Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
File: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft (raw, json)
Hash identifier: Pd3x63hXSS6XCEatydVXd0BWayJSGcCE4dn98W7/RTI=
Subject key identifier: EB:42:C8:65:77:52:0D:01:74:D4:5D:05:5A:3F:62:94:A3:9A:85:9A
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial: 776D55423E3C024D362B0A4CCAE6836200F9522A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
Manifest number: 025B
Signing time: Sat 29 Mar 2025 05:14:24 +0000
Manifest this update: Sat 29 Mar 2025 05:09:24 +0000
Manifest next update: Sun 30 Mar 2025 08:42:24 +0000
Files and hashes: 1: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: ZEOE1aModZQn//F6rEGH/N341h+IAF+P3KvayKztGlw=)
2: 3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (hash: aAcskGlGmP8AQ7qs2cBaT1+bvYjC59f6aR7MspSUM2s=)
3: 3230312e34392e3232342e302f32302d3234203d3e203532353332.roa (hash: CNJSlWtatUN4HSdkuVeA3UaPEokKP4ThP14ovzAF/c0=)
4: 3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (hash: /Bqgdv/wF+ru9WBmwhXO8Kmck4O1wcfAaIl22CcZyRo=)
5: 323830343a326635633a3a2f33322d3438203d3e20323634383836.roa (hash: EtAFZVftso22tPfn5dl/88WB9YQ7x3P4uwE8iBRdUJk=)
6: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl (hash: MJPBLVAP0CFMs9CYKAnbTKiHelYrYWWzaXE70gADtbI=)
7: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: mvqMiFShrhl429jJZ2MEPX47X4Tu0n+8cbWaLIFXD74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6d:55:42:3e:3c:02:4d:36:2b:0a:4c:ca:e6:83:62:00:f9:52:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Validity
Not Before: Mar 29 05:09:24 2025 GMT
Not After : Mar 30 08:42:24 2025 GMT
Subject: CN=EB42C86577520D0174D45D055A3F6294A39A859A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:ab:14:5f:3d:8e:5b:c2:4f:23:e5:fb:33:
be:b3:02:21:ec:5a:5f:f2:e2:35:10:07:ef:3b:79:
2b:01:b2:5f:23:c6:83:1c:cc:04:ed:8e:b7:c6:b4:
dc:a0:a8:5b:42:7f:3b:0b:24:49:9a:d3:91:10:b0:
e1:0e:61:9d:e2:7d:26:35:06:7f:d7:d1:98:a3:d7:
6a:44:16:a0:40:22:28:e0:79:c7:02:38:4c:0d:f9:
0f:23:f5:36:4b:73:e5:88:0a:a7:b8:f3:d8:b1:df:
03:55:ba:61:2f:b9:5c:0d:8e:9f:77:35:d2:e2:a0:
8c:5a:cb:c6:d1:23:62:fc:12:2a:47:65:a3:03:5e:
e9:64:85:78:fe:6f:bc:d0:d2:29:70:5c:42:82:69:
a0:f6:5c:64:f2:92:c5:a6:e8:1c:46:65:e8:b6:de:
3d:44:72:2d:76:f6:05:de:5d:1f:27:30:60:ee:8e:
0e:76:7f:5d:d2:52:05:08:d3:a8:71:8d:b5:3c:67:
69:7a:76:9c:3b:15:44:47:8d:0e:6f:46:da:f2:fb:
70:c9:6f:56:43:41:96:02:d3:03:29:62:f2:3d:f7:
3e:6e:0f:1b:74:05:80:12:31:fb:46:d6:f9:57:2e:
ff:49:e6:98:41:c6:ba:2b:9c:57:18:6b:51:3b:28:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:C8:65:77:52:0D:01:74:D4:5D:05:5A:3F:62:94:A3:9A:85:9A
X509v3 Authority Key Identifier:
keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:dd:56:a8:81:14:5f:60:8d:35:f3:c4:7c:7f:02:2b:84:0f:
92:2e:76:f3:e5:30:da:02:d7:c4:dd:1a:68:79:5e:66:f8:db:
a4:eb:d0:8c:27:43:de:9c:63:de:30:a4:da:44:62:9a:cb:a8:
a5:c2:82:56:4d:62:32:c0:d7:a3:04:37:f3:5f:8f:a5:cf:b2:
34:7e:b8:4d:cc:7b:7d:30:1c:5c:40:dc:0c:6c:40:27:08:4e:
57:a2:42:a3:ec:a3:21:65:e4:66:08:1d:4c:ac:45:8a:67:8e:
0a:9b:62:f6:47:7e:75:f7:1d:06:4d:f2:94:68:47:b1:22:01:
95:1b:9d:f2:9d:2c:53:88:bb:55:c1:1f:2d:c3:0e:fe:a3:b1:
49:47:cf:87:d3:45:6f:08:c2:a1:6f:84:e7:13:22:33:e4:51:
13:7a:df:36:ed:08:d2:78:d6:ec:20:b1:85:0e:ce:0b:e1:97:
63:06:9a:03:70:f6:8b:42:8c:65:19:fe:30:c4:3a:79:2a:46:
a9:c8:1d:05:c1:97:a4:63:80:52:24:1c:24:a3:2d:f9:28:19:
80:76:8e:99:9f:57:ca:39:01:8d:61:c8:5e:e3:ca:9b:ca:df:
9f:15:e2:06:84:c7:bf:91:1b:a7:6c:68:c6:d3:fb:c9:87:ae:
47:53:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:55:22 2025 by rpki-client