Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
File: 21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft (raw, json)
Hash identifier: bDQTRjDHgQRVpzV7xRvRO2iUSLuaYOZvzaeQivcEaMw=
Subject key identifier: 2F:C4:52:CD:23:F9:2D:E7:A8:19:D8:D9:91:BB:BE:21:98:54:65:DA
Authority key identifier: 21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
Certificate issuer: /CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
Certificate serial: 4699F699469E7EFF1644EAB15784781FE1676A1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
Manifest number: C5
Signing time: Sat 29 Mar 2025 10:48:38 +0000
Manifest this update: Sat 29 Mar 2025 10:43:38 +0000
Manifest next update: Sun 30 Mar 2025 10:59:38 +0000
Files and hashes: 1: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: uKlW6ey3gtuTHtGtsRuiQzb77eO/RtkKavczvp/qvgc=)
2: 3137372e37342e36342e302f32302d3234203d3e20323632333136.roa (hash: H+rjNNN33HYHPhsY/++o+N6jUgAcds6B+fTxN+TTGlk=)
3: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: F/5uoS80CbfVSBqDoAaPMmWNWgMlOrH8siX2/GuuEDo=)
4: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: jSJKCG6Dd8KPD0thnB/kAUfSmgjxE2Y6R8Jgw6js0Eo=)
5: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: q8y18T/cZ0wq8rBp5y9YkJ8i/Tb1hTdYdSmC4bye+V0=)
6: 21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl (hash: VwfTMLXpm0aUVxF6Xq5U2QbmZ80Q5RX9Ki9/c3E5S64=)
7: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: 7paOLLCXTS/6J0SVjmbHabnegWo4UQbhdmaeVAST0g4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:99:f6:99:46:9e:7e:ff:16:44:ea:b1:57:84:78:1f:e1:67:6a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
Validity
Not Before: Mar 29 10:43:38 2025 GMT
Not After : Mar 30 10:59:38 2025 GMT
Subject: CN=2FC452CD23F92DE7A819D8D991BBBE21985465DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:40:93:ed:0e:ae:08:57:86:ea:1c:33:44:
36:1e:10:fd:78:a4:1e:eb:be:d8:4b:6f:b5:ff:63:
f5:16:90:a8:6b:c5:d3:5a:3b:a5:00:64:99:af:2f:
5a:30:6c:e2:f3:c3:28:a5:d3:a1:4c:ea:a3:de:a7:
bb:ec:49:6c:40:7a:0b:66:d6:26:b4:cc:c7:df:f0:
20:c3:c8:9d:de:d8:f9:86:4e:f6:cd:cb:8a:f8:d0:
27:3f:49:5f:7e:ea:51:65:95:1b:30:a0:90:c2:5e:
5c:99:02:1d:b1:5b:fa:72:a7:89:94:cc:cc:ad:01:
ed:f0:2a:03:6c:7c:53:a7:c1:92:55:60:15:82:a1:
26:f8:75:d2:41:d8:a9:13:77:82:90:71:dc:01:4c:
5e:f5:70:11:f0:c4:fe:87:0e:a1:e6:be:eb:3f:98:
6f:79:9b:66:fb:8d:67:65:6c:de:1f:a0:f5:f9:b7:
48:86:5a:32:2e:2f:47:44:89:1b:41:3c:00:d1:2e:
4d:67:2c:56:11:5c:b7:cc:10:b2:f7:7a:e1:45:16:
cd:f3:8f:e8:ac:20:b3:e8:08:ca:01:48:14:cc:03:
ee:b7:a3:59:4a:a5:5d:4a:f6:b8:09:87:d4:ab:eb:
a4:f1:f9:80:9d:f1:52:09:f4:97:78:cc:b3:21:b7:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C4:52:CD:23:F9:2D:E7:A8:19:D8:D9:91:BB:BE:21:98:54:65:DA
X509v3 Authority Key Identifier:
keyid:21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ce:be:af:e0:de:db:ee:33:72:c8:f7:e3:a5:53:64:e9:8d:
fe:f6:2b:cf:ed:f0:35:1d:af:07:cc:6b:38:29:dd:3c:a4:ba:
2d:54:47:46:77:fa:98:d3:97:e3:f0:17:38:f6:1a:da:70:da:
18:c8:b6:ac:10:32:b1:9c:be:ba:d7:6d:1d:80:df:e5:60:c2:
a1:9e:de:6c:d2:d2:20:0d:d9:5b:78:93:26:29:be:05:92:30:
e9:09:b8:b5:3e:0d:4f:4b:77:a8:3a:60:22:fe:75:47:18:e1:
7e:31:45:d3:cd:f0:b2:7b:98:90:b3:6f:5c:dc:b1:ab:d8:59:
5a:78:a8:4c:1e:01:0e:da:57:31:6f:f4:48:02:c6:74:72:70:
2b:d4:c1:2e:b7:60:96:c3:b9:43:e6:b6:7d:9d:31:35:b2:44:
ab:ac:3c:25:38:9f:3a:af:7a:99:92:04:19:cd:64:66:92:58:
d5:06:f2:b3:b3:0c:c9:f5:be:1d:41:64:99:62:d9:64:e6:d9:
a7:36:c9:42:a5:c7:44:c1:31:c4:8d:aa:45:cd:32:33:dc:65:
7b:79:1f:54:c9:64:43:b0:4c:b4:d0:77:95:b8:f0:68:cb:07:
0b:03:6f:94:3a:2d:e1:52:72:e0:d4:11:dd:d0:55:44:3e:7a:
10:8c:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:42 2025 by rpki-client