Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
File: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json)
Hash identifier: xxwm7nrgHNDOJFRpM4CbYEl45uG0BuLnv0ZdR9Vd/2k=
Subject key identifier: FB:C7:3D:E4:DB:71:1A:AB:CD:32:33:FF:E2:F8:16:ED:8C:6D:8F:85
Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED
Certificate issuer: /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
Certificate serial: 1DA31468F65508C985412E035146D4950A25B369
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
Manifest number: 01E0
Signing time: Sat 29 Mar 2025 08:32:21 +0000
Manifest this update: Sat 29 Mar 2025 08:27:21 +0000
Manifest next update: Sun 30 Mar 2025 12:13:21 +0000
Files and hashes: 1: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: N0btAFtvDXp7wrWYpNQVZV54i7RyzNCdiBD/oCt2wRo=)
2: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: P1kjWEGrObzZJrYICVUDSoEdRZLmjZ79Ee/h/Dakbdo=)
3: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: /84WfBk0r1jALsSIlN7z1SffpfqmihWm4I8jvDtcAxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a3:14:68:f6:55:08:c9:85:41:2e:03:51:46:d4:95:0a:25:b3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
Validity
Not Before: Mar 29 08:27:21 2025 GMT
Not After : Mar 30 12:13:21 2025 GMT
Subject: CN=FBC73DE4DB711AABCD3233FFE2F816ED8C6D8F85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:c1:71:1f:ec:d0:be:92:a8:57:5b:9e:ce:
ac:50:d6:ee:34:f8:f0:b1:f7:46:61:ea:1a:7a:f1:
24:0c:97:25:e1:17:c6:4a:4f:96:51:c5:47:85:fc:
fe:6c:70:3b:fd:cb:cd:a8:cb:f4:0e:e4:f3:b9:33:
53:c8:a3:86:b7:91:c5:ea:bb:05:10:9a:ab:b0:ef:
1c:a2:4e:7c:45:a1:9b:96:61:41:3f:0d:18:8a:d9:
14:20:96:87:eb:06:50:f7:25:53:02:c7:91:78:ff:
60:68:e6:c1:1d:1d:14:a9:b3:70:09:ba:0f:83:87:
6d:20:e3:38:fd:05:d6:1f:52:e5:01:40:e9:00:09:
38:86:49:0c:0a:4b:08:2d:67:45:fb:bc:70:cb:35:
6c:d6:dc:1a:1e:30:8b:44:35:00:a1:d8:6e:da:9c:
c9:05:3f:04:79:fe:fb:5a:6c:3f:65:b0:a2:74:88:
cd:a7:b8:0c:1c:96:5e:75:b2:96:c2:4e:e5:31:d7:
0f:38:4a:72:35:90:13:c0:e7:1f:9b:15:f8:98:8e:
b9:fe:fd:ba:ee:d4:17:48:6e:3b:6d:2d:3e:7f:3f:
b4:02:fd:1b:87:82:a4:ec:ea:93:7d:de:b5:b2:8e:
0f:ff:b8:49:eb:57:5b:ec:ec:28:b4:f2:e3:34:90:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C7:3D:E4:DB:71:1A:AB:CD:32:33:FF:E2:F8:16:ED:8C:6D:8F:85
X509v3 Authority Key Identifier:
keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:24:80:b8:b0:d8:70:c6:cb:7d:b3:f9:4b:5f:1e:65:cc:
84:28:31:fa:99:15:8c:db:c5:e1:f2:8a:ba:18:ef:da:1c:30:
1e:34:b0:3f:ba:65:be:a6:72:ce:fa:64:58:43:ac:76:37:91:
06:4f:10:60:ac:a5:9c:2b:fc:21:e4:2c:e6:0d:3d:d0:f5:f0:
3e:92:b0:de:c6:c9:d5:41:76:8d:73:dc:7d:c0:1c:da:c3:87:
88:a1:53:7c:d8:bc:8f:e7:89:0c:d7:38:ed:14:9b:d1:54:50:
0a:24:ed:3f:6d:e2:0c:9a:52:50:3d:f2:4f:6c:04:e2:d4:37:
fd:a3:3b:7c:20:05:7a:1a:99:94:3b:0b:08:27:ea:29:29:ea:
77:fb:41:f4:93:c9:6a:00:28:83:7f:c4:e0:3d:e4:80:9d:af:
98:e5:85:ae:20:59:d6:ef:ea:da:3b:6c:15:4a:0d:d8:fd:16:
57:4a:ff:ce:f1:0f:a2:4f:59:df:5b:17:1f:52:16:4c:a3:73:
b6:ab:b8:79:10:de:9f:dc:64:aa:b4:9f:a2:a0:29:54:2b:66:
8e:79:9c:90:1c:90:7e:85:07:9b:2f:83:e6:38:f1:ec:af:64:
bf:3e:f9:4c:cd:61:72:34:82:01:fc:05:55:08:5c:d2:e3:0d:
bb:85:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:11 2025 by rpki-client