Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
File: 5019A6C324130601793432FC2FAFF3DE1F1210C0.mft (raw, json)
Hash identifier: Ulp8ypT5g4+8NHYZEP8NLEC0NpnEFVIHvOh8BFLApp8=
Subject key identifier: 2E:C9:74:95:3A:69:AA:C3:3A:69:DF:DC:1A:EA:1B:5A:36:4B:E8:2F
Authority key identifier: 50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0
Certificate issuer: /CN=5019A6C324130601793432FC2FAFF3DE1F1210C0
Certificate serial: 150E0342A29A84009DC9FB88DE590A3EB0C47B77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
Manifest number: 01AA
Signing time: Mon 17 Feb 2025 19:11:56 +0000
Manifest this update: Mon 17 Feb 2025 19:06:56 +0000
Manifest next update: Tue 18 Feb 2025 22:55:56 +0000
Files and hashes: 1: 5019A6C324130601793432FC2FAFF3DE1F1210C0.crl (hash: GcC8lU+agAK9gWA0NcySpPB0FXJkCQ69Owp0e6JULqM=)
2: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: RL7RwQcjTKKA++BoYWaVFvGSkS1OFAP/DO2yENM0jCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0e:03:42:a2:9a:84:00:9d:c9:fb:88:de:59:0a:3e:b0:c4:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5019A6C324130601793432FC2FAFF3DE1F1210C0
Validity
Not Before: Feb 17 19:06:56 2025 GMT
Not After : Feb 18 22:55:56 2025 GMT
Subject: CN=2EC974953A69AAC33A69DFDC1AEA1B5A364BE82F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:7e:d8:3c:cf:e3:4f:cc:40:a8:62:41:ce:
35:e0:3b:c9:12:59:44:83:c0:de:27:a0:6e:35:df:
82:f3:7c:5d:23:c5:77:fe:69:e6:ac:a7:4e:8a:d7:
3a:83:70:00:7d:28:54:b7:a8:f9:c5:4e:82:db:ad:
4c:40:d8:b1:25:2b:c9:d2:1e:50:5a:a0:9b:bf:77:
cd:69:43:cd:88:f9:81:c8:3b:b1:af:1f:53:8d:a1:
c6:b4:19:1f:6c:3d:80:97:22:94:76:7b:28:38:24:
e1:7b:60:aa:9c:52:9d:83:79:31:2f:27:d2:a6:e7:
bb:e5:e6:a7:07:9d:c0:84:d4:cc:c2:c1:0a:9a:13:
eb:b0:b4:b7:e6:74:cb:00:7a:a1:d0:64:e4:b1:58:
c9:38:dc:42:35:9a:25:76:ee:34:ee:3e:58:ed:34:
a5:b3:99:00:cc:92:c3:58:27:a9:88:bf:fe:06:04:
35:36:b6:ab:e3:a2:11:0c:a5:e0:c1:3d:49:64:25:
c9:76:08:9b:b9:dc:31:72:a1:ee:51:48:09:97:0f:
ad:8e:c1:e9:fc:8f:ce:43:16:c9:f8:d3:83:c9:81:
49:84:a7:65:b5:16:8c:42:c1:88:a9:0a:77:07:11:
cc:18:f6:1b:7b:72:16:b6:93:77:5e:72:bc:0e:ad:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C9:74:95:3A:69:AA:C3:3A:69:DF:DC:1A:EA:1B:5A:36:4B:E8:2F
X509v3 Authority Key Identifier:
keyid:50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7a:2c:be:84:b2:58:09:f8:81:e9:98:78:19:3d:1c:05:cb:
54:9e:8b:f7:8e:85:7a:a6:7b:9e:70:24:69:29:63:60:9f:65:
b3:73:24:b2:c4:50:d1:37:55:6c:6c:b7:f8:08:be:40:2a:40:
0e:fb:11:27:4e:25:ec:7f:27:9f:cd:67:9a:e5:02:fe:07:b7:
ba:8f:bc:81:02:86:3a:34:24:bb:5b:55:da:b1:51:c4:5a:13:
47:ca:a7:d7:00:49:ac:97:65:f4:46:ea:b7:bb:3a:da:bc:50:
07:20:11:04:f7:d3:ac:a0:3c:51:c1:2f:07:d2:34:ca:47:e2:
db:ce:91:a8:ac:99:b0:69:72:dd:eb:35:6d:46:6b:bc:87:f5:
31:97:7c:f0:54:42:97:fc:92:57:c2:23:98:be:b7:44:f3:46:
f7:f2:5d:39:5c:06:59:48:78:0e:d0:55:fa:c7:c7:7b:c2:ba:
55:25:8e:d6:ca:6e:42:a4:54:f7:06:ab:10:e9:8f:64:b8:f1:
37:de:32:1f:9d:c2:df:4d:c5:63:5c:9e:bf:af:91:3d:8c:ac:
84:7b:60:19:cc:33:8e:fc:c1:41:2d:49:3b:bc:10:f0:61:c2:
cf:73:53:0f:5c:ab:fb:d8:c7:0c:b7:84:22:a0:19:ee:13:df:
2d:2d:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:49 2025 by rpki-client