Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.mft
File: DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.mft (raw, json)
Hash identifier: B3+1craaR+WzPVi8FBh9rqQoaaWnimIy8xRSBwRJAok=
Subject key identifier: 43:1E:14:70:CF:03:E6:4D:2A:30:07:34:F8:3E:CF:7F:62:0F:3E:E6
Authority key identifier: DB:A2:32:1D:03:AF:55:AF:7E:EA:D8:0B:1C:EA:77:70:91:4C:4D:33
Certificate issuer: /CN=DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33
Certificate serial: 5CCE191FA4AB6531D55733E7BB2BCAB2F54BBC1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.mft
Manifest number: 0123
Signing time: Fri 08 Nov 2024 10:55:50 +0000
Manifest this update: Fri 08 Nov 2024 10:50:50 +0000
Manifest next update: Sat 09 Nov 2024 11:00:50 +0000
Files and hashes: 1: DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.crl (hash: 64gt8hu2JFOP3COvgH29IoohhuBmfe9HiJMfCNrEqww=)
2: 34352e3233352e36342e302f32322d3234203d3e20323637343132.roa (hash: XqnbDiapA1EJzAFRkpt4oQXfBipQTI5JUzkOy0edwas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ce:19:1f:a4:ab:65:31:d5:57:33:e7:bb:2b:ca:b2:f5:4b:bc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33
Validity
Not Before: Nov 8 10:50:50 2024 GMT
Not After : Nov 9 11:00:50 2024 GMT
Subject: CN=431E1470CF03E64D2A300734F83ECF7F620F3EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:7c:4d:b7:b9:5c:30:83:9a:87:f2:0f:27:
27:48:17:4d:ad:cc:3e:fa:1d:88:3e:a9:42:23:17:
61:1a:bb:88:be:99:fb:50:e0:92:20:c3:16:95:2c:
9e:24:f6:ee:a6:00:33:41:3e:32:2e:c8:f9:75:d8:
c7:02:3a:64:49:2c:0d:e9:38:39:cd:df:24:f4:89:
24:60:04:a3:37:ae:04:69:e7:f0:ba:8d:74:b7:c5:
ed:f7:aa:c3:7b:ca:96:60:f7:22:48:33:ec:75:f4:
3c:fd:69:b3:22:7f:b0:25:a5:e5:c7:ce:53:ea:00:
f7:c8:ac:1f:6f:de:84:90:58:a3:cd:3b:9f:1c:8c:
68:84:92:72:79:fa:5f:65:c9:e4:9e:15:f3:b1:2e:
c4:60:4d:9a:f7:63:1d:76:66:aa:83:4e:6c:ca:a5:
94:97:ce:b1:43:e8:93:ce:7c:0f:13:5f:dd:8f:04:
fb:64:89:8f:f1:3c:d5:25:71:51:81:97:50:5c:66:
7d:8e:a3:88:9f:9e:da:f7:67:2a:2b:64:37:38:3a:
b0:b1:2e:d2:42:bc:f4:38:9d:e9:69:2d:49:30:18:
7f:dd:b0:f9:6a:ff:33:af:d2:48:9b:6b:2a:99:3f:
13:9b:09:66:3b:85:cf:b7:25:4d:4b:d6:9c:53:61:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:14:70:CF:03:E6:4D:2A:30:07:34:F8:3E:CF:7F:62:0F:3E:E6
X509v3 Authority Key Identifier:
keyid:DB:A2:32:1D:03:AF:55:AF:7E:EA:D8:0B:1C:EA:77:70:91:4C:4D:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/DBA2321D03AF55AF7EEAD80B1CEA7770914C4D33.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:eb:3e:e3:3b:ca:54:4a:54:e4:10:46:aa:07:3b:40:cb:fe:
