Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
File: 84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json)
Hash identifier: 9GkouDgr0WKYJgldqq+HF307+U/YxExBBiLXcx5k/Ts=
Subject key identifier: 5A:7D:B3:C2:93:59:BC:A4:39:D1:74:0D:66:ED:AA:80:27:EB:63:2C
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial: 39793BEC75DD3188B6E7C54833852C1C503313B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
Manifest number: 01E7
Signing time: Sat 29 Mar 2025 00:40:00 +0000
Manifest this update: Sat 29 Mar 2025 00:35:00 +0000
Manifest next update: Sun 30 Mar 2025 02:19:00 +0000
Files and hashes: 1: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: XTvtebp7oM9owviERxilfDQ7pM/0nW6KsEuwtKryh3E=)
2: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: mE12Dcz8WM5+xGfIvSaA4ARybDY9vwwZtfJxcUxUZ10=)
3: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: 2+vYUt+aiSeTSKIoA4RTr4VRql5FrrLCktFxzuoaL6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:79:3b:ec:75:dd:31:88:b6:e7:c5:48:33:85:2c:1c:50:33:13:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
Validity
Not Before: Mar 29 00:35:00 2025 GMT
Not After : Mar 30 02:19:00 2025 GMT
Subject: CN=5A7DB3C29359BCA439D1740D66EDAA8027EB632C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:af:8a:15:d3:b8:41:95:54:d3:c6:5f:e8:
97:bb:27:f9:e9:bf:c1:e1:82:d8:8c:cd:1a:65:51:
cb:fb:19:e9:e9:63:17:c7:c8:85:2e:b2:0f:90:75:
8e:95:42:1f:2a:6d:ff:ab:17:64:aa:11:47:f0:8a:
e5:5e:72:03:bd:15:4b:be:54:3b:77:e1:46:0c:8a:
f5:6e:30:fa:1d:c6:bb:c7:ca:df:ed:b9:89:65:f0:
f2:89:86:31:ec:e1:aa:41:8f:ce:43:b1:77:49:1b:
d1:b9:a3:a7:73:3c:a6:c4:9d:ac:a8:8e:06:f5:ef:
63:31:74:26:f8:85:b2:65:7c:83:2d:c9:4f:c1:08:
74:1c:da:cd:96:90:8c:a0:cb:fe:08:76:b3:5b:ca:
ee:f2:0c:e8:50:85:3d:d8:4e:4c:71:5d:2e:03:07:
e2:2f:54:73:92:b0:6e:4e:c9:65:bf:ab:20:78:19:
b9:01:a2:8c:f6:54:cf:31:67:29:0e:45:6a:c4:4f:
96:86:f8:30:13:ce:63:f8:43:25:4d:e2:7c:3d:75:
1d:a6:bc:37:2a:90:7c:2b:48:98:a6:1d:d5:89:b7:
0e:06:75:2b:d8:27:d3:bb:51:35:3d:ee:d7:e2:e3:
2b:52:cb:30:f7:1a:cb:1b:3d:c8:4e:a5:c2:c8:a8:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7D:B3:C2:93:59:BC:A4:39:D1:74:0D:66:ED:AA:80:27:EB:63:2C
X509v3 Authority Key Identifier:
keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b5:13:ef:a8:90:f9:7c:4a:65:19:4f:a0:cb:4a:4c:98:d4:
a9:e6:20:51:13:63:21:a7:e5:eb:ad:bc:cb:c3:4d:cf:68:28:
46:86:06:0d:0a:ca:31:9e:23:02:df:eb:4d:84:8a:71:86:3b:
fb:12:03:aa:d1:ff:89:65:83:08:ae:6e:f0:8a:ff:59:91:67:
ec:9b:78:f2:cd:18:d0:e6:9d:de:24:2d:5e:89:9b:45:97:a3:
41:b6:f9:99:6d:55:21:7e:98:4b:05:c0:f5:b9:08:f0:e2:b4:
b5:74:9e:27:26:4f:35:a6:ae:14:e8:72:af:7d:af:6e:e0:2e:
85:02:c3:9a:a1:83:d0:86:d7:35:e4:56:fd:e2:08:9b:e1:07:
d4:fc:95:25:f0:73:87:95:0b:1e:3d:7e:d2:8e:e0:0c:84:29:
8b:32:0f:e6:c8:3d:dd:8c:bc:bc:67:31:c0:a0:dd:4b:c6:9d:
c8:55:8c:bc:28:02:ec:11:67:32:19:d8:b4:9f:2d:8c:fd:87:
20:c3:cd:ce:34:6a:a0:1b:9b:60:90:43:da:b7:18:1d:65:89:
e0:ba:9e:c7:b9:69:15:67:a6:34:e6:4c:0d:6e:a8:97:f3:f3:
56:52:ca:c1:0f:a7:95:fa:f3:d8:4e:38:a5:f8:14:3b:44:4a:
98:e9:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:44:15 2025 by rpki-client