![](/console.gif)
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1.mft
File: 8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1.mft (raw, json)
Hash identifier: jI/52i8G6gPUhZxJLh3rN1+Yd/72ZM2kOTQItQBYn/o=
Subject key identifier: 23:29:70:DC:27:11:2E:01:2F:66:47:D6:09:B1:EA:ED:83:3F:ED:58
Authority key identifier: 8A:AF:C4:C4:82:1F:D9:D4:B1:BC:3C:C5:AB:70:E7:6B:4B:E7:8D:A1
Certificate issuer: /CN=8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1
Certificate serial: 61C2A3D14E223D58F06C68FD3ECFDBCB992EB7D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1.mft
Manifest number: B0
Signing time: Fri 20 Dec 2024 07:09:23 +0000
Manifest this update: Fri 20 Dec 2024 07:04:23 +0000
Manifest next update: Sat 21 Dec 2024 09:26:23 +0000
Files and hashes: 1: 8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1.crl (hash: xuQ+XqmO94V9yYHcX6F23n6rs1F4kQF+gauUrS4gaKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c2:a3:d1:4e:22:3d:58:f0:6c:68:fd:3e:cf:db:cb:99:2e:b7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1
Validity
Not Before: Dec 20 07:04:23 2024 GMT
Not After : Dec 21 09:26:23 2024 GMT
Subject: CN=232970DC27112E012F6647D609B1EAED833FED58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:ed:35:4c:8a:1e:ec:0e:76:37:b8:bd:6c:
52:fb:3d:5e:fb:6b:a4:8c:06:eb:6a:07:f4:0c:93:
23:35:23:8d:1c:63:9e:ef:28:86:7f:fd:a6:8f:ad:
23:36:8a:bb:d4:af:b3:ac:23:e6:ab:f0:68:7f:e2:
48:ed:3c:fe:42:b1:a9:fb:1c:b3:36:90:1e:11:64:
42:d4:1e:e3:16:e5:92:60:03:49:a2:f2:e8:45:9d:
dd:78:c7:5d:74:1a:45:00:c3:bb:b1:3b:ec:04:b5:
5f:28:b7:58:86:05:d0:6b:55:77:9d:dc:8d:35:5b:
74:3a:2f:d1:20:49:41:a7:58:93:2b:18:de:09:bd:
6c:71:31:4b:58:3b:ac:e0:d4:a6:1d:67:f4:13:49:
ab:cf:1f:18:05:f8:d7:c0:87:6e:bc:41:e0:fd:c1:
ca:24:6c:78:ee:74:cb:fa:d0:ec:d2:9a:db:38:fa:
80:cf:95:b6:bd:9c:a0:66:1c:1e:bb:a8:23:59:c9:
c1:8a:46:ed:bb:7b:9e:db:8d:6e:a8:77:a6:a8:62:
ff:27:38:1d:cc:57:c3:ca:04:12:05:28:4e:30:f7:
2e:88:6a:3d:ca:64:c5:4e:8b:c7:45:66:65:b3:52:
37:1c:1c:19:bc:34:ba:9b:58:da:ca:2e:8e:8b:aa:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:70:DC:27:11:2E:01:2F:66:47:D6:09:B1:EA:ED:83:3F:ED:58
X509v3 Authority Key Identifier:
keyid:8A:AF:C4:C4:82:1F:D9:D4:B1:BC:3C:C5:AB:70:E7:6B:4B:E7:8D:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/8AAFC4C4821FD9D4B1BC3CC5AB70E76B4BE78DA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:12:53:eb:6f:3a:07:e2:31:f5:50:3f:52:ad:39:4a:e8:7f:
f9:ee:c9:60:65:31:a3:fd:1c:86:e1:01:0a:00:d4:ab:7b:9b:
72:6c:40:f9:ae:4a:26:51:08:1b:44:65:94:93:54:82:b0:11:
09:49:84:88:ec:b2:e1:0d:1f:39:ad:68:0d:50:0d:16:39:af:
da:1c:c8:fd:9a:e4:90:c9:15:8c:56:f8:02:67:1e:33:8d:35:
75:c6:ec:63:c5:d0:cf:e8:45:8e:dc:d0:23:64:34:a6:6f:2f:
99:8b:5c:15:39:be:b8:fb:d1:27:fb:f8:ee:85:85:68:55:29:
a1:e7:97:2b:38:0d:60:27:91:95:13:70:c4:86:4a:f6:7e:08:
e6:a0:59:12:95:99:e5:b7:40:7b:b5:86:39:6f:49:39:21:53:
ea:a9:7a:8b:5d:48:99:5c:4f:6c:d1:f2:ba:60:47:88:34:fa:
58:72:38:c7:43:77:cf:fd:42:43:b6:f0:8f:e4:96:5d:a7:14:
14:85:12:2b:d0:67:06:12:8c:ab:18:b1:1b:a7:28:f6:ea:f1:
c9:47:dc:cc:97:f9:be:de:80:9c:86:7d:42:94:38:7c:88:26:
59:7d:2e:a7:8b:8e:3c:9c:72:56:12:48:71:aa:16:26:9e:3d:
3c:32:be:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:08 2025 by rpki-client