Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.mft
File: 4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.mft (raw, json)
Hash identifier: D5SAoFtPK70lEm/UhbqVch5k2qg8yiTHZ+/1iF4U7Kk=
Subject key identifier: 1D:5F:34:1D:95:CF:5B:F6:93:DE:9B:70:C4:AF:70:18:4F:C6:5F:17
Authority key identifier: 43:33:D3:D2:A7:6F:86:E2:35:9E:BA:C6:DF:D3:C5:33:0E:31:B5:A1
Certificate issuer: /CN=4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1
Certificate serial: 5353943C1427E78A24872EA36C067E024CDBCF44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.mft
Manifest number: 4D
Signing time: Tue 31 Dec 2024 22:14:31 +0000
Manifest this update: Tue 31 Dec 2024 22:09:31 +0000
Manifest next update: Thu 02 Jan 2025 01:59:31 +0000
Files and hashes: 1: 4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.crl (hash: z8ELczPRb+4q74mbxbgZaqq1McVxbGDJdMM+1jAQeKI=)
2: 323830343a376434633a3a2f33322d3438203d3e20323731353532.roa (hash: sBhzL7YdRrbmpEtoMD/Z44F9diRT5F5A/F7Gyt8V5FA=)
3: 3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa (hash: IX7U73hQdcRzpF07E0j0JmqeDpebMYRXMIg3L+oIZp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:53:94:3c:14:27:e7:8a:24:87:2e:a3:6c:06:7e:02:4c:db:cf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1
Validity
Not Before: Dec 31 22:09:31 2024 GMT
Not After : Jan 2 01:59:31 2025 GMT
Subject: CN=1D5F341D95CF5BF693DE9B70C4AF70184FC65F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:39:8d:b2:d0:3f:9c:d1:25:c0:71:42:d5:
ae:46:dd:32:0a:32:1d:1b:a6:b1:da:68:04:f6:01:
35:3f:4f:c6:6e:c8:a1:9b:8e:1d:a2:b7:4c:dc:47:
03:f1:97:1c:06:51:38:c4:c8:65:6a:8a:b4:d5:ca:
57:0d:e8:02:35:71:db:3d:80:9e:bd:b9:3f:ed:4c:
97:bf:20:5a:23:74:37:ca:0f:04:68:15:6d:86:b1:
4b:56:16:d5:ff:44:92:30:d1:da:0f:ef:04:00:30:
31:66:a7:42:e9:d3:e2:42:9d:d2:65:88:8f:83:e4:
6d:34:91:ad:82:28:5c:8f:81:82:10:56:a1:d3:9c:
b7:5d:b0:9a:9c:9e:0a:75:61:e3:4c:a7:5d:f5:9e:
68:b7:d7:f2:68:ec:0b:dd:7a:10:67:92:fb:cd:02:
5d:4a:1f:f3:ae:d4:82:ee:e6:0d:40:31:08:01:95:
65:d5:a8:be:7a:97:ae:de:fd:98:b9:d7:77:27:a8:
f3:86:c1:a6:cc:86:8d:28:b9:50:17:1d:32:4b:29:
91:5e:1a:a2:c9:ac:7d:65:bd:00:d2:00:fa:e0:61:
92:f3:fc:33:69:ec:c0:ea:ea:64:32:fb:76:c4:57:
eb:7b:31:5f:4b:e3:bb:8c:5b:78:e9:e0:fc:3d:55:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5F:34:1D:95:CF:5B:F6:93:DE:9B:70:C4:AF:70:18:4F:C6:5F:17
X509v3 Authority Key Identifier:
keyid:43:33:D3:D2:A7:6F:86:E2:35:9E:BA:C6:DF:D3:C5:33:0E:31:B5:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/4333D3D2A76F86E2359EBAC6DFD3C5330E31B5A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:50:dd:e7:8b:0a:4e:46:17:58:04:16:b1:a9:88:77:69:38:
ec:ed:00:17:cf:01:c4:8f:aa:57:7f:89:5f:08:55:94:60:1a:
90:50:40:66:b3:a2:1e:3f:e6:a6:d5:43:e6:be:d8:f5:6c:12:
a8:e5:a8:d1:83:46:7e:84:6b:42:09:4c:84:fe:c9:7b:fb:e5:
30:2e:1d:f4:c7:86:b4:87:24:19:ca:0b:5f:bb:52:9c:52:d2:
1d:62:3a:e4:be:3b:7b:6a:2c:1d:6a:17:df:12:66:8d:75:06:
73:e1:b8:26:24:c6:60:5d:91:0c:8d:38:14:0d:d6:17:f3:ee:
6e:93:c3:ee:e6:90:90:66:8e:e4:db:62:51:40:ac:99:46:7e:
c0:dc:bf:db:c8:e0:2c:5a:d3:a2:c6:f7:bd:6f:aa:08:15:27:
7d:ae:c5:84:02:8e:05:d0:d6:4b:b6:ec:eb:b0:28:c8:15:ab:
72:32:4b:e2:1f:19:f6:5a:0c:9a:81:15:e0:b1:74:24:c3:69:
40:ac:30:42:65:96:c3:3b:5a:b6:8f:eb:43:6b:34:07:5f:57:
b2:b3:53:c1:71:15:1b:f6:8b:c5:21:54:af:f4:4d:88:3d:06:
d0:64:d2:c0:ad:29:1d:b0:3c:88:69:6d:80:1a:e7:bc:d0:0b:
14:49:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:41 2025 by rpki-client