Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
File: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft (raw, json)
Hash identifier: AaYUVd10phlzxWHiE+O8z++K1gqT8lCvxd5agOfmMcM=
Subject key identifier: D5:72:D9:E3:65:23:AF:F5:0A:3C:1A:85:66:2A:2E:1D:7E:A2:5E:B8
Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
Certificate issuer: /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Certificate serial: 18D131BB10B225B5DA9964AB760971B07472542C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
Manifest number: 01EF
Signing time: Fri 28 Mar 2025 20:04:05 +0000
Manifest this update: Fri 28 Mar 2025 19:59:05 +0000
Manifest next update: Sat 29 Mar 2025 20:56:05 +0000
Files and hashes: 1: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (hash: 8Gs+UV6nO+bLlDoxgdD+eVl74rMk1Zi2fSdRQ1UAf1M=)
2: 34352e37302e3134382e302f32322d3234203d3e20323637353839.roa (hash: 2p6uFFtOxrFLgwvk+5zkCXG63pr08f9yEGYoLV1hAJY=)
3: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl (hash: QmZmPqIDzvsujdnDYEyfeN86Jd9q0v4IktWmJY+42c4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d1:31:bb:10:b2:25:b5:da:99:64:ab:76:09:71:b0:74:72:54:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Validity
Not Before: Mar 28 19:59:05 2025 GMT
Not After : Mar 29 20:56:05 2025 GMT
Subject: CN=D572D9E36523AFF50A3C1A85662A2E1D7EA25EB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:82:5c:54:41:8a:80:00:2a:99:d3:56:92:
fb:6b:c8:b1:18:f4:88:a4:4a:1e:0f:47:05:c5:1d:
4f:d7:ca:0b:38:88:a2:7d:9e:64:3c:cc:7b:9e:24:
1d:e6:5c:71:24:38:32:b4:34:27:aa:ba:ba:6a:40:
3d:bf:78:f9:8a:b9:2e:a4:d8:50:d7:3b:15:6d:44:
3a:0c:6d:cc:eb:52:b9:6e:2d:41:5c:98:c3:ea:da:
bb:71:e9:58:da:e1:7e:ab:4e:3a:da:29:2c:c3:36:
d6:cb:56:b3:c3:02:70:a0:78:c1:c6:96:4e:f5:8b:
74:91:17:91:04:01:03:f7:0d:54:c7:cc:14:e8:14:
c8:9b:1f:02:e5:cd:f9:f2:8e:f3:8d:4f:49:a5:50:
4e:e4:8f:cc:d4:c0:18:3a:41:1d:a1:f2:98:68:9c:
eb:2e:da:b5:56:41:91:2f:b5:4c:80:c3:c8:9f:b4:
bf:90:e6:bd:75:07:3d:7f:18:09:38:8e:b9:d2:aa:
81:22:92:41:bb:34:3c:6d:61:64:38:91:10:70:3b:
04:cc:0a:67:64:e5:6c:7f:c2:6e:de:d1:bc:5c:c4:
de:98:5e:7c:a2:a1:16:5e:39:1f:7c:a2:ea:f0:b8:
d5:e8:fb:bb:a7:ce:45:a1:36:c6:54:ef:ac:49:27:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:D9:E3:65:23:AF:F5:0A:3C:1A:85:66:2A:2E:1D:7E:A2:5E:B8
X509v3 Authority Key Identifier:
keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:32:5c:ac:5e:fb:8b:44:50:8e:4e:49:16:5f:8d:50:46:cf:
93:90:af:a1:78:f8:21:5c:20:bc:51:f6:57:e6:da:6e:02:f4:
a3:9d:6e:a5:4f:db:43:5c:a3:56:20:ca:37:78:9b:af:7d:1b:
20:44:a9:3b:04:6b:09:d8:68:ab:af:8d:59:d2:f9:43:59:c1:
1b:08:c1:76:5d:96:59:cb:8f:94:35:25:c9:83:bd:d6:56:f0:
62:e3:7d:17:e6:1d:35:15:a2:2c:74:59:9c:56:5d:d7:15:50:
30:49:7c:3b:1a:10:1a:f2:29:94:cf:d0:c0:66:05:9a:66:61:
ff:11:71:f3:67:b2:48:ad:fb:13:23:2a:69:1c:bb:73:7c:05:
d8:b3:8e:0c:e4:33:66:01:f8:f0:61:cd:e8:8e:1e:44:67:ec:
16:0b:4c:3c:e1:38:61:29:9a:38:38:1e:15:c7:c8:14:b2:0e:
0b:d5:a9:2d:6c:59:bd:74:65:85:df:31:97:1a:69:51:9c:bd:
ff:ab:2a:f9:40:3c:a5:e9:6e:0e:fa:e5:1f:06:ae:d1:d4:8e:
d2:88:e2:4b:eb:32:a4:b1:08:dd:a6:cb:6a:a2:fd:53:7e:55:
ad:67:53:9b:9b:d8:4f:af:e5:6e:d8:13:0c:34:ff:e9:e9:af:
5f:03:b3:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGNExuxCyJbXamWSrdglxsHRyVCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZDQTg3RTRBRDAzNUI1RTRDQTBFREExQzRDMDQyQzY5
QkZFOTFFQzAeFw0yNTAzMjgxOTU5MDVaFw0yNTAzMjkyMDU2MDVaMDMxMTAvBgNV
BAMTKEQ1NzJEOUUzNjUyM0FGRjUwQTNDMUE4NTY2MkEyRTFEN0VBMjVFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxY4JcVEGKgAAqmdNWkvtryLEY
9IikSh4PRwXFHU/Xygs4iKJ9nmQ8zHueJB3mXHEkODK0NCequrpqQD2/ePmKuS6k
2FDXOxVtRDoMbczrUrluLUFcmMPq2rtx6Vja4X6rTjraKSzDNtbLVrPDAnCgeMHG
lk71i3SRF5EEAQP3DVTHzBToFMibHwLlzfnyjvONT0mlUE7kj8zUwBg6QR2h8pho
nOsu2rVWQZEvtUyAw8iftL+Q5r11Bz1/GAk4jrnSqoEikkG7NDxtYWQ4kRBwOwTM
Cmdk5Wx/wm7e0bxcxN6YXnyioRZeOR98ourwuNXo+7unzkWhNsZU76xJJ9wpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1XLZ42Ujr/UKPBqFZiouHX6iXrgwHwYDVR0j
BBgwFoAUr8qH5K0DW15MoO2hxMBCxpv+kewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFC
eGcvMS9BRkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQ0E4N0U0QUQwMzVCNUU0
Q0EwRURBMUM0QzA0MkM2OUJGRTkxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFCeGcvMS9B
RkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATzJcrF77i0RQjk5JFl+NUEbPk5CvoXj4IVwgvFH2V+babgL0o51upU/bQ1yj
ViDKN3ibr30bIESpOwRrCdhoq6+NWdL5Q1nBGwjBdl2WWcuPlDUlyYO91lbwYuN9
F+YdNRWiLHRZnFZd1xVQMEl8OxoQGvIplM/QwGYFmmZh/xFx82eySK37EyMqaRy7
c3wF2LOODOQzZgH48GHN6I4eRGfsFgtMPOE4YSmaODgeFcfIFLIOC9WpLWxZvXRl
hd8xlxppUZy9/6sq+UA8peluDvrlHwau0dSO0ojiS+sypLEI3abLaqL9U35VrWdT
m5vYT6/lbtgTDDT/6emvXwOzGQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:00:25 2025 by rpki-client