Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
File: 42D604698AFA9BA492807398AA6527B6E7B04AB4.mft (raw, json)
Hash identifier: /bgyuSOluVcI0hhg8RXFalZNBoyxyNlUkGga2ahjzFc=
Subject key identifier: 31:1D:F6:57:77:B8:56:2A:40:B0:1B:C1:A8:1C:6E:2D:70:3B:2A:AA
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Certificate issuer: /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial: 7CCEE320BB9D42C77A8F8C29DF7B7C0635985BE0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
Manifest number: 0150
Signing time: Fri 31 Jan 2025 03:20:40 +0000
Manifest this update: Fri 31 Jan 2025 03:15:40 +0000
Manifest next update: Sat 01 Feb 2025 07:18:40 +0000
Files and hashes: 1: 34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (hash: vGrE2QkyLb0ZqSk3VbDFyFYQZDWgFD0gMkk1SZHUtZ8=)
2: 42D604698AFA9BA492807398AA6527B6E7B04AB4.crl (hash: zCavvFrYroUcV638u8sfi4KY5xEL5t33oRiOmsEdsZc=)
3: 323830343a346464303a3a2f33322d3336203d3e20323638323231.roa (hash: cd/o+cgKT+7B5IJvmnlfVE22M1Gk5tst27TuMc9NCmo=)
4: 34352e3233362e35322e302f32332d3233203d3e20323638323231.roa (hash: TP1DZhDPcJtZEbCLC5hzbgMAWAKbtcDJimX9hhg43y4=)
5: 34352e3233362e35342e302f32332d3233203d3e20323638323231.roa (hash: eMu5Pox28SzpvKP8YjdU77zU4I+utFls48SBZE/y4GM=)
6: 34352e3233362e35322e302f32322d3232203d3e20323638323231.roa (hash: DyMsIolMJZV321T0cBRoRbsiiat/HZ54rBCkTTrlbmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ce:e3:20:bb:9d:42:c7:7a:8f:8c:29:df:7b:7c:06:35:98:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Validity
Not Before: Jan 31 03:15:40 2025 GMT
Not After : Feb 1 07:18:40 2025 GMT
Subject: CN=311DF65777B8562A40B01BC1A81C6E2D703B2AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:1b:76:5d:6d:ee:b1:38:14:48:1c:fa:c7:
20:e2:f6:dd:d0:5e:0d:ec:94:26:30:42:63:0d:4f:
35:dd:71:07:0a:4a:1e:4d:83:0a:9a:cb:25:cc:f1:
83:7c:2b:e4:f2:77:e0:d3:f5:b6:a2:b6:2b:9d:da:
9b:c7:38:b7:1c:c6:fb:e0:bb:1f:e4:9f:9e:68:65:
31:61:65:99:d7:1d:bb:1b:32:45:62:57:cf:00:7d:
cc:20:d8:71:a4:13:b6:e3:18:07:9b:71:01:a9:a3:
4a:c3:1b:16:b9:c5:2a:3c:ba:42:09:48:a7:f2:2c:
fb:79:b2:cd:78:ed:01:d6:aa:a0:1b:48:25:c2:0f:
91:a0:9e:9d:40:97:b4:48:09:0b:36:fe:56:1b:b6:
a1:ff:c2:2e:90:40:2f:ca:58:c0:45:59:a9:7a:00:
b6:c1:9d:6d:1d:39:76:8e:e0:7d:bb:3b:3c:83:45:
87:cb:ed:5a:a8:d5:07:5d:cd:23:ea:99:07:76:4f:
83:c1:4a:23:37:b8:76:e8:98:64:2b:28:fc:e7:82:
49:4b:d1:85:c6:16:36:9c:7f:a9:d9:f4:d9:6e:7c:
9b:05:09:04:67:55:08:84:fe:e6:8e:c3:1e:f2:95:
be:76:5a:e0:d8:8b:62:eb:f3:12:8f:4e:f7:07:b0:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:F6:57:77:B8:56:2A:40:B0:1B:C1:A8:1C:6E:2D:70:3B:2A:AA
X509v3 Authority Key Identifier:
keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b6:85:3a:e7:3f:b4:72:fe:bc:e7:4c:40:86:e4:76:d0:b8:
b2:d1:56:91:c2:f9:d0:6a:00:2d:dc:67:f2:3c:67:8c:eb:a5:
f0:da:8c:15:35:bf:ec:67:a2:06:81:3c:ee:84:3e:4b:6f:bd:
e0:fa:bc:53:2a:3c:e4:cc:d0:95:20:bb:e6:e2:fd:77:88:c7:
dc:4d:5c:ba:0e:f5:74:c9:52:d7:8b:2a:ea:fa:60:a6:6f:24:
9c:3b:33:66:7a:22:eb:cf:64:88:b6:fe:f5:12:7c:dc:79:3f:
ff:10:7f:63:c1:bc:bb:cd:75:03:ad:07:7c:c7:cc:d1:24:1c:
48:b5:18:8d:3c:4b:c8:1e:0c:d4:c7:5e:bd:5d:98:f8:0e:01:
a8:61:87:71:13:da:21:60:87:da:7a:c5:0e:24:28:ac:a2:e1:
4f:2b:0f:ba:40:99:4a:6b:1e:44:a5:09:30:2f:8f:23:c5:31:
0f:36:0a:9e:44:92:da:cf:af:59:3f:1f:6f:06:7c:db:c4:61:
35:72:f5:54:6f:9e:8c:e3:db:b1:9d:5a:85:24:29:49:e5:8e:
e7:08:de:54:46:24:39:dd:50:d0:87:75:d9:13:91:09:3a:0d:
70:e4:45:1d:cc:f4:81:2a:41:e3:ec:b5:cc:a2:34:cd:a3:d2:
6e:aa:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:57:41 2025 by rpki-client