Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
File: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft (raw, json)
Hash identifier: N3unXC2OWITfxDanSHAxAEuVob6whwyNmEBIcEolpvw=
Subject key identifier: E1:99:BD:0E:CB:99:D5:B1:81:85:F8:6D:7A:7B:72:92:C2:CB:31:35
Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
Certificate issuer: /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Certificate serial: 528B802C3D9F1FFE7ED9E98E0FA3543E4CC06047
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
Manifest number: 01CB
Signing time: Fri 28 Mar 2025 22:43:01 +0000
Manifest this update: Fri 28 Mar 2025 22:38:01 +0000
Manifest next update: Sat 29 Mar 2025 23:21:01 +0000
Files and hashes: 1: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl (hash: 6+N2pYc0A5KyaEEax5DKYral1n9MOs62Sikb8kGdvxs=)
2: 323830343a383232343a3a2f33322d3334203d3e20323732353031.roa (hash: aoSEe9vgZrtfcwTR0oWLHW8rJL7zCJXvVWuuSVGzvNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:8b:80:2c:3d:9f:1f:fe:7e:d9:e9:8e:0f:a3:54:3e:4c:c0:60:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Validity
Not Before: Mar 28 22:38:01 2025 GMT
Not After : Mar 29 23:21:01 2025 GMT
Subject: CN=E199BD0ECB99D5B18185F86D7A7B7292C2CB3135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:85:fb:dc:fc:c2:2a:ad:6b:e0:27:09:b3:
b7:15:29:33:49:b1:a4:80:09:a4:2e:03:3c:02:05:
e7:ae:10:e9:67:fe:82:60:0c:dc:4a:77:82:c1:bc:
fb:96:20:60:59:97:bb:06:df:eb:f2:b7:0a:19:d4:
da:9a:85:67:f9:d9:51:a6:b4:62:60:ea:3c:46:19:
55:f5:2e:f9:99:86:4d:1b:e3:99:1b:56:09:fd:a3:
85:30:77:a8:24:eb:1b:dc:2b:85:13:24:cf:6d:a6:
bf:72:de:e4:c9:4b:f1:e1:5c:ff:52:34:3b:4b:22:
30:64:e8:dc:57:52:67:ba:df:f9:ba:af:46:83:2d:
36:21:5c:2c:55:70:05:1e:75:c9:9a:18:85:d7:0a:
ef:c8:2d:f3:22:73:ad:4e:01:56:58:2d:a1:28:c8:
0d:e5:65:ec:f8:33:28:ca:11:47:67:29:b1:70:29:
eb:c3:77:0b:88:e4:cb:20:49:3f:88:3b:f2:e6:72:
21:c3:16:ab:69:29:bd:7d:7d:4c:f3:fa:1e:e7:f4:
e8:13:d3:13:2a:ea:bb:c1:2d:37:68:a0:1b:3a:d6:
51:d2:d1:7c:0a:63:f3:78:dc:a0:dc:21:f8:a4:28:
99:c2:83:35:e0:31:6c:d9:d2:1a:5b:17:44:1f:19:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:BD:0E:CB:99:D5:B1:81:85:F8:6D:7A:7B:72:92:C2:CB:31:35
X509v3 Authority Key Identifier:
keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:16:71:aa:1b:8d:3d:1a:dc:4f:6a:c3:a8:f5:11:70:41:41:
b5:8c:93:d1:22:28:4e:dd:7a:e2:d5:8b:36:f7:8e:11:8d:09:
89:a5:6f:48:f2:10:bc:f2:52:1f:b4:a3:4c:69:a2:75:ad:2f:
59:58:69:fc:f2:96:7d:98:a6:23:4e:a7:c8:49:ae:b1:63:95:
43:b2:26:04:45:a7:0e:58:09:9e:e3:cd:02:b7:55:61:03:1c:
15:55:8f:ec:ea:ac:56:b2:b8:37:f4:db:da:8a:11:99:f6:43:
00:48:4e:fc:30:a3:38:d9:54:09:e5:d2:0d:4a:6a:c9:fe:61:
af:2a:e3:8f:6a:7b:15:0a:f6:eb:90:56:63:05:e4:7f:c6:d2:
6b:e1:fd:97:60:91:1f:81:41:f4:19:71:4d:44:69:56:f2:d6:
81:42:59:c7:ff:c2:ee:9e:74:98:a9:59:23:ea:49:53:32:e1:
35:76:99:34:8c:fa:74:33:d4:ff:01:fa:d2:6e:8f:22:78:b7:
8a:ff:b8:bf:7a:af:d9:3a:ab:ea:37:9f:bc:5c:e7:81:eb:b9:
7a:b4:ca:55:70:d8:72:9b:65:ad:a0:9f:84:4a:f7:be:60:11:
2c:ca:4c:e9:23:24:fb:60:ff:6b:c2:a1:6e:78:8e:83:ee:0f:
06:d7:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:13:34 2025 by rpki-client