Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.mft
File: D88971C2389D950434E0E7C897ACD9D0A67EC933.mft (raw, json)
Hash identifier: 3b1lt2ySGs+iEkX9Yx4uXYrbZVObpmkh1q7qBWUjtuw=
Subject key identifier: 24:74:D7:F1:D0:F4:C8:42:CF:D3:20:18:90:3F:7C:42:17:29:C3:4A
Authority key identifier: D8:89:71:C2:38:9D:95:04:34:E0:E7:C8:97:AC:D9:D0:A6:7E:C9:33
Certificate issuer: /CN=D88971C2389D950434E0E7C897ACD9D0A67EC933
Certificate serial: 588B0E410C0483DB6E997DF59F4FB2206A06F100
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.mft
Manifest number: 0182
Signing time: Tue 21 Jan 2025 09:00:32 +0000
Manifest this update: Tue 21 Jan 2025 08:55:32 +0000
Manifest next update: Wed 22 Jan 2025 11:07:32 +0000
Files and hashes: 1: 323830343a323666343a3a2f33322d3336203d3e20323633383636.roa (hash: G1o5kHITi0xtYaT8EmnIf+1fdAklnI8Op5nQjxQzIxM=)
2: 3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa (hash: R7IhIMz/AZOBnQKx4tBKIKyNh0f9zSnl3na1mU9Vaxo=)
3: D88971C2389D950434E0E7C897ACD9D0A67EC933.crl (hash: ObZnBzQ65UFkAAf9iw1dg/oVmFKISnRrgImgM4wit0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:8b:0e:41:0c:04:83:db:6e:99:7d:f5:9f:4f:b2:20:6a:06:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D88971C2389D950434E0E7C897ACD9D0A67EC933
Validity
Not Before: Jan 21 08:55:32 2025 GMT
Not After : Jan 22 11:07:32 2025 GMT
Subject: CN=2474D7F1D0F4C842CFD32018903F7C421729C34A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:53:6d:48:a6:da:a4:aa:4d:df:f9:20:76:
aa:f2:e9:4e:f9:c4:9a:10:10:68:4a:75:24:ba:4d:
4f:8f:2e:34:e9:98:1a:58:5b:cd:7e:10:ed:6a:b5:
1f:1c:1d:cd:c9:23:b6:54:35:f8:10:c0:24:28:0a:
d7:08:ca:f8:a6:34:e5:ae:3b:5f:6d:02:3e:84:7b:
d2:cf:54:03:75:6e:dd:92:c7:01:80:ed:1e:8c:c5:
3b:60:59:87:db:fb:4a:aa:5c:e6:31:50:d5:9c:89:
2a:24:67:e5:3f:36:db:f0:2f:aa:06:84:69:90:9c:
fb:b4:53:4e:db:1a:e5:8a:af:f4:45:ee:4d:d4:a2:
92:84:2a:93:ea:f2:6a:9d:3e:3d:b6:ea:2b:f3:d8:
6c:c8:e9:e8:7a:18:8b:18:0b:f6:ac:3f:4c:62:9e:
d5:60:49:a4:20:99:81:36:67:ac:70:5d:13:b4:87:
94:d6:eb:43:c8:22:a7:b3:09:35:a4:5b:d0:21:f0:
72:b6:43:77:49:1b:d3:34:81:de:2a:2e:f0:e3:41:
23:46:cb:ae:86:12:cd:a0:dd:8c:c6:ef:18:50:5c:
7c:64:b9:48:70:99:bd:54:db:57:a8:55:d2:48:c8:
d6:e8:0b:9d:1e:aa:af:3d:d7:93:06:2d:6d:55:45:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:D7:F1:D0:F4:C8:42:CF:D3:20:18:90:3F:7C:42:17:29:C3:4A
X509v3 Authority Key Identifier:
keyid:D8:89:71:C2:38:9D:95:04:34:E0:E7:C8:97:AC:D9:D0:A6:7E:C9:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/1/D88971C2389D950434E0E7C897ACD9D0A67EC933.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a3:06:d8:a2:29:a5:7f:3e:61:10:37:a4:ff:9a:39:e5:77:
