![](/console.gif)
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/420A61C1F966588AE8CAED095F58CB189089BBBC.mft
File: 420A61C1F966588AE8CAED095F58CB189089BBBC.mft (raw, json)
Hash identifier: HcFl2QH7+vijrzOyEO3T8AhZbARuXLr+C7DKD1iee8s=
Subject key identifier: F8:3E:0D:B7:E6:05:B3:4A:8C:85:9F:3B:E3:F0:22:7A:32:52:94:7F
Authority key identifier: 42:0A:61:C1:F9:66:58:8A:E8:CA:ED:09:5F:58:CB:18:90:89:BB:BC
Certificate issuer: /CN=420A61C1F966588AE8CAED095F58CB189089BBBC
Certificate serial: 314D2FC7E5E3628F6F8AA5787DDE95D9CCDE8F95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420A61C1F966588AE8CAED095F58CB189089BBBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/420A61C1F966588AE8CAED095F58CB189089BBBC.mft
Manifest number: 5E
Signing time: Sun 14 Jan 2024 04:39:00 +0000
Manifest this update: Sun 14 Jan 2024 04:34:00 +0000
Manifest next update: Mon 15 Jan 2024 07:09:00 +0000
Files and hashes: 1: 3137302e3233332e3133362e302f32322d3234203d3e20323635303739.roa (hash: JCxp39zJ2i5BmEKZn3wFmeJ1/Zup6R430I27yfJ1oY8=)
2: 420A61C1F966588AE8CAED095F58CB189089BBBC.crl (hash: LfRMVENIjmubiRm5EZll0b7MBgXX493Wos3zH+hjERY=)
3: 323830343a333237343a3a2f33322d3438203d3e20323635303739.roa (hash: Fwiot9xMBOqrZjRSTuAZd4FxGacJvEKb3yMIATBXq3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4d:2f:c7:e5:e3:62:8f:6f:8a:a5:78:7d:de:95:d9:cc:de:8f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420A61C1F966588AE8CAED095F58CB189089BBBC
Validity
Not Before: Jan 14 04:34:00 2024 GMT
Not After : Jan 15 07:09:00 2024 GMT
Subject: CN=F83E0DB7E605B34A8C859F3BE3F0227A3252947F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4b:06:a3:15:69:9d:e4:73:45:bb:24:f6:16:
7f:00:c2:22:f8:e2:d4:c2:67:e6:29:d1:38:d9:d9:
c3:2c:11:ef:73:a2:52:6f:22:86:4d:13:d2:86:c2:
3b:8c:2c:d1:33:00:6b:2c:7c:bb:41:30:04:4c:da:
78:31:f9:ba:e9:49:c5:46:33:03:76:65:14:c7:67:
87:d4:b6:06:8a:83:5e:8f:20:e9:bf:c7:61:8c:74:
89:9c:11:96:40:c4:bf:8a:45:8b:b3:dc:db:67:09:
c3:52:c4:b8:7a:14:6b:94:48:53:1e:57:5c:77:bf:
af:b4:f0:be:bb:77:2f:1a:75:5e:26:4d:34:42:98:
be:3c:92:3c:f8:6d:a0:ea:13:5f:79:51:c7:56:35:
dc:dc:a2:09:89:eb:f2:a4:7b:fe:ed:da:87:c1:03:
7b:cc:40:e4:1e:b5:38:f4:04:8b:f2:e6:74:f2:0e:
65:fb:fa:3f:68:f5:ad:26:0f:2a:84:10:f8:78:bc:
95:f2:ad:f9:2a:44:6d:b2:2a:6d:b5:c1:f7:f2:7a:
25:0f:ad:8a:5e:b5:0d:8a:80:a2:9c:55:fd:5d:7b:
db:df:bd:87:09:51:8f:94:b2:04:6f:f3:e0:08:0e:
ee:e1:76:f9:63:fa:f3:2d:3e:d0:cc:eb:53:a4:17:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:0D:B7:E6:05:B3:4A:8C:85:9F:3B:E3:F0:22:7A:32:52:94:7F
X509v3 Authority Key Identifier:
