0B:FF:C0:14:72:F8:CC:CA:6F:12:D1:8E:15:81:D8:EA
Authority key identifier: 12:0A:9C:34:53:B5:73:8E:8A:87:66:59:11:2F:70:12:CE:9B:71:A6
Certificate issuer: /CN=120A9C3453B5738E8A876659112F7012CE9B71A6
Certificate serial: 17F7367376FCB3F96C389EE9288AB638405789BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120A9C3453B5738E8A876659112F7012CE9B71A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/2/120A9C3453B5738E8A876659112F7012CE9B71A6.mft
Manifest number: 02
Signing time: Mon 23 Dec 2024 14:29:59 +0000
Manifest this update: Mon 23 Dec 2024 14:24:59 +0000
Manifest next update: Tue 24 Dec 2024 17:15:59 +0000
Files and hashes: 1: 120A9C3453B5738E8A876659112F7012CE9B71A6.crl (hash: JHTV1IRgfyexWgVWMbHf3bp0JY4g0QYUUSed1h3txkc=)
2: AS28202.roa (hash: OEjsYX7YHZwzVl7Ebbsaz3BJMU9aP1vzxR6T5LtltkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f7:36:73:76:fc:b3:f9:6c:38:9e:e9:28:8a:b6:38:40:57:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=120A9C3453B5738E8A876659112F7012CE9B71A6
Validity
Not Before: Dec 23 14:24:59 2024 GMT
Not After : Dec 24 17:15:59 2024 GMT
Subject: CN=28CB85310BFFC01472F8CCCA6F12D18E1581D8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:2c:2a:d3:93:09:d3:8c:da:65:59:38:d6:
65:6f:c2:72:2e:e7:6b:71:b1:57:74:9d:19:cd:2f:
7b:5f:6e:b4:13:89:70:54:57:ed:d4:28:fd:ee:81:
b1:ab:af:fb:8e:63:e6:8d:b7:8a:c5:3f:9d:a1:a6:
b4:66:55:4d:d5:bd:78:99:ab:2a:3b:24:e8:a1:26:
b4:3e:a8:7b:e9:9f:bb:7c:8e:2f:c5:ad:2f:27:8e:
d1:fe:c1:aa:35:26:05:9e:0b:90:58:b6:76:89:8b:
08:95:9d:dd:fe:04:ba:54:3b:22:b3:a7:aa:02:e2:
0c:f0:e1:d8:5c:bb:b8:4a:b7:2f:30:ab:52:8b:77:
46:7d:60:74:32:ec:89:0c:e8:80:1f:2d:a3:ef:26:
a6:62:57:b7:93:a8:df:3e:aa:1a:5b:43:59:a2:2e:
a2:59:89:c0:a9:14:39:20:24:ae:de:84:e4:0f:63:
e5:1a:a6:4e:28:66:4e:34:c5:2d:b5:53:ae:39:a9:
59:ff:c0:68:28:6d:ed:42:6d:cc:f4:64:1e:75:8e:
7a:67:75:c1:b1:99:f6:fd:82:db:9a:b8:71:9e:cc:
78:c6:78:0e:42:f8:a9:0c:52:5b:97:d3:d8:af:bb:
af:ce:eb:79:71:f8:33:1f:6e:fb:87:79:9a:ee:32:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CB:85:31:0B:FF:C0:14:72:F8:CC:CA:6F:12:D1:8E:15:81:D8:EA
X509v3 Authority Key Identifier:
keyid:12:0A:9C:34:53:B5:73:8E:8A:87:66:59:11:2F:70:12:CE:9B:71:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/2/120A9C3453B5738E8A876659112F7012CE9B71A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120A9C3453B5738E8A876659112F7012CE9B71A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/2/120A9C3453B5738E8A876659112F7012CE9B71A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6d:11:8e:b3:79:a8:cf:eb:5b:1c:37:08:0a:4b:e9:f9:e9:
2c:2a:41:21:57:c9:20:78:86:df:d7:3d:68:53:34:6e:2b:20:
b2:71:d6:9b:cf:ee:d7:59:30:25:e8:67:49:5b:86:57:ae:35:
7e:47:6b:16:be:a1:33:9c:70:18:ff:ab:4e:16:2b:f8:b0:de:
d0:51:80:ff:1b:3b:42:ea:b0:95:32:19:72:57:81:2a:7d:f3:
f3:a5:ef:9b:ad:c3:85:79:e7:ad:ba:99:3c:e8:97:09:c9:c9:
4e:d0:65:5c:12:2d:ac:50:f1:38:d8:91:9a:ce:37:c2:74:c7:
14:7c:59:a8:12:cb:d1:87:e2:01:ec:a1:4a:7c:2d:ea:af:ca:
82:0d:16:c2:ac:1b:12:40:01:bf:df:28:c0:11:1c:2d:d1:ad:
8c:7e:12:b3:5b:6b:b3:d0:cf:6c:81:55:84:91:88:98:85:8b:
93:78:57:d6:8c:f3:d5:9f:fb:8f:f9:ed:5b:f6:b4:0a:c3:43:
56:a1:82:9e:37:cb:a2:d1:3b:d5:b4:32:b5:06:3b:1d:12:94:
d1:c2:b6:be:37:a3:27:8e:3e:0c:3f:73:5c:0a:3c:25:c2:61:
84:5b:0f:af:aa:aa:02:56:2f:b9:b4:02:e0:0a:5a:03:f4:36:
e1:ef:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:52:40 2025 by rpki-client