Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json)
Hash identifier: ToBvZ6G6vwWIFS5PYQkcde4s3uraEDd288mPN0UwRrc=
Subject key identifier: FD:EF:C5:F1:07:E1:21:94:C5:F2:95:24:E0:D2:70:5B:1B:48:F2:D8
Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A
Certificate serial: 1AEBD9F5FE5C3AF0667E520E76139B11E3521FFD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
Manifest number: 0154
Signing time: Sat 29 Mar 2025 07:19:58 +0000
Manifest this update: Sat 29 Mar 2025 07:14:58 +0000
Manifest next update: Sun 30 Mar 2025 10:16:58 +0000
Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: wAI1+vGAHtnMd/ycZHwSjoNJs2wXkNj6rYofpedOBEk=)
2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: NDp9eJe+42eDm6yXHvEdf9HcdpGANCOWFpMiqcNAZv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:eb:d9:f5:fe:5c:3a:f0:66:7e:52:0e:76:13:9b:11:e3:52:1f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A
Validity
Not Before: Mar 29 07:14:58 2025 GMT
Not After : Mar 30 10:16:58 2025 GMT
Subject: CN=FDEFC5F107E12194C5F29524E0D2705B1B48F2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:d3:c7:27:05:5b:a0:23:76:6a:9a:5b:91:
13:a3:53:08:40:e6:80:28:48:69:6e:4f:a3:43:48:
83:d7:1c:97:d6:5c:dc:c4:4c:eb:6b:55:f8:f6:9d:
ac:86:56:6f:68:73:f9:b8:1c:6e:d6:e4:33:e1:e9:
af:7b:51:61:0b:12:86:cd:7b:0e:c3:ca:0f:cb:8d:
0c:05:e3:12:e5:14:a7:01:56:27:a5:3c:d2:cc:b7:
f0:04:31:b4:71:65:72:18:2c:3e:e7:1f:20:b8:7a:
c2:24:81:c2:91:fb:06:07:9d:2d:19:42:75:53:e5:
1d:54:6e:f8:54:88:ce:54:e4:70:f2:7c:86:a0:6b:
46:e6:b9:6c:fc:bd:c8:17:5a:e9:c1:cf:88:5c:a8:
44:be:e3:a3:1a:5d:d6:ef:97:1e:7a:6a:8e:56:68:
03:6d:c6:17:2f:5b:8f:23:73:7b:91:07:ab:42:72:
6f:09:e0:db:4b:b6:b1:98:54:f0:1e:42:90:73:24:
34:54:a2:67:94:d1:a7:7e:f3:5f:0a:de:85:92:58:
af:4f:dd:c9:83:00:e4:22:16:8a:47:33:cc:c2:dd:
78:da:45:f5:a2:2f:51:ce:8e:2a:e2:46:41:a9:b1:
03:ac:6a:42:ee:80:fa:19:17:2c:a1:4e:2b:73:09:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:C5:F1:07:E1:21:94:C5:F2:95:24:E0:D2:70:5B:1B:48:F2:D8
X509v3 Authority Key Identifier:
keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:36:b5:e9:13:eb:83:9b:3a:8b:b0:8a:fa:b2:bb:e9:a7:21:
5a:c0:1f:bd:fa:fb:6d:fa:8e:24:a3:1f:59:09:db:a6:a1:dd:
bd:e5:75:ec:91:be:77:86:09:1c:6a:1d:8e:fb:98:fb:c7:c9:
a1:f0:21:ac:22:33:1a:4f:42:7e:e0:3e:5d:94:bf:29:0f:58:
4f:02:a3:70:04:97:81:d1:e2:31:ea:21:11:4c:e3:c4:cf:ea:
e0:dc:9c:b2:0f:43:80:52:f9:54:f5:16:7a:25:f5:8d:ae:70:
a1:64:71:9b:1e:16:f0:e2:de:cb:ba:91:03:7e:c7:61:a7:70:
5f:df:fc:ff:49:be:a2:8e:1f:9b:4f:76:1a:fb:58:7b:b7:ea:
d8:67:05:eb:9f:50:a5:d6:8c:02:fe:13:4e:4f:a5:d2:da:f5:
f7:0b:8b:5a:73:2d:ee:92:74:a0:de:21:1a:2e:45:ab:73:3d:
6f:96:9c:6d:b7:bd:16:40:9c:45:03:3e:32:a8:7e:92:5c:09:
13:4f:d3:60:bc:33:cb:44:54:df:9a:f0:a6:48:d9:f5:f8:c3:
76:fc:d7:4c:2a:4b:b2:8d:ca:5a:92:e6:27:c4:9b:b5:46:d8:
0f:44:0a:45:c9:4a:11:f6:6a:c9:28:f9:13:1d:ea:47:8e:d3:
9e:2e:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:32:32 2025 by rpki-client