Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
File: 421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json)
Hash identifier: 6Zqo73qoILJaiFRa842zU+J7tgC3nUJ9HrJj9SK/SV0=
Subject key identifier: 9E:03:3E:40:6F:9D:2D:32:18:68:AA:8C:E4:88:48:F1:EC:69:9F:09
Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
Certificate issuer: /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Certificate serial: 304F2AE89283DCE6FF7BAE004C0AB48AD3CF9E14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
Manifest number: 17
Signing time: Sat 29 Mar 2025 02:29:56 +0000
Manifest this update: Sat 29 Mar 2025 02:24:56 +0000
Manifest next update: Sun 30 Mar 2025 02:43:56 +0000
Files and hashes: 1: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: HmIVPaWFHQDFb9ehHmUe+M86a5PovezP3h348KDU/vg=)
2: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: hfW5fOPT69cF7ozOhEPu+wmwsKGxMD2WWkc75Lgcs58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:4f:2a:e8:92:83:dc:e6:ff:7b:ae:00:4c:0a:b4:8a:d3:cf:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Validity
Not Before: Mar 29 02:24:56 2025 GMT
Not After : Mar 30 02:43:56 2025 GMT
Subject: CN=9E033E406F9D2D321868AA8CE48848F1EC699F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:53:49:0b:86:c0:68:70:45:12:73:21:51:
cd:77:ce:12:7b:71:00:8b:16:a2:ce:e8:aa:c7:d3:
58:cc:3f:74:b1:8d:34:da:0a:c8:5c:09:eb:43:70:
ae:67:55:2f:3b:0e:3f:50:8d:ce:bc:a1:80:98:9b:
0f:03:23:41:bf:bc:ed:80:00:3a:f1:68:b7:27:b7:
d9:5e:94:a3:c2:51:b0:ac:39:e0:f6:c8:58:e4:42:
49:54:59:81:08:51:f2:e1:95:e5:91:fa:7b:40:04:
5f:df:93:be:30:ef:c5:7a:d3:34:a2:47:f0:b0:88:
71:3d:40:b0:14:f1:d9:3c:e2:65:f5:75:cd:a1:76:
fa:f4:27:c0:a5:16:42:29:af:62:81:77:6f:a0:00:
2b:86:16:5b:81:60:ad:85:78:3d:4c:5b:b4:08:46:
ca:68:d6:5b:1c:7e:a1:48:23:8b:72:aa:7e:81:9e:
8b:ad:df:ca:a0:b6:95:f7:2b:56:ca:36:e9:27:c9:
56:e9:ca:3c:67:aa:2f:f2:df:2b:22:17:37:f2:ee:
fa:d2:d1:fa:40:d5:54:45:94:b3:fe:ee:43:96:70:
8b:22:2d:f5:5b:a4:9d:21:a0:a6:f5:c8:7b:45:40:
af:2e:cf:97:d1:0a:70:6b:62:c9:df:ed:50:8b:86:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:03:3E:40:6F:9D:2D:32:18:68:AA:8C:E4:88:48:F1:EC:69:9F:09
X509v3 Authority Key Identifier:
keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:67:1c:f2:ca:26:f6:53:b4:f9:2d:22:d7:7d:97:91:95:6d:
11:32:07:03:14:65:f2:ea:33:ad:d3:d2:cd:31:04:51:69:35:
86:1e:0b:2c:4d:f0:ba:dd:bb:32:44:aa:3d:b6:fb:8b:d3:00:
4c:a3:7c:10:95:4c:16:1f:0d:55:cd:0a:2e:97:c1:d0:36:ef:
95:aa:6c:65:08:e6:0c:78:b0:03:43:fb:3b:db:55:d7:5b:59:
68:e6:40:b6:10:48:05:0a:45:ee:7d:68:63:d9:35:45:69:85:
9f:85:35:c7:1d:a4:bc:a2:b3:5f:29:45:1e:4d:47:bf:00:9b:
24:d8:78:fd:b4:b4:b8:cf:81:a1:8c:d0:8a:9e:5b:dc:59:86:
44:8b:c1:01:11:c2:b1:78:73:7b:76:2a:9a:bc:e7:50:91:35:
dc:f1:95:f6:3a:e2:11:a5:24:32:95:a8:a8:a9:f1:7b:35:3a:
96:4e:93:1c:a9:fe:42:80:20:cb:a2:13:cb:a8:4a:87:bd:5c:
f8:19:df:a3:40:30:16:dc:44:32:0f:ce:78:2d:87:60:f4:43:
04:dc:0e:69:fe:75:53:f3:12:d1:b3:9f:db:18:05:fc:9a:67:
81:ac:18:7d:e5:c2:9c:dc:55:dd:83:d1:a3:b5:5f:63:db:48:
07:e3:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:19:18 2025 by rpki-client