9f:bf:1b:ce:24:f2:6c:c0:74:16:8d:b9:bd:67:16:84:1b:3e:
95:c7:e2:81:96:36:07:64:f1:ae:d2:5f:c4:62:fe:03:91:e2:
6d:4d:54:16:87:64:b2:59:86:8b:8e:2f:57:b1:40:fe:7e:ef:
3a:eb:69:ff:19:fc:54:12:55:ae:8f:6d:c1:22:cb:55:3b:77:
97:40:61:5d:0b:df:c6:9b:03:61:2c:3b:7f:2e:54:e7:b4:89:
f0:fa:ed:29:e9:4e:b0:32:b0:ee:d8:93:16:1f:56:69:8e:db:
41:39:6d:79:39:15:02:5e:9a:58:b5:cc:35:96:a3:9f:d7:6d:
0c:a0:b7:ae:a4:24:4c:03:75:d6:0d:df:1d:a7:03:93:c7:43:
d6:43:14:8b:02:83:cf:26:87:00:31:3a:f0:74:31:5a:c4:ba:
7a:76:4d:ae:4f:13:4a:74:cb:c8:30:e5:75:ff:fa:37:e7:09:
44:05:e3:55:fe:70:77:c7:40:cb:e8:dd:61:90:cc:b7:b6:5b:
9d:fb:00:50:49:b1:f5:cc:54:a8:f3:8a:a1:e2:b0:12:b1:87:
e2:eb:99:68:b8:eb:58:c6:d7:53:cb:31:3b:d5:73:64:c7:7b:
e8:69:e4:5c
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUWIsOQQwEg9tumX31n0+yIGoG8QAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg4OTcxQzIzODlEOTUwNDM0RTBFN0M4OTdBQ0Q5RDBB
NjdFQzkzMzAeFw0yNTAxMjEwODU1MzJaFw0yNTAxMjIxMTA3MzJaMDMxMTAvBgNV
BAMTKDI0NzREN0YxRDBGNEM4NDJDRkQzMjAxODkwM0Y3QzQyMTcyOUMzNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSiVNtSKbapKpN3/kgdqry6U75
xJoQEGhKdSS6TU+PLjTpmBpYW81+EO1qtR8cHc3JI7ZUNfgQwCQoCtcIyvimNOWu
O19tAj6Ee9LPVAN1bt2SxwGA7R6MxTtgWYfb+0qqXOYxUNWciSokZ+U/NtvwL6oG
hGmQnPu0U07bGuWKr/RF7k3UopKEKpPq8mqdPj226ivz2GzI6eh6GIsYC/asP0xi
ntVgSaQgmYE2Z6xwXRO0h5TW60PIIqezCTWkW9Ah8HK2Q3dJG9M0gd4qLvDjQSNG
y66GEs2g3YzG7xhQXHxkuUhwmb1U21eoVdJIyNboC50eqq8915MGLW1VRWa5AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUJHTX8dD0yELP0yAYkD98Qhcpw0owHwYDVR0j
BBgwFoAU2IlxwjidlQQ04OfIl6zZ0KZ+yTMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9RSlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZNW9xTmFlRG45
LzEvRDg4OTcxQzIzODlEOTUwNDM0RTBFN0M4OTdBQ0Q5RDBBNjdFQzkzMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EODg5NzFDMjM4OUQ5NTA0MzRF
MEU3Qzg5N0FDRDlEMEE2N0VDOTMzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1FK
WmpLQ202VTJBUWhQRkYyVjhxWlhlVURXVmJtams5QVk1b3FOYWVEbjkvMS9EODg5
NzFDMjM4OUQ5NTA0MzRFMEU3Qzg5N0FDRDlEMEE2N0VDOTMzLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
saMG2KIppX8+YRA3pP+aOeV3n78bziTybMB0Fo25vWcWhBs+lcfigZY2B2TxrtJf
xGL+A5HibU1UFodkslmGi44vV7FA/n7vOutp/xn8VBJVro9twSLLVTt3l0BhXQvf
xpsDYSw7fy5U57SJ8PrtKelOsDKw7tiTFh9WaY7bQTlteTkVAl6aWLXMNZajn9dt
DKC3rqQkTAN11g3fHacDk8dD1kMUiwKDzyaHADE68HQxWsS6enZNrk8TSnTLyDDl
df/6N+cJRAXjVf5wd8dAy+jdYZDMt7ZbnfsAUEmx9cxUqPOKoeKwErGH4uuZaLjr
WMbXU8sxO9VzZMd76GnkXA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:07 2025 by rpki-client