Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/1/CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.mft
File: CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.mft (raw, json)
Hash identifier: qi53Savok4wsjTfFMDIl2SmaSNhhFPd4zqXPUIt6sQw=
Subject key identifier: 48:8C:06:D7:65:05:59:C6:CF:E3:9B:45:75:B3:C9:6F:5D:4E:08:00
Authority key identifier: CA:FB:73:F2:34:6E:1C:1F:F2:9A:EA:24:5E:19:FE:53:27:B2:C2:3D
Certificate issuer: /CN=CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D
Certificate serial: EE179A5AB652426F09635B33741787332D64B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/1/CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.mft
Manifest number: 0123
Signing time: Fri 08 Nov 2024 01:01:41 +0000
Manifest this update: Fri 08 Nov 2024 00:56:41 +0000
Manifest next update: Sat 09 Nov 2024 04:52:41 +0000
Files and hashes: 1: CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.crl (hash: fa+5wCHi142l+JZlbHg39d4ZeTebS5WBIX2xNG5uEhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ee:17:9a:5a:b6:52:42:6f:09:63:5b:33:74:17:87:33:2d:64:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D
Validity
Not Before: Nov 8 00:56:41 2024 GMT
Not After : Nov 9 04:52:41 2024 GMT
Subject: CN=488C06D7650559C6CFE39B4575B3C96F5D4E0800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:e7:c4:fd:9c:56:5d:b0:f9:4c:ef:a1:bd:
1e:85:e5:a6:b6:cf:65:1a:97:f0:49:57:2d:60:44:
8d:90:96:94:a0:ab:09:d8:02:8a:d6:90:28:23:7b:
49:33:0e:77:27:bc:13:63:bc:61:9a:c6:46:5d:2f:
08:98:a0:c2:20:52:97:92:11:a0:3b:94:02:eb:5f:
5f:a6:f0:4d:52:4d:e5:d0:ae:37:c7:3b:a7:86:52:
30:9e:cc:7c:fb:56:fc:b3:41:c0:15:49:e2:b6:24:
0c:4a:6d:87:cf:b5:4f:ca:18:1f:a4:fa:de:d4:ca:
10:59:b4:a9:0f:c1:0c:ea:a6:db:34:94:5a:ef:0d:
b3:55:b5:01:ea:c3:d3:67:d8:42:ba:55:81:03:8d:
19:bc:83:16:5a:7e:ea:e6:21:8f:27:3c:b0:83:f2:
d7:6b:c0:1a:89:08:58:e8:6d:21:5e:93:ee:02:9d:
8e:5c:ea:2e:64:8b:90:5c:5b:ad:05:60:9c:74:47:
59:6a:fb:43:54:7e:f9:a2:12:f3:17:10:0b:53:70:
5d:38:76:cc:11:ad:73:51:75:75:a5:cc:b9:88:71:
d4:05:11:68:1a:e5:73:a8:91:79:37:ae:2a:97:10:
3c:0e:ce:38:b4:e6:b9:ee:9e:33:38:df:03:5e:66:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:06:D7:65:05:59:C6:CF:E3:9B:45:75:B3:C9:6F:5D:4E:08:00
X509v3 Authority Key Identifier:
keyid:CA:FB:73:F2:34:6E:1C:1F:F2:9A:EA:24:5E:19:FE:53:27:B2:C2:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/1/CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/1/CAFB73F2346E1C1FF29AEA245E19FE5327B2C23D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:b4:2b:f3:0a:5c:1e:00:ad:31:9e:0b:80:9b:56:e0:88:
56:8f:37:7c:c9:43:13:6a:3b:dc:1c:64:71:5a:e4:31:b2:92:
c6:e9:1b:11:1a:a5:7e:6f:06:38:6d:2d:c1:ba:e6:68:ef:9a:
c8:5e:ca:fc:03:65:64:8b:96:60:ec:ff:81:25:a1:c2:ab:a3:
7e:1f:8c:e9:10:cf:83:b5:35:50:db:91:dc:0c:47:dc:63:0b:
65:48:47:2c:fa:ed:9e:9b:3b:b4:e6:b6:dc:61:4d:3c:d2:af:
e2:fb:7d:9e:30:29:ac:a3:21:56:d9:cd:62:51:ef:4a:a1:7f:
cd:2b:a6:cd:fb:cd:e8:42:01:26:13:c7:2f:a6:db:15:8d:f5:
a5:89:19:12:43:33:ae:12:1d:57:e8:c2:47:6e:33:a0:06:99:
fd:4a:b6:63:c6:40:32:43:22:48:b1:86:f4:23:ab:38:a1:c8:
cb:b8:c2:3c:41:c5:a7:8d:25:58:0e:f8:06:bb:a5:3c:54:7f:
2c:40:57:82:bc:23:10:c5:70:a8:a7:9e:6c:3e:2c:ed:31:22:
ae:b7:60:15:dc:4a:63:19:46:d0:30:e4:b2:60:d5:69:4f:8c:
e6:25:f0:e5:9b:53:3c:ca:46:4e:9a:d9:74:e0:5f:2c:df:a0:
f1:60:79:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:25 2024 by rpki-client on console-ams.rpki-client.org