Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.mft
File: A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.mft (raw, json)
Hash identifier: DdIJC99S0Khf8ABK364emokt7KCifgb55Tv2TFbqcIU=
Subject key identifier: 60:70:78:B3:42:90:83:E1:24:13:DC:FE:7A:0C:AA:E7:BA:64:22:CA
Authority key identifier: A9:B4:B8:A3:F5:DD:FA:C8:C1:CE:AD:F6:AC:38:52:D9:4B:E7:5A:18
Certificate issuer: /CN=A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18
Certificate serial: 7192F4FD8BA97289FD2A270023185DA88629BB29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.mft
Manifest number: 03
Signing time: Mon 13 Jan 2025 14:00:46 +0000
Manifest this update: Mon 13 Jan 2025 13:55:46 +0000
Manifest next update: Tue 14 Jan 2025 16:16:46 +0000
Files and hashes: 1: 3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa (hash: uNSHnCx1DSWpCVYeP0Cjb3m8BjSh8q+vWM2iznKIAxg=)
2: A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.crl (hash: +n5IuBm0cSXwrGpYx0KbpwqiObrgw7M4P0pnoe0fqzA=)
3: 323830343a323539303a3a2f33322d3333203d3e20323634323838.roa (hash: U2V+ehZdX+eAlC2GBsXeAtsHmP9g6eziuepkzkmdbAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:92:f4:fd:8b:a9:72:89:fd:2a:27:00:23:18:5d:a8:86:29:bb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18
Validity
Not Before: Jan 13 13:55:46 2025 GMT
Not After : Jan 14 16:16:46 2025 GMT
Subject: CN=607078B3429083E12413DCFE7A0CAAE7BA6422CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c0:66:4e:5a:e1:0b:d1:8e:cd:2d:0a:93:1e:
f7:01:3d:9d:47:31:a9:3c:d2:e5:02:04:a5:d3:9d:
29:1f:e6:91:a9:93:64:67:a9:3e:19:7d:f8:a9:9e:
24:04:af:cc:71:e0:08:29:ed:7d:9a:ba:10:2f:86:
69:44:20:5e:20:60:da:71:8a:58:f9:94:21:93:80:
36:19:50:a7:92:fe:30:9a:4a:10:c2:99:97:79:d7:
2f:0f:b6:e6:1a:3c:5f:52:bf:aa:d8:90:cb:3e:d1:
85:cf:68:86:73:06:75:30:c3:66:7c:05:ce:33:ff:
b2:af:2c:c8:0c:64:bb:8c:ba:bb:69:b2:e7:1a:23:
7e:c1:25:1e:6b:69:a1:0e:33:e0:0e:17:e1:dd:08:
e8:fb:f1:fa:f4:8a:a2:ab:45:37:ff:96:53:06:e6:
f4:17:58:8b:aa:03:19:2a:d0:60:3c:0a:05:dc:1c:
18:06:40:e8:b5:85:d9:b4:71:7d:3c:d2:13:6e:eb:
ac:9a:f3:77:a0:30:42:7d:1e:9a:4b:75:06:99:46:
4e:f2:1b:bf:39:fc:08:3c:82:2f:bb:0c:31:3b:25:
c7:a6:b7:8d:11:36:64:49:1f:6b:b5:37:df:24:55:
4d:27:7f:57:27:42:34:e8:3d:ca:9c:46:62:6b:bc:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:78:B3:42:90:83:E1:24:13:DC:FE:7A:0C:AA:E7:BA:64:22:CA
X509v3 Authority Key Identifier:
keyid:A9:B4:B8:A3:F5:DD:FA:C8:C1:CE:AD:F6:AC:38:52:D9:4B:E7:5A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/A9B4B8A3F5DDFAC8C1CEADF6AC3852D94BE75A18.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2b:c2:66:1d:dc:f3:cd:f8:c5:16:f4:1c:07:f2:0e:ca:e7:
