
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/1234FF6665C6C95261161E86691A9B6A62014491.mft
File: 1234FF6665C6C95261161E86691A9B6A62014491.mft (raw, json)
Hash identifier: BM/i5TZPpUOvf07wGHUh48PhK8XsQ92zuEclf3Sgfrw=
Subject key identifier: A2:41:E5:18:3E:B4:0B:F6:F3:8B:00:21:EE:CC:A9:9C:A6:94:92:54
Authority key identifier: 12:34:FF:66:65:C6:C9:52:61:16:1E:86:69:1A:9B:6A:62:01:44:91
Certificate issuer: /CN=1234FF6665C6C95261161E86691A9B6A62014491
Certificate serial: 17047492F48C4DBBC45FEB153DE7B18D9D14EA62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1234FF6665C6C95261161E86691A9B6A62014491.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/1234FF6665C6C95261161E86691A9B6A62014491.mft
Manifest number: 2A
Signing time: Wed 12 Mar 2025 11:58:50 +0000
Manifest this update: Wed 12 Mar 2025 11:53:50 +0000
Manifest next update: Thu 13 Mar 2025 12:17:50 +0000
Files and hashes: 1: 3230312e3232312e3131362e302f32322d3234203d3e20323731323934.roa (hash: vQrj8eZXXpkCF1fkx6ntyj1XIQqN7uN8KZnW1ltFPAs=)
2: 1234FF6665C6C95261161E86691A9B6A62014491.crl (hash: ae24jGhM5r57cwsXvc5XCZP7yRi4t0vCQvmAzFp1kR8=)
3: 323830343a373934303a3a2f33322d3334203d3e20323731323934.roa (hash: r2gUfPl/jy9jPDICMl14W7aO+mxrgI98i7JpU0zhASQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:04:74:92:f4:8c:4d:bb:c4:5f:eb:15:3d:e7:b1:8d:9d:14:ea:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1234FF6665C6C95261161E86691A9B6A62014491
Validity
Not Before: Mar 12 11:53:50 2025 GMT
Not After : Mar 13 12:17:50 2025 GMT
Subject: CN=A241E5183EB40BF6F38B0021EECCA99CA6949254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:86:9d:a9:af:ff:d0:55:94:18:c2:ec:64:
9a:b9:ac:43:a1:da:6d:45:1c:d7:fc:dd:8d:53:4e:
2d:9e:2b:73:93:fb:2f:29:71:0d:14:fa:ed:0a:fc:
f7:21:16:c3:22:8e:2f:0f:b1:b7:7d:fc:2e:fc:12:
43:e5:8b:5e:f6:5d:a4:8a:3e:5c:14:0e:1f:83:9f:
a2:95:55:65:fe:f3:52:2f:fd:0d:03:2a:17:bf:e0:
3f:03:e7:4a:87:dd:48:b5:ba:e4:50:6d:0e:85:e7:
13:55:82:bc:af:76:11:3f:0d:dc:06:4c:20:d9:f3:
8d:0e:5b:89:e1:1f:0f:d6:c0:bb:6f:b4:99:da:9d:
91:68:f3:e0:d8:cc:4a:68:f5:b0:b7:76:66:01:34:
a5:62:ce:f1:72:6c:ad:04:4a:74:18:57:b2:58:07:
b6:46:74:05:d6:21:3c:38:bb:78:df:a2:01:c5:aa:
89:02:4b:ee:2d:fb:73:1c:e8:4b:14:08:11:14:44:
39:0e:9b:88:ab:db:c5:5d:11:50:76:48:b7:8f:c7:
91:8c:60:33:0e:20:59:31:b8:46:45:5f:80:90:55:
30:e3:76:71:a4:56:e2:e3:06:e3:44:2c:2c:ae:1b:
13:19:d5:35:a5:7a:06:8f:f6:11:6e:8c:86:38:e7:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:E5:18:3E:B4:0B:F6:F3:8B:00:21:EE:CC:A9:9C:A6:94:92:54
X509v3 Authority Key Identifier:
keyid:12:34:FF:66:65:C6:C9:52:61:16:1E:86:69:1A:9B:6A:62:01:44:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/1234FF6665C6C95261161E86691A9B6A62014491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1234FF6665C6C95261161E86691A9B6A62014491.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/1234FF6665C6C95261161E86691A9B6A62014491.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4a:a4:d8:ad:96:5f:84:0d:6d:1b:84:83:e1:af:d0:b7:b9:
68:03:5d:4e:2a:29:ad:ae:8f:02:4e:66:7f:9c:39:f8:09:ef:
94:1e:56:66:9d:18:5b:4a:a7:5b:15:61:95:24:bf:4c:bc:19:
e0:64:d7:cd:38:e8:e2:fb:c5:9a:35:38:d3:26:7a:f5:fe:59:
e8:33:24:e3:08:31:d8:89:82:b7:ea:95:b1:04:42:82:13:19:
06:63:be:83:50:34:c7:ab:3e:7e:56:96:ec:5d:df:14:04:d8:
aa:a9:a0:3d:ce:91:d2:aa:4a:19:7c:c1:3e:36:c6:ff:1c:9b:
b5:7b:6c:69:81:12:a3:88:e6:3c:49:8f:f7:fd:5e:a4:95:97:
08:b9:37:81:e1:4f:a6:14:bc:e4:f1:0b:c0:c6:41:f3:6a:e2:
a7:ce:f2:1d:18:da:97:5c:00:0d:35:be:60:7f:ec:f1:bb:8b:
b2:09:a2:16:57:ab:e1:5b:30:bd:06:b2:3d:35:c2:10:fd:91:
7e:36:cd:0a:fe:45:e7:06:ab:2b:c7:71:3f:a0:76:e4:7f:52:
25:5f:e0:fa:70:27:6e:11:bf:10:17:2d:84:b0:16:16:96:ab:
25:23:b5:29:27:aa:77:25:11:95:93:4a:85:42:b1:87:0d:fe:
00:51:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:59:13 2025 by rpki-client