Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
File: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft (raw, json)
Hash identifier: B8HwNt19qf95BtjRxo9HJaOsSYq6R/5xUe1wdSsmMIo=
Subject key identifier: 3A:41:CE:1E:98:AB:F7:74:37:C3:94:3D:C3:84:8D:F4:1F:52:BF:CB
Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69
Certificate issuer: /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
Certificate serial: 5C994E80DA009A46C018CA77BC19F35BBFC4D5A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
Manifest number: 8A
Signing time: Fri 28 Mar 2025 21:53:52 +0000
Manifest this update: Fri 28 Mar 2025 21:48:52 +0000
Manifest next update: Sat 29 Mar 2025 23:14:52 +0000
Files and hashes: 1: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (hash: Orbb6MeNodxx3916UDCrBEg7Fpk2zV0yU2VrzE/g0s8=)
2: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl (hash: 3cnrE/xKViWQZa3oFgBlOqt9u98HuX1jU4H6J6uZaqE=)
3: 323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (hash: XcxDfu5Dk/JfCL8RQs0hAY0KSxIgVRPmT1tOWH4+b4g=)
4: 3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa (hash: KszOIxvzdb2byYIAkB/jo2J14kAdHgZWkp71wd+hZKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:99:4e:80:da:00:9a:46:c0:18:ca:77:bc:19:f3:5b:bf:c4:d5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
Validity
Not Before: Mar 28 21:48:52 2025 GMT
Not After : Mar 29 23:14:52 2025 GMT
Subject: CN=3A41CE1E98ABF77437C3943DC3848DF41F52BFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:5d:88:6a:7d:f7:5b:aa:be:58:70:5d:e4:
bb:54:7e:99:f8:2c:f0:14:38:ec:65:d9:56:60:de:
4e:4b:a5:4c:75:99:f1:8b:3e:88:35:00:b8:72:d8:
38:e1:41:bb:b7:2d:d5:1a:b0:1f:96:aa:c9:b7:e6:
38:ce:ce:5e:17:ec:da:6a:8b:63:20:81:ca:ab:68:
1d:cb:98:db:46:d1:c9:9e:85:09:2d:83:9f:a2:03:
e1:04:5b:d9:b4:48:05:9e:da:7e:39:98:e5:5b:ae:
35:27:58:86:00:98:a3:f8:c2:49:61:24:df:0a:c8:
56:99:c8:dd:b9:1e:82:cc:9e:95:f7:19:3a:b5:74:
91:ac:c9:eb:13:dc:6e:f7:8e:57:1e:c4:b2:3e:74:
96:14:fc:6b:9d:c0:de:4d:de:ca:ca:20:1b:e6:c5:
bd:c5:18:56:d2:6a:c1:15:17:87:cb:d3:4f:ad:4c:
14:fb:23:17:c2:c7:6a:98:d9:82:1a:08:b0:21:02:
ef:6f:41:c7:d2:ae:86:7d:93:eb:69:fb:5f:c9:8f:
3f:89:83:27:ac:3f:7d:88:ab:c0:3a:08:fe:4d:78:
91:b4:ad:5a:19:9d:39:85:f1:40:92:4f:6a:9e:52:
cd:8a:92:88:d9:17:fa:b8:1b:b6:18:7b:cb:53:32:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:CE:1E:98:AB:F7:74:37:C3:94:3D:C3:84:8D:F4:1F:52:BF:CB
X509v3 Authority Key Identifier:
keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ce:eb:d5:2b:cb:a9:8c:f9:50:47:66:43:84:f1:42:36:8d:
13:a2:41:29:ae:ec:2a:76:de:5b:55:fa:b4:12:cb:c9:b8:e5:
be:47:e0:1a:93:f4:47:19:d6:59:90:bc:82:30:0c:56:16:0f:
c0:fc:77:f5:96:10:be:8d:fb:f3:83:04:15:1b:92:7a:b3:84:
ee:ba:a7:94:72:23:c4:52:14:74:43:3c:18:da:f2:84:7a:c7:
a5:62:06:cf:97:9c:7a:57:10:df:4c:1c:c5:21:c7:24:7d:12:
90:d0:18:77:a5:19:0d:6d:be:93:bd:be:f3:38:99:1b:46:3d:
7c:34:9c:9f:61:74:12:3d:33:dc:59:8e:90:68:39:96:e5:c2:
52:3f:a5:dc:6e:d5:58:31:88:cc:df:0a:93:4c:c8:f1:78:23:
68:82:53:66:76:97:4d:66:c5:54:1a:13:de:30:85:6c:ca:92:
f4:b4:f2:51:61:5e:47:68:40:4e:33:56:af:39:e7:46:3b:f7:
6b:45:3a:ce:ab:8e:6f:ed:aa:fd:48:7b:ca:5a:f1:d3:31:38:
6f:bb:cf:f2:85:94:57:fd:82:c1:ee:3b:f4:75:b7:46:a2:ac:
e1:36:01:cb:60:3d:e0:77:8b:5f:cb:50:38:d9:62:30:0a:a7:
f7:09:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:46 2025 by rpki-client