Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft
File: CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft (raw, json)
Hash identifier: Zowx/n/zLM7mwdMgEm63VURbUb4MkZpCxxs860rn0Hs=
Subject key identifier: 43:5D:7B:ED:B3:8D:D9:24:95:E2:00:B2:98:93:DE:EC:86:41:BC:7B
Authority key identifier: CC:28:C3:C1:82:92:43:E5:DD:90:53:B7:9F:04:CA:57:0C:54:DE:EE
Certificate issuer: /CN=CC28C3C1829243E5DD9053B79F04CA570C54DEEE
Certificate serial: 08390C97E77D38757E032461D128DF0B551EADB8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft
Manifest number: 2E
Signing time: Sat 02 Nov 2024 14:53:00 +0000
Manifest this update: Sat 02 Nov 2024 14:48:00 +0000
Manifest next update: Sun 03 Nov 2024 17:32:00 +0000
Files and hashes: 1: CC28C3C1829243E5DD9053B79F04CA570C54DEEE.crl (hash: xaIcVp5mA2tdyFkWkp2wc5NdWhyeZ1zPq7aOR5RITsE=)
2: 323830343a393138383a3a2f33322d3334203d3e20323734363437.roa (hash: SzOlfsswc8GeVrjYzfe1xiVTQLZgC+4H7gy02X0ViCE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:39:0c:97:e7:7d:38:75:7e:03:24:61:d1:28:df:0b:55:1e:ad:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC28C3C1829243E5DD9053B79F04CA570C54DEEE
Validity
Not Before: Nov 2 14:48:00 2024 GMT
Not After : Nov 3 17:32:00 2024 GMT
Subject: CN=435D7BEDB38DD92495E200B29893DEEC8641BC7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:c8:8d:f2:6f:9d:cc:b7:7d:8a:0a:4a:06:
6e:08:7f:99:2f:1c:14:3a:d7:47:f1:74:75:2c:b2:
a5:62:0f:b5:0d:3e:ed:77:73:81:3c:7e:45:21:e0:
3c:ea:3d:87:f5:34:10:67:d3:99:d9:6b:20:b9:fb:
49:08:5c:cc:43:cc:b6:d8:56:bb:73:af:18:43:fe:
57:75:a4:c5:64:5d:12:07:13:e4:05:cd:cb:e8:ad:
4f:99:97:26:89:aa:2f:7c:f1:79:94:aa:cb:c7:9e:
ac:bf:50:02:5b:b2:cc:ef:d1:8f:b2:28:8d:bd:6b:
04:c0:f2:53:f3:a1:bb:30:4c:d0:56:c3:c7:26:77:
3e:d3:9d:15:67:f2:3c:02:84:3a:29:e0:b0:5c:9e:
1a:71:1b:2a:ae:1c:aa:68:80:b4:80:1c:e5:84:9f:
98:fc:8f:57:61:46:8d:96:57:aa:7d:e8:e6:7e:6d:
13:92:89:67:d7:b8:aa:85:02:e6:a0:e8:be:53:c8:
e8:c5:c6:99:c7:78:56:cb:17:42:7b:e1:34:62:37:
39:84:0f:27:d7:06:00:94:59:60:d7:90:90:ae:68:
27:24:e5:d7:b7:fc:5f:60:bd:b9:73:51:7a:40:cf:
72:ef:94:47:dc:71:c0:72:71:4e:63:57:7c:8b:1d:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5D:7B:ED:B3:8D:D9:24:95:E2:00:B2:98:93:DE:EC:86:41:BC:7B
X509v3 Authority Key Identifier:
keyid:CC:28:C3:C1:82:92:43:E5:DD:90:53:B7:9F:04:CA:57:0C:54:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6d:24:72:40:7c:8d:5d:67:e0:bd:6c:d1:e5:2e:54:bb:ff:
f8:72:59:42:f5:41:09:ef:f8:4e:ed:22:f3:fe:0b:55:d1:03:
85:2e:0d:9a:34:b2:bb:bc:71:98:e1:83:79:a1:2d:d7:9d:41:
af:52:59:5b:5a:dd:0b:55:7e:96:31:2e:12:c3:19:37:4a:06:
46:3a:1b:d0:4a:4a:34:fa:cc:bc:ea:f1:95:ee:3d:20:0d:cd:
67:1a:63:66:5f:f1:02:e6:6e:21:e0:9d:f1:d3:f4:7d:3b:4e:
8b:6a:f8:ff:fa:af:61:88:72:3f:14:c5:b8:29:60:72:73:2f:
93:6e:e4:92:9c:a5:02:58:58:03:19:80:0b:11:19:88:c1:b0:
0b:d2:ef:7f:3e:59:1d:9a:97:ce:e6:2c:be:40:26:0c:63:20:
bd:50:d8:f0:72:9d:51:13:b6:77:dd:5d:7d:ba:ab:7f:50:d2:
39:93:ae:35:36:22:19:e8:4c:fb:fe:0e:7a:3f:c6:c8:4a:ff:
a0:27:3f:1b:8f:a5:f1:bc:d3:51:89:49:40:c6:a1:d8:6c:6c:
1a:73:73:d0:b9:b7:b7:a9:9c:c2:6e:c0:6b:da:2e:8c:84:e9:
28:b2:20:4b:a4:14:79:9d:5c:b0:10:16:e1:4a:9b:8f:83:06:
4a:ed:5a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:41 2024 by rpki-client on console-fra.rpki-client.org