Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/66824A767900C552472395AD8C51458F3693E9E7.mft
File: 66824A767900C552472395AD8C51458F3693E9E7.mft (raw, json)
Hash identifier: BKpamdYuS2ZZ8mkG2w5sReq30DjAWobBcC3tsVLvJ/s=
Subject key identifier: 40:2D:C3:29:7F:8D:85:3C:BC:37:AA:AA:7C:3C:B5:D4:05:03:F0:A0
Authority key identifier: 66:82:4A:76:79:00:C5:52:47:23:95:AD:8C:51:45:8F:36:93:E9:E7
Certificate issuer: /CN=66824A767900C552472395AD8C51458F3693E9E7
Certificate serial: 215FCE63C213DF33315145647FDAD846102A5467
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66824A767900C552472395AD8C51458F3693E9E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/66824A767900C552472395AD8C51458F3693E9E7.mft
Manifest number: 28
Signing time: Fri 28 Mar 2025 21:51:32 +0000
Manifest this update: Fri 28 Mar 2025 21:46:32 +0000
Manifest next update: Sat 29 Mar 2025 22:30:32 +0000
Files and hashes: 1: 34352e3137362e302e302f32322d3332203d3e20323638393234.roa (hash: VCBHoDi4BUxfhGKaxmRosGl9BavyFvh+C4GsCokuvA4=)
2: 66824A767900C552472395AD8C51458F3693E9E7.crl (hash: Y5D2fNbGXaCUWu+ZKKOQMsUDyn0P9u8R9UnzPoSYZFg=)
3: 323830343a356362303a3a2f33322d3438203d3e20323638393234.roa (hash: Ph8DVmTUXL08rT4xG1yFriHQq4biVJt27lTf657gErQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5f:ce:63:c2:13:df:33:31:51:45:64:7f:da:d8:46:10:2a:54:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66824A767900C552472395AD8C51458F3693E9E7
Validity
Not Before: Mar 28 21:46:32 2025 GMT
Not After : Mar 29 22:30:32 2025 GMT
Subject: CN=402DC3297F8D853CBC37AAAA7C3CB5D40503F0A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:45:01:63:41:af:83:18:38:46:a6:7b:f6:
83:f0:95:8c:83:eb:a7:29:86:34:11:54:c8:9d:e9:
08:53:55:d0:55:79:20:61:34:62:72:f2:68:44:4d:
14:39:df:b4:76:09:3a:d3:79:4e:00:a3:1a:75:8d:
5b:1e:af:54:bb:61:7f:93:4d:ef:12:c7:01:00:1f:
bf:21:83:04:f1:be:46:ac:70:1e:59:36:ba:5f:c1:
99:44:c6:fa:30:78:75:8a:a6:7e:d5:2b:9a:bb:4b:
4b:fa:f6:af:1c:a9:f4:ae:2f:82:3e:ec:0c:ee:0d:
53:7f:da:62:b3:39:86:17:a6:64:08:14:0d:ed:a9:
56:ec:79:0d:62:91:c8:f3:c3:5d:25:c9:8c:ca:e5:
ba:65:97:41:70:fb:34:01:40:dc:4a:6f:c3:be:9a:
26:ca:ff:c6:4e:45:52:cc:37:f8:96:a1:85:a5:d2:
64:12:19:61:6a:be:98:df:bf:b9:df:25:b6:89:6f:
8d:c3:fc:2a:d2:1c:5e:e9:d1:1f:4b:fc:78:fd:5e:
f9:d4:4f:69:63:00:ec:0b:ad:e5:b6:f7:0c:5b:18:
39:aa:80:d1:d5:a6:7d:a0:c4:55:43:23:a9:e1:8c:
20:7d:33:52:02:e2:72:2c:77:d4:03:b8:c6:ad:48:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2D:C3:29:7F:8D:85:3C:BC:37:AA:AA:7C:3C:B5:D4:05:03:F0:A0
X509v3 Authority Key Identifier:
keyid:66:82:4A:76:79:00:C5:52:47:23:95:AD:8C:51:45:8F:36:93:E9:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/66824A767900C552472395AD8C51458F3693E9E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66824A767900C552472395AD8C51458F3693E9E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/66824A767900C552472395AD8C51458F3693E9E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9a:5e:98:89:b1:ea:c7:7e:9f:e4:08:6e:dc:9f:d5:58:8c:
b5:d4:32:70:79:8d:30:04:1b:f2:ea:08:3e:be:b7:84:1c:f5:
5f:c6:d9:f4:2e:aa:d2:d9:d1:0d:76:1b:6a:18:d3:ce:d9:af:
56:fb:5a:c0:a2:c5:e1:fa:96:8b:90:96:11:20:7d:ca:b4:c9:
80:10:3e:4d:9d:0d:10:60:a4:48:5c:ed:0b:6f:2d:10:a1:1b:
bf:01:6c:2a:4e:e2:93:14:c9:f5:2c:25:6d:98:fc:2d:e2:e4:
39:81:86:63:c6:2c:50:e0:49:9d:73:da:cd:7f:54:75:d7:dc:
52:b5:9d:01:12:09:2a:50:cc:3c:83:90:40:a5:44:21:97:cf:
c3:0c:15:0f:aa:ad:de:0a:f9:71:7d:d4:30:0e:f1:0f:75:72:
a5:80:aa:ec:e7:5c:5b:11:da:94:cd:6f:db:c7:81:f8:32:5e:
4c:0a:56:c2:17:07:35:c3:b4:ae:2f:33:e2:d1:72:4f:fa:06:
49:bf:fe:11:c0:cd:f0:6b:17:a1:ea:bd:48:53:cd:7e:f6:62:
9b:b4:ad:e8:29:d6:97:b0:74:1a:6d:3e:01:6b:a4:ae:94:76:
77:aa:16:0f:6b:e7:cd:90:75:a8:2f:ed:22:99:a9:1c:57:a2:
fc:6e:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:43:07 2025 by rpki-client