Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.mft
File: 0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.mft (raw, json)
Hash identifier: 3NTJSX/6SiZC4aiOV6BiRRHo2yROTwGyy7wEjzc82us=
Subject key identifier: A4:A1:3F:1E:74:40:BA:09:B3:9D:A4:DB:D1:BD:6D:05:72:14:7D:0E
Authority key identifier: 0F:F8:D1:D6:9C:94:FA:2F:A7:03:EB:A2:E4:78:9E:7B:04:46:C7:D0
Certificate issuer: /CN=0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0
Certificate serial: 762690BD1FB6274E8D1EA419D40D925D535CEC13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.mft
Manifest number: A0
Signing time: Tue 28 Feb 2023 06:01:21 +0000
Manifest this update: Tue 28 Feb 2023 05:56:21 +0000
Manifest next update: Wed 01 Mar 2023 06:34:21 +0000
Files and hashes: 1: 323830343a383261633a3a2f33322d3332203d3e20323732353333.roa (hash: Lgrk/K3yNqTFbGQOk3lhPvMO+03+kAQXSA+OUBaDRQs=)
2: 0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.crl (hash: blougA2Bp8gncqkyBS3u+Gh/5qgLEnTREIlJ0lwLQvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:26:90:bd:1f:b6:27:4e:8d:1e:a4:19:d4:0d:92:5d:53:5c:ec:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0
Validity
Not Before: Feb 28 05:56:21 2023 GMT
Not After : Mar 1 06:34:21 2023 GMT
Subject: CN=A4A13F1E7440BA09B39DA4DBD1BD6D0572147D0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:b1:ac:ae:8a:f5:d6:39:ba:76:90:25:8f:
35:b2:0b:7a:ce:83:f6:14:42:f6:4f:6f:cf:d2:c6:
34:3e:d1:fc:73:5b:03:c2:0b:b9:6f:01:5e:2e:2b:
f8:02:34:45:7e:8d:01:cc:7d:5e:ea:13:a8:59:69:
d8:c6:c0:b9:c0:72:45:77:b1:6e:69:74:33:2a:13:
94:04:47:79:fc:14:29:9d:53:3b:8e:6c:99:be:a1:
68:e2:b4:ab:f4:e6:7d:fd:f4:d1:ab:01:2b:24:b4:
39:8f:93:e5:51:51:78:dc:cf:c7:d5:b8:ad:8d:f5:
d4:da:06:90:bb:d5:5f:04:c6:73:d9:ee:a9:a0:25:
13:32:01:ea:8e:f1:ed:23:f4:7d:e6:99:a6:b0:24:
69:88:8f:6f:a6:63:ec:0f:de:1f:d7:59:b2:49:d7:
37:78:a2:20:6f:aa:2a:f2:c5:7d:1e:81:c0:80:0d:
44:16:54:73:59:ab:c6:dd:c6:17:77:b7:cf:5b:6f:
79:d4:04:c7:93:ab:c5:ad:0b:39:0d:ae:ac:63:6d:
87:f6:5f:94:12:a1:8a:7d:a2:e4:83:7c:33:0a:7f:
7a:3b:75:6a:9a:67:7c:1a:52:78:51:06:72:f4:2f:
4e:02:26:aa:c5:5a:25:a6:0c:c2:e2:e3:42:b8:3e:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A1:3F:1E:74:40:BA:09:B3:9D:A4:DB:D1:BD:6D:05:72:14:7D:0E
X509v3 Authority Key Identifier:
keyid:0F:F8:D1:D6:9C:94:FA:2F:A7:03:EB:A2:E4:78:9E:7B:04:46:C7:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/0FF8D1D69C94FA2FA703EBA2E4789E7B0446C7D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:92:fb:65:8b:ce:af:72:84:a2:84:89:69:5f:a0:4d:0f:36:
80:ad:a3:01:70:3d:1c:ce:7e:8b:b7:9a:84:de:16:97:9f:1d:
12:14:97:cf:f8:59:7b:5b:47:c4:10:ab:91:ca:94:3c:55:30:
60:d4:22:87:6d:c9:27:4e:df:83:fc:27:51:7f:bc:f2:33:f8:
92:71:fd:33:87:84:4d:2a:eb:ca:8d:67:aa:56:3b:91:1c:9e:
e1:c0:55:d6:10:21:87:d9:22:fa:03:d3:43:2b:f9:54:f0:8a:
a4:52:d0:ef:8d:15:45:41:14:0c:94:0e:71:1d:00:18:a0:d0:
43:af:5f:e8:fe:ca:cd:16:0c:20:23:18:af:75:ab:52:15:2f:
e3:f6:bd:78:0e:fb:a6:66:b5:7f:9d:cb:49:76:08:5e:35:bf:
cb:75:2d:ca:31:5c:31:19:e9:c2:6e:20:2a:10:9a:5b:ba:67:
86:f9:c8:f2:9b:5e:b3:c6:5f:d8:14:00:fd:b8:5e:2d:4c:6d:
73:58:79:b9:75:05:e4:f8:6d:7c:63:67:f8:be:0f:e4:6e:7c:
b0:8b:22:99:aa:1a:15:2c:88:03:8c:1b:6e:c0:93:a7:8e:75:
0e:41:d4:a6:17:b6:74:f2:53:5a:91:de:26:7d:19:9b:ea:32:
17:35:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:11 2025 by rpki-client