![](/console.gif)
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/1FF846E87408259A09771D1251217303FAF7732A.mft
File: 1FF846E87408259A09771D1251217303FAF7732A.mft (raw, json)
Hash identifier: tFXh8tKwfeh4huFq0DxChugrSqXNNCYq/J+oV+PW5fM=
Subject key identifier: D9:8A:21:C4:A7:CA:09:F4:70:93:EC:DD:DE:50:FD:FB:CB:D1:33:39
Authority key identifier: 1F:F8:46:E8:74:08:25:9A:09:77:1D:12:51:21:73:03:FA:F7:73:2A
Certificate issuer: /CN=1FF846E87408259A09771D1251217303FAF7732A
Certificate serial: 669C6049AF9D853C69D6A4C7BABB5E3E50724B18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FF846E87408259A09771D1251217303FAF7732A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/1FF846E87408259A09771D1251217303FAF7732A.mft
Manifest number: 23
Signing time: Mon 08 Apr 2024 18:02:05 +0000
Manifest this update: Mon 08 Apr 2024 17:57:05 +0000
Manifest next update: Tue 09 Apr 2024 19:09:05 +0000
Files and hashes: 1: 323830343a383138383a3a2f33322d313238203d3e20323732343630.roa (hash: BXci9LPGblUobZWclRkAUhy1mmuBnDJ34io2LiPS2nE=)
2: 1FF846E87408259A09771D1251217303FAF7732A.crl (hash: JpZXQsJnuTvsKRvym81bLjkPhvKFYrKaARxRZlY+ywM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:9c:60:49:af:9d:85:3c:69:d6:a4:c7:ba:bb:5e:3e:50:72:4b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF846E87408259A09771D1251217303FAF7732A
Validity
Not Before: Apr 8 17:57:05 2024 GMT
Not After : Apr 9 19:09:05 2024 GMT
Subject: CN=D98A21C4A7CA09F47093ECDDDE50FDFBCBD13339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:14:ab:36:09:51:e1:78:32:f8:f6:b2:30:
9b:38:e1:ab:7c:f1:85:5e:da:e6:02:3e:fb:cf:53:
ac:5f:4c:11:00:81:09:88:2c:23:68:95:72:39:4e:
5c:e6:46:5b:b4:06:43:3f:11:a5:23:44:f7:f3:f8:
85:59:e2:52:5b:c8:03:09:de:e6:5d:85:58:33:91:
fd:8a:12:4a:ab:b2:6b:e0:f4:57:9a:0c:6d:05:97:
4d:fb:1f:c3:e0:54:da:5e:82:cf:7e:56:30:e0:db:
a6:32:fb:b6:c3:bf:a5:75:e0:a0:17:f9:0c:1c:8e:
6f:64:29:e2:18:97:c0:6f:93:18:7a:0d:9e:34:3c:
53:ca:12:c3:d9:ad:82:d2:cf:76:ce:ce:78:fb:e1:
9f:86:ec:e1:43:f8:bd:c4:27:6d:90:13:61:4d:f9:
bd:55:2a:7d:a8:e4:58:13:ad:68:ec:be:29:a4:02:
0e:a6:82:09:cd:65:aa:f7:b9:77:49:3b:f1:37:6b:
bb:1a:23:c7:67:89:6e:3b:dc:49:14:eb:e1:26:fc:
24:ae:2c:c6:e1:4a:c7:1b:e4:01:b2:08:10:82:d7:
91:d7:fd:c7:be:db:76:04:db:68:6b:7a:8f:e1:d5:
81:0a:fd:92:ce:00:42:c0:81:e0:52:4c:ad:0b:da:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8A:21:C4:A7:CA:09:F4:70:93:EC:DD:DE:50:FD:FB:CB:D1:33:39
X509v3 Authority Key Identifier:
keyid:1F:F8:46:E8:74:08:25:9A:09:77:1D:12:51:21:73:03:FA:F7:73:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/1FF846E87408259A09771D1251217303FAF7732A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FF846E87408259A09771D1251217303FAF7732A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/1FF846E87408259A09771D1251217303FAF7732A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4e:fe:c6:07:2c:99:1b:88:45:a2:d9:65:10:55:ce:68:2e:
7d:c3:76:9e:98:be:c8:3b:01:c5:1a:81:37:50:4f:32:32:4f:
04:bd:38:9c:ca:f8:81:00:91:9c:ba:bb:5f:b0:5c:64:31:88:
f2:60:6f:6d:1f:1a:38:31:7f:94:88:4b:d5:98:b1:0a:f2:ab:
ca:0c:4e:08:b0:68:42:b9:93:cb:67:29:19:e4:77:c3:4e:a7:
3c:1b:f0:76:d8:a9:d2:c1:62:b7:f4:95:e5:2d:f0:f2:a7:2f:
70:04:39:6d:1c:c9:df:3f:7f:da:59:ce:3b:ba:b9:c4:6f:3e:
51:9d:50:14:ad:6b:27:58:ba:ce:04:db:79:71:78:2d:03:20:
ba:f2:50:7e:95:bd:1b:3b:ca:a2:bc:6c:eb:e8:cb:ba:d2:31:
55:03:93:54:f5:f7:61:75:c1:42:d8:d1:0e:2a:d9:aa:f6:59:
98:28:e1:d5:8c:e1:97:07:0a:6c:cd:5c:10:88:43:6f:e8:a3:
ad:6d:6e:b2:d3:2b:cb:51:f7:ae:f4:a9:07:3f:a2:c8:83:3d:
65:f9:e8:3a:c7:8c:0d:8b:f6:0b:35:5f:e2:00:ec:a4:48:67:
3e:81:4d:36:b8:db:51:8f:c1:df:6a:b3:c7:3f:3d:cd:3d:e9:
84:98:20:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:38 2025 by rpki-client