Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
File: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json)
Hash identifier: BY1lTZ6OZw2q0hKkZ1tl4RTUBJy5K9D+VgfnQIDbXCs=
Subject key identifier: 21:E8:54:69:CA:45:50:40:E4:73:2C:AE:DA:1E:4D:DF:27:16:97:B5
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial: 7A5681F7C9830BF3E0BC7D3E244885BB2DF9AC89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
Manifest number: BA
Signing time: Sat 29 Mar 2025 04:14:47 +0000
Manifest this update: Sat 29 Mar 2025 04:09:47 +0000
Manifest next update: Sun 30 Mar 2025 05:45:47 +0000
Files and hashes: 1: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: 5z/9B2lDD9Y2z6ddTWA/M1t9+scwLoPNHb2Cu/S9FHo=)
2: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: pQEQlRwKVVCvE7av7lhBHP+xdFaTf6Yo50+yHZSAJFg=)
3: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: s3mCUc9EF4h9vT87ArBzrnsWYS6UQ0gM6DYR1vl9050=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:56:81:f7:c9:83:0b:f3:e0:bc:7d:3e:24:48:85:bb:2d:f9:ac:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Validity
Not Before: Mar 29 04:09:47 2025 GMT
Not After : Mar 30 05:45:47 2025 GMT
Subject: CN=21E85469CA455040E4732CAEDA1E4DDF271697B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bb:79:cf:35:8b:31:4c:24:86:09:33:59:27:
fb:2f:0b:c1:d4:2b:f4:2c:58:de:fe:b3:59:5c:a7:
7b:60:c6:e0:dd:f6:a5:91:ff:90:dd:c6:74:6e:3c:
8c:80:50:65:21:e9:51:48:46:8c:02:c2:8b:6f:b9:
ac:d3:2e:8f:e7:14:6a:e7:86:50:98:b9:07:e6:83:
0c:ea:a6:1c:3b:6a:ae:d5:8c:b4:13:c2:a3:b2:25:
63:64:32:28:0e:e6:1c:e5:f9:e8:27:a8:ee:95:fd:
1c:cb:16:87:c5:68:f9:04:7c:39:20:6a:01:85:73:
fa:11:30:75:ed:6f:23:3d:3f:66:35:ac:e5:6a:0b:
5b:5e:fd:4b:93:c1:4f:23:27:67:83:c8:3f:da:e6:
ab:62:30:0a:2b:87:7d:6d:f0:42:5b:cf:87:6d:b9:
b2:d5:66:b6:83:07:24:5a:87:cc:4f:d5:9c:e4:c2:
44:04:f5:3d:9f:a1:bc:1f:1d:1b:7a:1f:38:93:e6:
c5:68:83:9a:39:1c:0b:51:22:ea:06:d0:d1:47:3f:
06:57:34:0c:14:4c:df:6a:cd:66:ca:4e:ba:f0:ab:
2d:aa:c5:e5:e7:06:27:a2:44:94:83:c0:e1:63:a8:
0c:49:dd:f7:c6:a4:f4:e4:e9:d5:94:5e:16:05:27:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:54:69:CA:45:50:40:E4:73:2C:AE:DA:1E:4D:DF:27:16:97:B5
X509v3 Authority Key Identifier:
keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:eb:e0:f6:27:56:81:70:5d:fe:54:b3:34:9b:e0:51:8a:9b:
64:45:25:db:40:26:1b:76:a5:55:cc:aa:bc:43:12:57:37:ac:
2d:8e:6d:67:41:0d:bc:37:02:af:d5:89:f1:43:69:41:d1:b1:
7e:36:43:40:66:a9:f2:7c:1b:fa:75:be:85:66:43:1f:c3:66:
17:84:cc:93:5c:d7:cd:5d:ec:ed:66:34:5b:6b:0e:41:a1:e3:
e9:b0:55:d7:2c:3a:f3:9c:49:88:46:5c:00:ee:97:d1:66:42:
73:35:ac:27:2c:fa:b6:f8:44:1d:07:f2:35:64:66:70:a8:8a:
ba:96:c1:a9:e1:7f:17:fc:97:8b:7a:3c:1a:dd:fd:32:c3:8a:
0a:8c:18:a5:96:b7:32:ce:4e:f8:85:6c:3c:36:82:1b:92:1f:
75:6f:75:49:7a:0e:89:d2:99:c1:fc:9c:6b:56:3b:f8:3b:a4:
71:38:70:58:c6:5f:46:cc:ed:67:db:bf:b2:1f:98:64:86:76:
0d:56:66:ba:7b:d9:f6:07:cd:6a:c5:46:b5:ed:81:5a:07:6a:
8f:eb:db:80:2b:f4:f9:10:ab:94:0d:17:ed:59:f1:fd:f5:41:
55:72:01:0f:41:65:4d:1d:68:30:25:e2:bf:1f:c3:af:ec:54:
e7:6c:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:40:19 2025 by rpki-client