04:7b:c2:7d:5d:c1:08:03:3b:ac:ca:60:98:4b:45:1b:da:7d:
fa:95:93:55:0c:71:cb:1b:79:b3:2f:d3:35:72:75:3a:9c:f9:
0b:99:3e:43:9a:eb:b3:76:6c:52:b8:12:d8:1e:62:98:f6:c4:
21:bb:61:81:70:a9:d6:1f:fa:45:b0:4b:64:7e:e2:ee:6b:70:
3d:f1:69:f1:f7:d3:a4:38:26:b6:14:3e:40:c9:bf:01:e5:8f:
f4:35:fe:be:bb:8d:54:d9:4a:75:e5:46:ff:9a:9c:18:15:b5:
6b:36:76:aa:86:96:54:e4:04:df:75:48:d3:81:90:45:10:5b:
f8:3d:f3:3f:1c:27:32:41:31:36:5d:ae:13:c1:58:e7:48:96:
bb:4f:81:f7:26:a2:69:f4:1d:1a:6b:1d:8d:ad:25:89:cb:9a:
51:64:21:30:07:1d:a1:fe:c5:41:2d:d5:ad:ac:92:ca:2b:03:
17:7e:6d:0b:9c:e9:42:4b:74:cb:36:87:c7:63:68:ef:67:76:
3c:36:de:9e:9e:2a:11:bd:8a:38:36:79:25:f3:79:4f:f1:82:
63:46:eb:2a:30:c1:71:b0:ea:53:59:ae:82:b1:bf:03:7d:41:
48:d0:41:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXM4ZH6SrZTHVVzPnuyvKsvVLvB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJBMjMyMUQwM0FGNTVBRjdFRUFEODBCMUNFQTc3NzA5
MTRDNEQzMzAeFw0yNDExMDgxMDUwNTBaFw0yNDExMDkxMTAwNTBaMDMxMTAvBgNV
BAMTKDQzMUUxNDcwQ0YwM0U2NEQyQTMwMDczNEY4M0VDRjdGNjIwRjNFRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXvHxNt7lcMIOah/IPJydIF02t
zD76HYg+qUIjF2Eau4i+mftQ4JIgwxaVLJ4k9u6mADNBPjIuyPl12McCOmRJLA3p
ODnN3yT0iSRgBKM3rgRp5/C6jXS3xe33qsN7ypZg9yJIM+x19Dz9abMif7AlpeXH
zlPqAPfIrB9v3oSQWKPNO58cjGiEknJ5+l9lyeSeFfOxLsRgTZr3Yx12ZqqDTmzK
pZSXzrFD6JPOfA8TX92PBPtkiY/xPNUlcVGBl1BcZn2Oo4ifntr3ZyorZDc4OrCx
LtJCvPQ4nelpLUkwGH/dsPlq/zOv0kibayqZPxObCWY7hc+3JU1L1pxTYTrRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQx4UcM8D5k0qMAc0+D7Pf2IPPuYwHwYDVR0j
BBgwFoAU26IyHQOvVa9+6tgLHOp3cJFMTTMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQ2RkE1dk42VXkzTTFnZzRhYmNScGJKdW44VHlBTDllN0M4ZGhyS2Nh
Q0IvMS9EQkEyMzIxRDAzQUY1NUFGN0VFQUQ4MEIxQ0VBNzc3MDkxNEM0RDMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTIzMjFEMDNBRjU1QUY3
RUVBRDgwQjFDRUE3NzcwOTE0QzREMzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVQ2RkE1dk42VXkzTTFnZzRhYmNScGJKdW44VHlBTDllN0M4ZGhyS2NhQ0IvMS9E
QkEyMzIxRDAzQUY1NUFGN0VFQUQ4MEIxQ0VBNzc3MDkxNEM0RDMzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjOs+4zvKVEpU5BBGqgc7QMv+BHvCfV3BCAM7rMpgmEtFG9p9+pWTVQxxyxt5
sy/TNXJ1Opz5C5k+Q5rrs3ZsUrgS2B5imPbEIbthgXCp1h/6RbBLZH7i7mtwPfFp
8ffTpDgmthQ+QMm/AeWP9DX+vruNVNlKdeVG/5qcGBW1azZ2qoaWVOQE33VI04GQ
RRBb+D3zPxwnMkExNl2uE8FY50iWu0+B9yaiafQdGmsdja0licuaUWQhMAcdof7F
QS3VraySyisDF35tC5zpQkt0yzaHx2No72d2PDbenp4qEb2KODZ5JfN5T/GCY0br
KjDBcbDqU1mugrG/A31BSNBBsg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:41:06 2025 by rpki-client