Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.mft
File: 0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.mft (raw, json)
Hash identifier: mxzb6p8n3Kp3IQwfQEnLlma9K7C/EXgTxE9tfZwAyJg=
Subject key identifier: D1:B6:89:50:5A:5C:56:FF:F0:FC:58:88:40:24:D0:2E:AD:D7:10:2D
Authority key identifier: 0D:63:88:E3:8C:34:7D:3C:53:C9:4D:B9:3B:30:EE:0F:A0:C1:8A:29
Certificate issuer: /CN=0D6388E38C347D3C53C94DB93B30EE0FA0C18A29
Certificate serial: 0FB47F49B00216DA3A49BA85ACD5D303ACEE554E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.mft
Manifest number: A2
Signing time: Tue 02 Apr 2024 21:56:26 +0000
Manifest this update: Tue 02 Apr 2024 21:51:26 +0000
Manifest next update: Wed 03 Apr 2024 22:53:26 +0000
Files and hashes: 1: 323830343a383961303a3a2f33322d3336203d3e20323733363136.roa (hash: UpfB8pBvkI2mQPm5KU8bSQfX1WxMkbX7L04RTN5m9Nc=)
2: 0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.crl (hash: TRnxgblEajN1443UGfhmzY/x6RLQjni2PbY0oh5MjTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b4:7f:49:b0:02:16:da:3a:49:ba:85:ac:d5:d3:03:ac:ee:55:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D6388E38C347D3C53C94DB93B30EE0FA0C18A29
Validity
Not Before: Apr 2 21:51:26 2024 GMT
Not After : Apr 3 22:53:26 2024 GMT
Subject: CN=D1B689505A5C56FFF0FC58884024D02EADD7102D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:2b:56:7b:9f:7c:64:e1:98:7a:22:79:1b:
31:08:af:16:4b:17:07:5c:c2:8e:67:f3:56:af:c0:
fd:3f:b3:6d:cb:e3:f8:49:ea:64:05:f5:91:7a:3a:
99:9f:1c:58:a9:11:59:54:a6:06:55:47:d5:31:84:
3e:18:6d:ff:64:e7:0f:c0:d7:27:d7:36:ae:47:28:
ea:bd:6b:e9:62:15:f7:35:4a:ed:18:f2:00:88:b2:
70:de:54:15:26:f9:e3:a4:db:d8:4c:a3:ba:02:39:
23:19:ae:da:ce:70:d5:0f:1b:fa:2e:9c:21:de:92:
06:19:10:f2:45:1e:b4:8f:68:ac:eb:45:9d:f3:d4:
4a:d4:dd:0d:d6:49:6b:20:9a:df:1a:99:69:12:01:
44:48:45:79:a0:90:e8:f0:51:9b:97:e7:19:f9:e1:
01:5c:9c:12:28:cf:92:b8:ff:c5:33:13:f4:a2:d3:
d4:59:ee:2f:af:98:ec:a8:d2:3e:da:28:97:01:9e:
21:b9:af:be:2c:2d:28:6e:0b:dd:2b:5b:5d:5d:83:
c0:98:92:e8:bf:e8:b4:03:4e:09:c4:c8:4f:82:7f:
7a:74:06:d1:a9:0c:fd:43:0f:4c:3a:d4:65:af:71:
7c:b5:7e:4d:fd:25:75:38:86:db:b1:ed:96:a2:41:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B6:89:50:5A:5C:56:FF:F0:FC:58:88:40:24:D0:2E:AD:D7:10:2D
X509v3 Authority Key Identifier:
keyid:0D:63:88:E3:8C:34:7D:3C:53:C9:4D:B9:3B:30:EE:0F:A0:C1:8A:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:11:5c:7a:79:99:28:91:27:fa:37:af:04:26:32:68:0e:ef:
b1:6d:01:23:f4:4e:c0:d3:91:de:8b:bb:24:5e:bf:0a:dc:2a:
96:d6:55:43:27:aa:f0:a1:33:70:e8:f0:47:98:03:40:ad:63:
96:1f:27:97:de:0d:03:4f:c6:11:2a:a7:84:48:be:06:fc:36:
c3:f0:2f:6a:e7:86:10:39:f0:92:31:0a:6f:b8:3d:b8:1c:b9:
4a:a2:5d:ea:59:10:77:87:3d:8e:b9:6a:68:00:37:d6:74:97:
ec:8b:91:5f:f2:f5:b1:7b:58:7a:e1:bc:d4:4f:ba:58:b7:a4:
d1:68:39:e8:9f:af:2d:54:c3:1a:27:a9:1f:e6:35:93:2e:4e:
60:0b:d5:e9:ce:11:6e:92:16:97:b2:27:c3:47:ca:f0:98:9f:
13:80:1a:b3:b3:41:61:fc:91:ed:d3:98:06:c4:3a:b0:a9:e1:
28:d0:b6:a5:28:20:0d:35:06:e8:d8:f9:5c:06:6a:83:8c:97:
e6:3a:86:38:1d:0f:62:ed:b8:34:0a:dc:2b:96:5d:05:48:3b:
4a:a7:f0:28:f7:2b:2c:13:da:50:63:bc:2b:a7:81:db:ba:b0:
cb:50:e8:ce:9f:58:ae:8d:12:39:22:26:cf:6d:cf:1e:1a:51:
dc:ea:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 22:08:38 2025 by rpki-client