
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.mft
File: 8AF533141D3555FA3A251444F1A8E556BE76DF24.mft (raw, json)
Hash identifier: 4d5iYQejGPk6pCGxdt4LVtlpk//MJ0NLHHiXaNZNkb8=
Subject key identifier: 90:8E:B1:D6:78:20:0D:68:D0:68:23:25:72:E7:B4:7D:3F:D6:7B:EF
Authority key identifier: 8A:F5:33:14:1D:35:55:FA:3A:25:14:44:F1:A8:E5:56:BE:76:DF:24
Certificate issuer: /CN=8AF533141D3555FA3A251444F1A8E556BE76DF24
Certificate serial: 03A8F462E523DF4351934A1A55056D4748E22C70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF533141D3555FA3A251444F1A8E556BE76DF24.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.mft
Manifest number: 02
Signing time: Mon 17 Mar 2025 16:05:05 +0000
Manifest this update: Mon 17 Mar 2025 16:00:05 +0000
Manifest next update: Tue 18 Mar 2025 18:52:05 +0000
Files and hashes: 1: 3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (hash: gFuxIt/ONm8xL0ZauujSbzZ6xdRzM1lei6C4EvbFbbs=)
2: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (hash: AX4pggQgyeu0/abxqzyeBnBKayBJoq48GWp9SpZdJ3U=)
3: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (hash: 25lej0nG9I/PYtz5CSPH1JSeYcmo7lydlHTraHdZ1co=)
4: 8AF533141D3555FA3A251444F1A8E556BE76DF24.crl (hash: lSCUrHlprJ4S/I6TuPdhKNddk9Tm95+x2T+HaMoW22E=)
5: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (hash: sqWkjdr8XkS5jbVWl6f76APYwbHPasxp79UNk9eRPvk=)
6: 3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (hash: ousozYKw4AwfrcPNSPeYZxxbSzFyhLrimLXBpmIr+Gw=)
7: 3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (hash: 8aWHbtck58Ii6m0AcgGFwpzAMQRqfXPvKEHFKcON7N8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a8:f4:62:e5:23:df:43:51:93:4a:1a:55:05:6d:47:48:e2:2c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AF533141D3555FA3A251444F1A8E556BE76DF24
Validity
Not Before: Mar 17 16:00:05 2025 GMT
Not After : Mar 18 18:52:05 2025 GMT
Subject: CN=908EB1D678200D68D068232572E7B47D3FD67BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:89:91:ae:62:cb:05:e2:fa:a9:52:6f:a3:
93:64:71:b9:51:d8:23:29:72:3c:19:24:b4:9b:15:
ef:9f:84:e2:fe:49:57:e0:dd:ac:ad:34:d9:c8:ea:
05:58:b6:b2:11:c1:59:f5:82:16:b7:2e:16:3a:ae:
07:68:a3:4c:0f:ea:55:fa:28:a2:6a:2f:d4:52:61:
7c:23:8b:f4:a5:c8:89:8e:9b:8d:4f:c8:00:59:28:
95:c3:2b:52:bf:cf:0a:d3:90:bc:c4:0c:a7:3a:14:
de:df:e4:60:f4:cf:a2:25:32:72:89:48:16:e7:fd:
8b:af:c2:fd:22:55:c0:65:1b:b8:93:a3:4a:a6:4a:
35:41:1e:02:55:11:54:23:d7:c5:48:20:23:2d:6f:
d6:01:5a:20:53:b6:6a:67:ae:41:d1:4b:27:7f:fb:
88:fb:f4:83:54:6f:d5:0d:05:e2:21:f8:7d:2d:b3:
ef:c2:19:66:ab:58:a4:ad:88:64:ba:98:d0:d0:e0:
07:cc:7d:d3:35:79:43:1e:91:1e:93:61:8d:c7:f5:
17:8f:68:9f:85:ca:8d:62:3e:1c:9e:ee:d5:bb:ba:
6e:11:a4:76:85:8d:91:a0:e1:94:f4:25:a2:1e:8c:
74:5f:36:04:e4:58:60:d3:de:71:77:12:e1:07:15:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8E:B1:D6:78:20:0D:68:D0:68:23:25:72:E7:B4:7D:3F:D6:7B:EF
X509v3 Authority Key Identifier:
keyid:8A:F5:33:14:1D:35:55:FA:3A:25:14:44:F1:A8:E5:56:BE:76:DF:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF533141D3555FA3A251444F1A8E556BE76DF24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d2:79:73:22:59:cc:19:d5:c7:64:07:be:3f:19:09:fa:17:
a1:49:7a:35:7d:84:42:50:99:a1:89:70:63:55:24:dd:a0:a3:
ad:5c:f2:7d:79:78:c2:ab:9d:86:ae:91:47:43:ef:3b:07:bb:
4b:f6:d8:05:e1:fe:f7:35:b2:4c:ea:a1:db:13:2d:02:b5:e4:
1e:ef:42:53:d2:a2:5a:2c:28:a7:52:6b:7b:ee:60:1e:e2:31:
95:23:61:4f:c0:9f:36:43:67:a1:17:2d:fd:5a:08:8d:72:15:
3a:db:21:16:9a:dd:9f:f1:c3:b8:cf:02:dd:2b:0e:77:45:96:
af:7e:57:cc:9a:0c:33:1c:b5:26:8d:96:02:5a:f1:88:62:61:
bb:9c:10:4f:d9:6c:f1:53:97:19:46:f4:3e:8d:68:a9:e8:f5:
b6:e3:ae:96:c8:b7:44:1f:39:88:43:5c:d9:15:89:ef:f9:3e:
bd:e3:c3:62:05:d0:12:52:d3:cf:7a:fe:2c:9f:25:1b:be:ac:
34:ca:62:6b:db:88:cc:0e:cd:7d:4f:8d:37:87:95:a7:41:7a:
fd:9e:40:1c:5f:12:60:2e:36:90:e8:b0:d4:d6:88:69:65:6c:
b2:f9:10:a0:01:e8:2b:af:b5:25:c8:d3:06:e4:e0:4f:cd:aa:
d9:a3:e2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:06 2025 by rpki-client