Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft
File: 3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft (raw, json)
Hash identifier: kFGtrgK19nM7KQo1ZtqpgU4I9vHJfwdYBqJ0g7G+z1c=
Subject key identifier: 1E:21:C4:E7:FB:1D:2D:5D:62:E2:E3:88:D4:C4:7D:80:E5:8F:3F:A5
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Certificate issuer: /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial: 1D86FF83FE6D0A00C546140F73DA812F26950908
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft
Manifest number: 01CF
Signing time: Mon 24 Mar 2025 02:32:02 +0000
Manifest this update: Mon 24 Mar 2025 02:27:02 +0000
Manifest next update: Tue 25 Mar 2025 05:22:02 +0000
Files and hashes: 1: 3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa (hash: 0A5gSKwdbjRbv4zskOoPc0kzNTIXYwvY5V7gkswLd5I=)
2: 3138372e34392e31312e302f32342d3332203d3e203238313338.roa (hash: 2zgixnW+SjSGIPGlCsZD8UQfks9k9gi9Lq1Ne4ZCZB0=)
3: 3138372e34392e302e302f32312d3332203d3e203238313338.roa (hash: fTvy/g4fipW2YuBqHlQWPxhwLyxGmGG3bGVCyo88pqg=)
4: 3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl (hash: YLK51SX0jPlba4cYN5XTjV+lM7ZNKmDsKjgtf8Zmlyo=)
5: 3138372e34392e31322e302f32322d3332203d3e203238313338.roa (hash: XR2FPap0/33wtiAxzZmPrPBQ375/u5IYFq0xLaw8Nuw=)
6: 323830343a316335343a3a2f33322d313238203d3e203631363530.roa (hash: JOs+kg9fJWtXEOhO2ow2rx4nkmG6CkNd3DpuIWhptNU=)
7: 323830343a64343a3a2f33322d313238203d3e203238313338.roa (hash: A3rOFmxhrKtCeQx4F94/iPZNZebsfBO1JpyHySsjLDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:86:ff:83:fe:6d:0a:00:c5:46:14:0f:73:da:81:2f:26:95:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Validity
Not Before: Mar 24 02:27:02 2025 GMT
Not After : Mar 25 05:22:02 2025 GMT
Subject: CN=1E21C4E7FB1D2D5D62E2E388D4C47D80E58F3FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:97:36:9b:d7:01:37:dc:2d:b8:39:8e:3a:
65:80:21:b7:8a:94:aa:de:bd:68:80:f2:86:f6:5d:
25:8f:e0:a6:cd:ab:cc:8d:36:bf:04:b9:9f:db:80:
5e:42:4e:df:c4:e3:7d:b6:89:85:92:07:57:67:59:
cb:64:87:32:5b:9c:47:e0:de:f0:f8:66:0c:e5:0b:
16:03:b3:52:b6:7b:07:a7:a4:73:7e:f6:af:9e:bb:
3a:cb:3c:45:dd:7c:3b:a7:de:9f:04:33:a8:13:95:
db:bd:fd:1b:28:d8:4a:1c:40:af:36:75:fb:0d:dc:
20:f1:ce:bf:7b:9b:74:39:61:9a:38:d5:7a:58:e5:
e5:e5:d6:93:2e:ec:14:df:4d:77:16:ac:e8:c0:9b:
40:63:f9:d0:07:fc:2f:8f:73:ed:a0:6f:a6:48:ca:
19:ea:e4:f1:23:fa:12:87:53:6e:f1:db:28:d3:e7:
17:1d:b8:db:70:13:43:2f:0e:b2:bf:12:1d:0b:6e:
8a:b7:33:d8:05:e7:86:e1:b4:be:46:61:7b:1e:d5:
5c:0b:b9:64:29:73:51:8a:c9:14:5b:a7:b0:c8:3e:
ec:83:de:31:33:ed:12:7e:92:ea:6c:4c:8c:6a:74:
d2:14:ae:7b:ab:9f:0e:d5:24:70:c9:0b:f1:88:48:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:21:C4:E7:FB:1D:2D:5D:62:E2:E3:88:D4:C4:7D:80:E5:8F:3F:A5
X509v3 Authority Key Identifier:
keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8f:bc:19:a7:80:f0:fb:f1:49:72:4c:bf:f3:eb:7f:09:d8:
95:f0:8b:b6:27:66:31:9b:95:c3:4f:6b:58:11:45:87:78:06:
72:3e:35:c3:f0:33:16:2f:3f:3e:70:2e:26:38:e8:81:2b:90:
50:67:fa:be:f4:34:61:dd:d7:d5:b1:f2:85:3e:a2:10:d5:8d:
67:33:64:4f:45:a3:b5:c5:5d:46:2a:83:22:b9:7f:78:0b:c7:
1c:3e:31:2d:ea:55:3b:10:4a:6d:4f:08:61:9e:33:6f:c0:45:
33:57:2c:0f:78:6c:fb:63:ea:3f:02:3e:23:9e:18:bf:66:1f:
8a:4a:d8:d6:ef:9a:89:70:64:cf:4a:d9:66:79:52:a6:a7:fa:
3b:95:4f:c9:13:87:f7:4e:70:cc:8f:84:d8:d7:e0:e5:81:2b:
5d:95:21:ee:66:86:1f:5b:97:1e:89:c8:e7:59:c3:d6:fc:21:
d1:f5:3f:7d:75:b9:39:db:0e:f0:5a:76:5f:0b:92:c5:14:ec:
d1:3c:12:bf:6a:af:eb:6c:a3:7c:96:46:2b:f8:d0:d1:7b:b8:
ac:88:de:a6:f1:e5:f8:85:22:f8:e8:7b:4e:cd:b3:ac:3f:7a:
6e:fb:9b:7b:42:d4:d4:ac:82:93:81:87:d4:44:b8:a4:7d:af:
31:9d:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:21 2025 by rpki-client