keyid:42:0A:61:C1:F9:66:58:8A:E8:CA:ED:09:5F:58:CB:18:90:89:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/420A61C1F966588AE8CAED095F58CB189089BBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420A61C1F966588AE8CAED095F58CB189089BBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/420A61C1F966588AE8CAED095F58CB189089BBBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:21:dc:a4:13:5b:c6:7d:92:49:c0:87:02:e5:ea:1e:08:23:
f1:f2:4f:bd:97:21:f0:0b:1e:0a:87:4c:f3:24:a2:bc:ec:0c:
5a:69:f3:d5:26:e3:f1:75:45:78:92:70:c9:63:0d:b8:7f:e3:
09:b3:24:c6:0e:3b:5e:3e:10:78:6d:9c:4c:6a:95:35:da:56:
f6:cb:44:90:2e:be:1c:f0:03:6b:18:a7:c0:f0:e1:5a:a5:09:
91:99:bb:33:bb:7f:88:06:f3:c1:79:e7:84:57:f5:bb:7b:01:
c7:2e:30:31:ad:6e:da:66:88:34:d4:24:0c:2f:63:19:90:95:
a7:b5:46:a3:46:8c:e9:e4:61:e7:46:38:14:02:87:67:70:25:
35:3a:4e:84:7a:f8:e5:2d:61:81:f9:db:3f:a2:10:5f:1e:f7:
28:75:6c:8a:2a:98:6f:39:af:14:78:8c:9d:57:78:9b:7d:20:
03:e5:04:3e:8c:d3:3f:53:d7:93:98:3f:44:b1:ff:ff:db:50:
3a:9c:8f:61:f3:c4:bf:82:2c:1e:da:2f:cf:0e:f9:4b:72:76:
8d:54:34:e8:5d:f0:b9:b1:27:ad:61:ef:57:fb:2f:35:16:dc:
74:e0:67:0b:d5:64:86:f3:f6:24:60:37:c6:91:92:b9:33:64:
3e:b2:24:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMU0vx+XjYo9viqV4fd6V2czej5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwQTYxQzFGOTY2NTg4QUU4Q0FFRDA5NUY1OENCMTg5
MDg5QkJCQzAeFw0yNDAxMTQwNDM0MDBaFw0yNDAxMTUwNzA5MDBaMDMxMTAvBgNV
BAMTKEY4M0UwREI3RTYwNUIzNEE4Qzg1OUYzQkUzRjAyMjdBMzI1Mjk0N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2SwajFWmd5HNFuyT2Fn8AwiL4
4tTCZ+Yp0TjZ2cMsEe9zolJvIoZNE9KGwjuMLNEzAGssfLtBMARM2ngx+brpScVG
MwN2ZRTHZ4fUtgaKg16PIOm/x2GMdImcEZZAxL+KRYuz3NtnCcNSxLh6FGuUSFMe
V1x3v6+08L67dy8adV4mTTRCmL48kjz4baDqE195UcdWNdzcogmJ6/Kke/7t2ofB
A3vMQOQetTj0BIvy5nTyDmX7+j9o9a0mDyqEEPh4vJXyrfkqRG2yKm21wffyeiUP
rYpetQ2KgKKcVf1de9vfvYcJUY+UsgRv8+AIDu7hdvlj+vMtPtDM61OkF2PDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+D4Nt+YFs0qMhZ874/AiejJSlH8wHwYDVR0j
BBgwFoAUQgphwflmWIroyu0JX1jLGJCJu7wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW5VYTZoVldMdm5kM1l5WHhXNllNZVBBTEI3VHVtYmc0M0JlUEZKbWFk
ZDUvMC80MjBBNjFDMUY5NjY1ODhBRThDQUVEMDk1RjU4Q0IxODkwODlCQkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMEE2MUMxRjk2NjU4OEFF
OENBRUQwOTVGNThDQjE4OTA4OUJCQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OW5VYTZoVldMdm5kM1l5WHhXNllNZVBBTEI3VHVtYmc0M0JlUEZKbWFkZDUvMC80
MjBBNjFDMUY5NjY1ODhBRThDQUVEMDk1RjU4Q0IxODkwODlCQkJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAciHcpBNbxn2SScCHAuXqHggj8fJPvZch8AseCodM8ySivOwMWmnz1Sbj8XVF
eJJwyWMNuH/jCbMkxg47Xj4QeG2cTGqVNdpW9stEkC6+HPADaxinwPDhWqUJkZm7
M7t/iAbzwXnnhFf1u3sBxy4wMa1u2maINNQkDC9jGZCVp7VGo0aM6eRh50Y4FAKH
Z3AlNTpOhHr45S1hgfnbP6IQXx73KHVsiiqYbzmvFHiMnVd4m30gA+UEPozTP1PX
k5g/RLH//9tQOpyPYfPEv4IsHtovzw75S3J2jVQ06F3wubEnrWHvV/svNRbcdOBn
C9VkhvP2JGA3xpGSuTNkPrIktA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:26 2025 by rpki-client