Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.mft
File: B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.mft (raw, json)
Hash identifier: WfL0T+ZNYuhYYf05lSOka+1EkIJ6Q30C3PguMdoBnwY=
Subject key identifier: 2A:E6:F8:C4:02:8A:A8:FB:D2:24:59:9B:96:5A:7E:90:E4:2E:FD:95
Authority key identifier: B9:00:0D:C5:D2:43:46:98:CC:43:B7:C6:AB:8A:3A:C9:18:F0:49:B7
Certificate issuer: /CN=B9000DC5D2434698CC43B7C6AB8A3AC918F049B7
Certificate serial: 618FAC176C4592863F3747EA94B85CB48C139E67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.mft
Manifest number: 30
Signing time: Fri 21 Apr 2023 01:55:33 +0000
Manifest this update: Fri 21 Apr 2023 01:50:33 +0000
Manifest next update: Sat 22 Apr 2023 05:41:33 +0000
Files and hashes: 1: B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.crl (hash: X7k8by4UAkP1ltbipIS6NjHw5hHKsiQT7JFU5Coakwk=)
2: 323830343a386161303a3a2f33322d313238203d3e20323733363831.roa (hash: BYj4FKm79gz4mqsZzH3m0k70ZG8PKVJxQEc09HWW8hM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:8f:ac:17:6c:45:92:86:3f:37:47:ea:94:b8:5c:b4:8c:13:9e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9000DC5D2434698CC43B7C6AB8A3AC918F049B7
Validity
Not Before: Apr 21 01:50:33 2023 GMT
Not After : Apr 22 05:41:33 2023 GMT
Subject: CN=2AE6F8C4028AA8FBD224599B965A7E90E42EFD95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:26:67:44:df:0f:7a:3b:1c:2c:6a:aa:bc:
5e:c3:aa:2f:f7:2c:71:99:3b:a6:20:fb:ff:04:a0:
97:ee:9c:11:89:bf:d1:57:e9:91:cc:08:f3:ae:f9:
22:15:c2:fa:57:cd:b7:1c:e2:14:0e:4b:59:0d:69:
7e:e3:9c:72:c8:d5:db:ee:a4:f2:b3:6d:cc:1e:ca:
87:92:fc:47:95:38:f0:ad:a8:b5:07:f0:8c:c2:95:
f0:0d:af:86:8d:6f:65:90:c7:30:f3:fb:16:6b:bc:
87:bd:d1:93:70:ee:a2:ad:75:9c:5d:98:ef:71:47:
8c:b9:07:98:66:21:dc:74:8f:9d:e0:97:bf:25:f2:
63:1a:37:01:3c:42:9d:f8:d2:d9:48:ab:16:b9:91:
c3:3c:5d:d0:10:d0:27:d7:08:e2:f3:e2:92:92:2b:
d6:ad:02:52:29:f1:cf:55:2d:42:96:6c:29:5e:39:
52:28:3e:7c:02:47:a9:73:ad:14:82:4f:90:25:77:
bd:c6:3d:a6:18:27:78:b6:e0:93:a0:3a:71:be:b0:
c1:88:64:22:a5:65:54:0c:e7:e4:b9:c1:3c:ad:09:
aa:49:23:76:9c:49:a3:42:15:3d:5c:97:bd:6b:76:
1d:5f:07:45:c8:ec:bb:97:e3:2a:6d:f5:0c:41:75:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:F8:C4:02:8A:A8:FB:D2:24:59:9B:96:5A:7E:90:E4:2E:FD:95
X509v3 Authority Key Identifier:
keyid:B9:00:0D:C5:D2:43:46:98:CC:43:B7:C6:AB:8A:3A:C9:18:F0:49:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8d:80:b9:76:c2:8e:1b:4f:c9:dd:df:74:83:e8:32:5e:36:
b6:7e:71:c5:77:58:e7:a9:33:02:56:0a:bb:05:d9:0e:57:12:
76:18:5d:0d:a2:6d:c7:f5:82:26:b5:43:1e:e6:d0:7d:55:80:
74:b5:11:0c:f4:47:92:66:3c:16:24:5b:6b:17:96:f3:3f:63:
1c:5e:82:86:0f:53:9a:43:86:01:8d:59:03:81:5b:68:54:29:
8e:c6:57:bf:b6:11:80:a5:71:bb:41:45:2a:bd:96:02:6d:d0:
8d:c7:63:8e:80:03:f6:3d:6a:91:49:5a:c7:e2:51:39:ac:ea:
0f:16:87:10:65:ad:d6:2a:7f:8b:ee:b6:e9:23:b2:15:8e:49:
ad:c1:1e:33:08:49:ad:68:84:37:d7:34:ed:e2:57:79:d5:ee:
7d:18:23:ef:7e:55:1c:ba:86:24:5a:34:bb:fd:b0:39:0e:a0:
fc:39:52:a1:13:9e:76:31:cc:94:a1:db:4e:7e:d5:44:09:24:
99:f3:d9:0b:98:a3:af:e9:c9:bc:1f:dc:0f:e3:bb:6e:04:22:
b3:ce:b0:26:c5:c9:ae:46:34:53:22:51:04:2e:31:25:b1:24:
f0:73:71:e7:32:12:d6:a7:57:50:ce:7e:6c:a4:c3:a7:35:05:
b8:25:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 22:39:42 2025 by rpki-client