![](/console.gif)
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.mft
File: CD751FD85EB2EA218659B38ACB7AA70081FE0026.mft (raw, json)
Hash identifier: Dg9VhhEJwx4A/8+h1PRm9jjt9zgTIEsPRch1ZZP3Zgs=
Subject key identifier: F7:19:19:C3:0D:FF:9C:9C:61:A4:28:CB:F1:74:43:E5:F0:84:B0:EE
Authority key identifier: CD:75:1F:D8:5E:B2:EA:21:86:59:B3:8A:CB:7A:A7:00:81:FE:00:26
Certificate issuer: /CN=CD751FD85EB2EA218659B38ACB7AA70081FE0026
Certificate serial: 3C0EDAD75E05A38B62F271926582E5F98C851525
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.mft
Manifest number: 4A
Signing time: Tue 18 Apr 2023 17:00:16 +0000
Manifest this update: Tue 18 Apr 2023 16:55:16 +0000
Manifest next update: Wed 19 Apr 2023 18:30:16 +0000
Files and hashes: 1: CD751FD85EB2EA218659B38ACB7AA70081FE0026.crl (hash: ZmhbszOBligBXF4iu5ErNe2b4G8qXpgyr1z5VumKdrU=)
2: 34352e3137332e32312e302f32342d3234203d3e20323732353738.roa (hash: EfzVIWyRQHQQ1iHRlW5OpXPTsJAPW6eh0UHcyhtEdR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:0e:da:d7:5e:05:a3:8b:62:f2:71:92:65:82:e5:f9:8c:85:15:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD751FD85EB2EA218659B38ACB7AA70081FE0026
Validity
Not Before: Apr 18 16:55:16 2023 GMT
Not After : Apr 19 18:30:16 2023 GMT
Subject: CN=F71919C30DFF9C9C61A428CBF17443E5F084B0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:1d:8c:f0:b9:37:c2:49:91:d0:e8:4a:f0:
73:03:56:65:1a:a6:13:71:0e:01:08:83:3f:8c:09:
16:0c:05:bc:47:6f:2c:a4:2d:19:9a:56:c3:e4:a3:
40:61:52:6e:23:67:d0:5c:8a:5c:37:6f:32:45:01:
0d:ef:1c:73:7a:6f:bf:eb:a5:ab:a5:f8:d6:ba:ec:
3e:71:fa:a3:90:92:ea:84:8e:b4:e9:67:45:12:b1:
15:6a:23:b0:f4:4c:a3:65:96:6c:85:2a:96:04:db:
3f:37:9e:dc:10:d2:09:35:fe:c3:be:3f:76:84:ff:
0a:35:ad:5a:80:1c:be:05:d5:b6:09:13:fc:e7:b1:
a7:48:52:ab:17:bd:1b:e2:bf:7d:6d:80:5e:f7:a1:
e3:06:12:64:a1:1e:e2:6f:5c:22:81:6e:7a:aa:a0:
a1:ab:be:26:e9:6e:7c:b6:5a:0c:94:5e:1e:b9:f7:
3e:82:14:e2:50:93:21:fe:f8:7f:fa:2b:fe:61:4d:
3e:d0:7e:47:06:b9:55:42:42:d3:8e:e7:85:00:1f:
c1:18:31:b2:f4:ff:8d:b2:b2:dc:ae:e9:af:28:a9:
e6:bd:f4:b5:8d:dd:92:74:32:eb:31:b6:e4:6c:cb:
79:b0:43:cd:1c:1a:10:ff:43:8f:2f:c3:c7:63:d5:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:19:19:C3:0D:FF:9C:9C:61:A4:28:CB:F1:74:43:E5:F0:84:B0:EE
X509v3 Authority Key Identifier:
keyid:CD:75:1F:D8:5E:B2:EA:21:86:59:B3:8A:CB:7A:A7:00:81:FE:00:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:82:59:bb:c6:e4:be:aa:0f:02:21:ec:de:23:b2:d3:08:20:
48:5d:6e:43:8d:79:d4:43:51:a3:3d:f7:8c:59:1f:5b:3f:aa:
74:fe:7f:77:2c:e4:ea:52:09:65:3c:79:91:c8:f1:af:76:34:
fb:85:74:5b:e2:5d:6e:82:24:a4:7b:79:d4:d1:f0:ba:1a:c5:
8f:46:a5:32:3f:8c:49:05:14:8e:9f:74:8a:66:db:c4:d9:9a:
17:05:d9:f3:f5:4b:cd:64:c6:07:68:7a:51:86:ec:1f:56:12:
b1:9f:e9:da:76:39:75:56:42:a9:b4:6b:0a:11:83:ea:ce:3d:
0e:d8:26:7c:51:2d:92:57:7e:6d:ed:9a:2f:ae:64:2a:50:bd:
9e:3f:e5:8d:4d:ed:8a:57:6f:fb:d3:5b:e0:59:20:50:b4:07:
13:ce:2e:8c:1a:af:93:a7:9f:fc:87:39:ab:6e:84:9f:5a:a4:
8c:ba:da:b2:70:73:af:2e:c3:50:cd:8b:7b:51:c8:ef:5c:e7:
ad:06:45:8a:88:48:e9:ab:bc:7c:c5:b6:da:d6:97:ac:fc:a1:
76:6b:2f:6e:ba:7e:44:1d:09:80:18:10:3e:b3:ab:f9:ed:b5:
78:ef:bc:28:0a:f2:50:d4:40:40:b8:34:62:26:45:6a:b2:cc:
78:76:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:39 2025 by rpki-client