Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json)
Hash identifier: Ep5JEQz/11o7uepS9Oa/vQz/1DQaJNTDhdwVhcV6JwM=
Subject key identifier: CD:89:36:87:62:FB:77:CE:78:92:E0:3C:92:A9:E8:8A:CE:00:F8:BF
Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201
Certificate serial: 2519134D7F6860423DFD4CA15D791550730C0BB6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
Manifest number: B6
Signing time: Sat 29 Mar 2025 08:41:34 +0000
Manifest this update: Sat 29 Mar 2025 08:36:34 +0000
Manifest next update: Sun 30 Mar 2025 10:07:34 +0000
Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=)
2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: fpHROCaKVPcXsmm/pmLhFnzcg2/RPR2N657EHNNszTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:19:13:4d:7f:68:60:42:3d:fd:4c:a1:5d:79:15:50:73:0c:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201
Validity
Not Before: Mar 29 08:36:34 2025 GMT
Not After : Mar 30 10:07:34 2025 GMT
Subject: CN=CD89368762FB77CE7892E03C92A9E88ACE00F8BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:6c:57:a7:03:db:29:43:30:6f:34:3b:15:
44:03:2c:8f:9b:40:eb:79:e2:8d:16:9e:29:21:7d:
dc:7c:40:5f:a1:9d:52:4b:6e:5b:ee:0f:4e:cb:11:
09:5e:8f:28:14:78:bf:d6:6b:32:fd:76:8f:2c:99:
34:88:83:73:78:df:ee:57:ad:1f:72:fd:1b:58:2c:
b1:38:96:26:c2:e2:b8:1a:6b:8b:53:86:43:37:9e:
b2:a0:5f:8c:a2:53:95:3a:92:51:78:1c:dd:77:e4:
7c:57:2a:67:2a:82:b5:a3:0c:43:0d:eb:f1:3a:db:
34:9d:e8:f3:38:59:ca:6c:47:a5:03:a2:a6:66:20:
f9:ba:3a:83:31:a2:9b:b1:a1:9a:27:06:fb:a6:d0:
49:1d:c1:f2:ee:8d:fc:f9:62:64:b0:8a:0f:35:1b:
58:d7:81:0e:c6:4e:91:8a:6c:0f:ea:cb:31:0e:4b:
c1:2b:ec:16:03:83:b1:50:1a:d1:bc:8c:8d:d9:1e:
65:c4:7d:5a:25:15:d8:d3:5b:e5:f1:c2:2d:47:a3:
1f:06:05:c4:5d:1b:59:20:ad:38:02:c6:20:b1:47:
d2:bc:74:85:1c:05:43:67:8b:57:6e:37:b0:3b:39:
56:f9:5a:58:38:0f:35:0b:72:0c:7b:fb:7e:28:48:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:36:87:62:FB:77:CE:78:92:E0:3C:92:A9:E8:8A:CE:00:F8:BF
X509v3 Authority Key Identifier:
keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:32:a6:98:41:ee:a3:c2:6b:93:26:60:45:f6:6c:da:2b:21:
e6:2b:d2:d9:82:22:38:37:ca:b2:d1:4c:5c:d8:dc:59:59:5d:
ea:13:c5:3e:da:d5:6e:e2:de:45:1d:16:ab:db:1f:1e:67:84:
85:83:41:b2:8c:eb:b1:88:45:d7:fc:5e:6c:c4:95:a5:2c:50:
9e:0b:2f:33:2c:38:ea:1b:ac:6e:5e:c4:a0:46:a7:e0:7a:c1:
61:85:07:c8:0b:17:2b:19:29:cf:54:6c:1b:2a:b1:5d:96:de:
57:a6:ec:6a:48:12:ba:b3:95:39:f9:23:2d:54:cf:95:c2:20:
58:f8:c6:8b:bc:84:0b:53:70:a7:76:dd:9f:a7:83:09:75:32:
a5:18:40:1d:a2:b9:49:ad:d2:a9:5c:0d:b7:24:56:d9:dd:6a:
87:05:b3:29:90:4e:0f:2e:84:8b:6c:c1:8a:be:68:e2:85:93:
60:c3:6e:d3:b1:62:82:c4:11:f5:26:cc:33:4d:0c:e8:22:ef:
59:e9:1e:02:15:9b:7d:17:51:86:0a:ad:c9:67:86:d3:73:7b:
f1:fb:c0:1d:de:ba:e2:2c:0d:4b:0c:f2:98:0e:6f:fb:27:14:
f3:93:53:22:79:4f:27:51:e5:b5:90:b5:6a:97:b4:58:8d:8e:
a6:63:22:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJRkTTX9oYEI9/UyhXXkVUHMMC7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy
NzBBOTIwMTAeFw0yNTAzMjkwODM2MzRaFw0yNTAzMzAxMDA3MzRaMDMxMTAvBgNV
BAMTKENEODkzNjg3NjJGQjc3Q0U3ODkyRTAzQzkyQTlFODhBQ0UwMEY4QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJWxXpwPbKUMwbzQ7FUQDLI+b
QOt54o0Wnikhfdx8QF+hnVJLblvuD07LEQlejygUeL/WazL9do8smTSIg3N43+5X
rR9y/RtYLLE4libC4rgaa4tThkM3nrKgX4yiU5U6klF4HN135HxXKmcqgrWjDEMN
6/E62zSd6PM4WcpsR6UDoqZmIPm6OoMxopuxoZonBvum0EkdwfLujfz5YmSwig81
G1jXgQ7GTpGKbA/qyzEOS8Er7BYDg7FQGtG8jI3ZHmXEfVolFdjTW+Xxwi1Hox8G
BcRdG1kgrTgCxiCxR9K8dIUcBUNni1duN7A7OVb5Wlg4DzULcgx7+34oSDvrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzYk2h2L7d854kuA8kqnois4A+L8wHwYDVR0j
BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW
RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1
OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E
Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAojKmmEHuo8JrkyZgRfZs2ish5ivS2YIiODfKstFMXNjcWVld6hPFPtrVbuLe
RR0Wq9sfHmeEhYNBsozrsYhF1/xebMSVpSxQngsvMyw46husbl7EoEan4HrBYYUH
yAsXKxkpz1RsGyqxXZbeV6bsakgSurOVOfkjLVTPlcIgWPjGi7yEC1Nwp3bdn6eD
CXUypRhAHaK5Sa3SqVwNtyRW2d1qhwWzKZBODy6Ei2zBir5o4oWTYMNu07FigsQR
9SbMM00M6CLvWekeAhWbfRdRhgqtyWeG03N78fvAHd664iwNSwzymA5v+ycU85NT
InlPJ1HltZC1ape0WI2OpmMiVQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:55:24 2025 by rpki-client