Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.mft
File: 388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.mft (raw, json)
Hash identifier: 5TZnlkP7WX5AIieaoNdTevmjH9DmJT8KtfqnOwJ0lB0=
Subject key identifier: 8D:57:7E:A8:FC:CE:A2:0F:3B:C0:A0:72:D5:67:53:E1:22:FB:30:81
Authority key identifier: 38:8E:EB:C4:A0:2E:DA:89:CA:BF:A0:84:2A:E8:E8:EE:40:C2:6C:A7
Certificate issuer: /CN=388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7
Certificate serial: 20C2E5890E97A557373F109BC82EE6E9991BC88D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.mft
Manifest number: 0121
Signing time: Tue 05 Dec 2023 08:36:40 +0000
Manifest this update: Tue 05 Dec 2023 08:31:40 +0000
Manifest next update: Wed 06 Dec 2023 10:42:40 +0000
Files and hashes: 1: 34352e3138332e3133322e302f32322d3233203d3e20323639323832.roa (hash: noU4QmEr78l+Lbf50lNDww1baDQHa0Mve+7crADyW/Y=)
2: 388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.crl (hash: /NyqhpY2VTN0iaOFyeXJ70ToJ63veFzkHtl3uC5Avqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c2:e5:89:0e:97:a5:57:37:3f:10:9b:c8:2e:e6:e9:99:1b:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7
Validity
Not Before: Dec 5 08:31:40 2023 GMT
Not After : Dec 6 10:42:40 2023 GMT
Subject: CN=8D577EA8FCCEA20F3BC0A072D56753E122FB3081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:97:24:a1:c3:43:51:48:cb:b3:2a:00:8a:
de:0f:e9:82:fb:22:1d:78:5c:43:0e:3e:a6:07:e2:
f3:25:d2:9a:4d:b5:f6:5d:68:2a:d7:38:f7:37:78:
fc:15:a9:93:c9:58:fc:39:6c:3f:f1:72:ad:86:04:
08:59:83:10:3f:10:55:c5:eb:63:e5:9f:f3:73:cb:
fa:be:d4:f6:f0:74:ab:19:8d:ac:b9:82:89:b8:66:
31:55:6c:77:13:51:2a:45:fe:8a:9e:d7:8b:d9:f9:
33:af:bc:00:50:c1:a6:ad:49:6f:71:45:6c:0e:94:
99:5b:be:f3:f4:a6:ae:1e:9f:c2:43:c9:41:48:34:
0c:27:a8:63:ce:37:7f:1d:cb:63:cf:30:6f:af:0d:
6f:8e:22:96:cb:02:32:b1:f5:70:1e:81:95:2d:ad:
6c:e2:c8:ef:7c:cd:59:95:1c:89:a5:84:f0:d1:2f:
62:28:48:19:37:36:f7:eb:15:f2:4a:37:b4:74:90:
ee:96:6d:7c:58:a8:e6:1f:9d:e8:42:06:b7:67:f0:
3f:0b:b5:92:ca:f6:56:ad:e5:92:1f:40:05:7e:41:
24:b8:3d:c7:68:7e:dc:d5:66:e6:b5:00:a9:4b:55:
fd:d9:bf:89:8e:4f:b9:c2:69:e6:22:a4:25:ee:90:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:57:7E:A8:FC:CE:A2:0F:3B:C0:A0:72:D5:67:53:E1:22:FB:30:81
X509v3 Authority Key Identifier:
keyid:38:8E:EB:C4:A0:2E:DA:89:CA:BF:A0:84:2A:E8:E8:EE:40:C2:6C:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:89:77:94:4a:57:4b:98:4a:aa:a2:61:0a:85:6f:c4:51:32:
47:13:2c:6d:84:0e:51:6c:bd:a0:5d:c4:d8:56:44:c8:13:3a:
84:a6:d7:55:c5:2c:4d:de:3a:89:11:c7:74:9f:27:ce:34:b2:
5d:ff:4b:ca:1a:66:b9:c5:e7:8d:78:13:a9:fb:40:46:67:78:
ef:c5:df:1c:ad:23:cf:51:49:6c:ec:9c:64:5b:05:b2:64:64:
02:c3:81:96:1d:66:29:3e:49:e4:29:2d:8c:09:bc:c8:e4:8f:
01:63:82:f3:ca:c1:e7:5e:9a:32:80:4c:41:17:77:74:67:cf:
bf:2f:ec:81:7f:87:a9:92:53:88:cb:67:9c:08:f8:ce:23:0f:
d9:51:af:08:7c:58:02:14:2c:f3:a8:b3:3b:f1:39:7b:15:0b:
cc:d3:61:4b:db:74:e2:36:0c:db:12:ba:3c:9c:14:64:6d:b5:
ef:f1:9d:85:a7:0d:a7:ca:f4:4f:a2:66:fc:75:af:ce:26:9f:
82:1a:10:30:19:27:0e:24:06:e7:43:4c:c4:55:13:eb:25:e1:
76:93:0d:1c:19:38:bf:82:a2:c9:da:fe:dd:cd:11:57:e6:8a:
69:51:9f:d6:db:ea:de:f8:5d:6e:71:9c:4e:0d:ba:d8:c5:06:
11:45:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org