![](/console.gif)
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft
File: 0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft (raw, json)
Hash identifier: bQmkrGigNDTFkUEN+HkQ3MlYyu8lAIgf7G6uUiZZrrI=
Subject key identifier: 5C:B6:83:F3:A5:97:15:12:94:BF:67:3A:B8:61:BF:39:65:19:4A:AC
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Certificate issuer: /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial: 4905249D2C1C504EC8F940603BC662415DD33A87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft
Manifest number: 0109
Signing time: Tue 05 Dec 2023 22:01:30 +0000
Manifest this update: Tue 05 Dec 2023 21:56:30 +0000
Manifest next update: Wed 06 Dec 2023 22:02:30 +0000
Files and hashes: 1: 34352e3233392e31322e302f32332d3233203d3e20323638333436.roa (hash: rO5+SY/2PMrT+s8KGWC/1Usp0Fm7GwnrGbBRvJ1LNqA=)
2: 323830343a346662633a3a2f33322d3332203d3e20323638333436.roa (hash: kXnjM43cCdu6Nz1D3hs9IbOlvDqu1UZxzAekWzklhrk=)
3: 0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl (hash: UD/RLinAWQ44a1PKX9WdzA8PNAMG7kOxyTK5yMmEXck=)
4: 34352e3233392e31322e302f32322d3232203d3e20323638333436.roa (hash: zlBpe5r8AqfCJzrjkvy7FKf8XrMuJs36e97NqyAVKQo=)
5: 34352e3233392e31342e302f32332d3233203d3e20323638333436.roa (hash: CQrbWyLtx+bF6QPqXUzSSqYzn1TLX2aiJ8sjIIxdWsc=)
6: 34352e3233392e31322e302f32342d3234203d3e20323638333436.roa (hash: CRLi/xkefhOumramybQOEVQH+wN2VOqmjPaq8EC8xi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:05:24:9d:2c:1c:50:4e:c8:f9:40:60:3b:c6:62:41:5d:d3:3a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Validity
Not Before: Dec 5 21:56:30 2023 GMT
Not After : Dec 6 22:02:30 2023 GMT
Subject: CN=5CB683F3A597151294BF673AB861BF3965194AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:8a:99:2e:29:62:23:5a:f1:e1:24:bd:a5:
f0:1d:75:78:7c:ef:6c:dc:73:7e:03:f6:dd:9d:18:
c9:2f:af:44:c8:b6:1c:a0:f7:d7:d0:3f:7f:01:be:
dd:ac:6c:2b:17:1e:a9:5c:f8:e2:91:b7:b6:cf:9d:
d0:e4:cf:3c:d3:92:d1:60:d6:ed:c6:a2:e0:5c:b3:
c9:4d:2f:16:f3:b3:82:7a:15:96:72:37:b8:b6:4d:
48:06:cb:5a:7e:75:02:81:3b:22:cf:02:15:9f:71:
e5:5c:71:ef:65:bd:55:99:ee:77:1f:f7:e8:a7:77:
59:c8:f5:30:2a:84:e3:f9:c4:b7:76:e2:e9:39:14:
2b:3d:5d:ec:a5:2d:ec:dd:e0:d2:71:b5:da:28:47:
af:0c:88:73:5a:81:55:8e:9c:0a:dd:3c:2e:13:e5:
58:77:82:92:54:70:22:f0:d8:86:4d:18:f6:db:c9:
a9:71:bc:9a:9c:eb:18:59:de:32:e7:55:56:b7:bc:
37:3b:6a:2b:df:2b:70:2a:21:12:6f:f4:0b:51:12:
9c:e5:bf:3b:f1:63:f1:00:ec:ce:87:4b:0e:dc:e3:
bb:37:bd:d0:54:2d:c0:57:8a:ee:41:e1:b1:6d:1a:
50:8d:7c:bd:66:23:89:34:b6:0b:10:34:45:3a:e2:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:83:F3:A5:97:15:12:94:BF:67:3A:B8:61:BF:39:65:19:4A:AC
X509v3 Authority Key Identifier:
keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:10:1c:88:48:ad:5d:95:d5:ad:33:a4:31:be:36:e6:1f:5d:
21:b9:8c:3f:f2:58:db:75:33:b8:b7:d4:5d:aa:c8:31:c3:0b:
40:84:5b:b6:4b:fd:16:28:f1:95:a6:0e:3e:c4:19:ef:49:99:
87:35:9d:65:3e:1a:01:5e:d2:00:37:05:ef:1e:61:ff:eb:0e:
a5:e2:70:1b:bb:3a:e8:83:a0:fd:19:12:75:d7:41:b2:01:93:
d7:e6:b2:08:e6:b4:36:ca:7b:bc:c7:41:83:dd:60:4b:79:4b:
40:17:37:a3:a4:74:35:b1:34:9a:5b:28:b0:a2:9c:77:19:40:
cf:2e:2b:b5:a1:0a:e7:8e:9d:90:ed:6c:47:c2:d1:2e:70:12:
54:5f:58:c9:0c:f9:42:4d:58:ad:3d:a2:2a:aa:8a:38:d6:f1:
b1:f3:5f:fb:9e:e3:48:55:5a:00:6c:2e:31:7c:37:46:5c:de:
ab:9c:c6:cb:73:40:16:56:08:9e:30:5f:53:e8:6b:d8:fe:db:
59:24:90:e0:9f:4a:de:3d:94:0f:95:f5:fb:c9:ac:bb:2c:e7:
43:0a:8f:06:d3:bc:02:7d:94:e2:22:3a:34:7e:f6:e9:18:60:
81:e4:c0:fe:eb:f4:de:69:6e:0f:f3:0a:08:2c:89:84:45:b2:
54:c6:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:56 2025 by rpki-client