b4:69:74:90:42:89:07:9e:12:5b:c7:cc:87:49:4a:e5:29:8c:
ae:33:92:6b:10:a5:d0:4d:f0:2c:fc:a4:87:3f:13:cd:39:02:
c3:d5:1d:88:c8:e8:73:f7:83:30:71:b6:2c:c4:7a:66:0a:23:
9d:33:1b:cc:63:1e:bf:79:f9:c9:28:0d:ae:36:b0:35:c6:5b:
9d:be:f2:00:98:a4:06:50:b3:66:08:26:ac:d6:eb:22:e2:e6:
e9:a6:e9:65:4e:dc:3f:87:f4:71:3a:b1:56:28:fe:8a:89:f1:
c0:65:64:73:dd:85:e1:e2:66:c3:41:29:62:ac:2f:e8:bb:e9:
6a:b0:35:6c:57:57:29:17:78:fb:a5:fc:59:e7:d5:b2:0e:5e:
3c:f1:15:08:fa:a0:ed:4f:20:49:70:8b:e8:86:4c:f2:79:30:
95:5c:3c:6e:8c:10:b2:7d:e3:40:3b:b3:20:13:cd:ca:49:af:
b6:1c:83:b3:b2:03:3f:0d:9f:34:bc:98:eb:85:00:47:d6:26:
5f:ce:3a:5f:a7:15:c5:49:19:96:79:2c:b9:93:21:11:86:6a:
8d:67:8e:b2:48:d3:c8:c8:9b:48:b3:a7:0e:19:df:40:93:42:
01:73:0d:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcZL0/Yupcon9KicAIxhdqIYpuykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlCNEI4QTNGNURERkFDOEMxQ0VBREY2QUMzODUyRDk0
QkU3NUExODAeFw0yNTAxMTMxMzU1NDZaFw0yNTAxMTQxNjE2NDZaMDMxMTAvBgNV
BAMTKDYwNzA3OEIzNDI5MDgzRTEyNDEzRENGRTdBMENBQUU3QkE2NDIyQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOwGZOWuEL0Y7NLQqTHvcBPZ1H
Mak80uUCBKXTnSkf5pGpk2RnqT4ZffipniQEr8xx4Agp7X2auhAvhmlEIF4gYNpx
ilj5lCGTgDYZUKeS/jCaShDCmZd51y8PtuYaPF9Sv6rYkMs+0YXPaIZzBnUww2Z8
Bc4z/7KvLMgMZLuMurtpsucaI37BJR5raaEOM+AOF+HdCOj78fr0iqKrRTf/llMG
5vQXWIuqAxkq0GA8CgXcHBgGQOi1hdm0cX080hNu66ya83egMEJ9HppLdQaZRk7y
G785/Ag8gi+7DDE7Jcemt40RNmRJH2u1N98kVU0nf1cnQjToPcqcRmJrvAz1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYHB4s0KQg+EkE9z+egyq57pkIsowHwYDVR0j
BBgwFoAUqbS4o/Xd+sjBzq32rDhS2UvnWhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1k0eUxtTnZaS3BORnlzRXVnd2ZXYnlIMzJ0Nlh2ZmFNRExvUEtVYllH
MVUvMC9BOUI0QjhBM0Y1RERGQUM4QzFDRUFERjZBQzM4NTJEOTRCRTc1QTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5QjRCOEEzRjVEREZBQzhD
MUNFQURGNkFDMzg1MkQ5NEJFNzVBMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1k0eUxtTnZaS3BORnlzRXVnd2ZXYnlIMzJ0Nlh2ZmFNRExvUEtVYllHMVUvMC9B
OUI0QjhBM0Y1RERGQUM4QzFDRUFERjZBQzM4NTJEOTRCRTc1QTE4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlyvCZh3c8834xRb0HAfyDsrntGl0kEKJB54SW8fMh0lK5SmMrjOSaxCl0E3w
LPykhz8TzTkCw9UdiMjoc/eDMHG2LMR6ZgojnTMbzGMev3n5ySgNrjawNcZbnb7y
AJikBlCzZggmrNbrIuLm6abpZU7cP4f0cTqxVij+ionxwGVkc92F4eJmw0EpYqwv
6LvparA1bFdXKRd4+6X8WefVsg5ePPEVCPqg7U8gSXCL6IZM8nkwlVw8bowQsn3j
QDuzIBPNykmvthyDs7IDPw2fNLyY64UAR9YmX846X6cVxUkZlnksuZMhEYZqjWeO
skjTyMibSLOnDhnfQJNCAXMN0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:09:49 2025 by rpki-client