Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
File: 43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json)
Hash identifier: 6Q8qIYMAZJlJ13MHzRU8aMvt6jZNv6iDYp3dM7YdWM8=
Subject key identifier: 2B:4D:A1:4E:4A:F4:28:CC:C1:B1:8A:5D:85:1C:33:5E:ED:99:3A:33
Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11
Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11
Certificate serial: 29705FCDF676A05373836179D813D429A18E4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
Manifest number: 0175
Signing time: Fri 31 Jan 2025 16:37:47 +0000
Manifest this update: Fri 31 Jan 2025 16:32:47 +0000
Manifest next update: Sat 01 Feb 2025 18:06:47 +0000
Files and hashes: 1: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: gQvu8Sl0PAv0DI7bGsvjjlNXcZ6CfnbmL6KU6thLgss=)
2: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: lQqpK1vkx7VblPYNnZVbUtlSZVBFVAArQR2nix6HIgg=)
3: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: RrTldeuc70xkEk4+NZE8cD1Ic4ZXWDfD1tl/h52gGt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:70:5f:cd:f6:76:a0:53:73:83:61:79:d8:13:d4:29:a1:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11
Validity
Not Before: Jan 31 16:32:47 2025 GMT
Not After : Feb 1 18:06:47 2025 GMT
Subject: CN=2B4DA14E4AF428CCC1B18A5D851C335EED993A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:d4:38:93:79:78:8c:84:1e:54:b4:d6:8c:
b1:61:e8:49:2b:3f:ed:31:7b:87:50:3d:81:bc:14:
17:e8:e8:25:be:d5:f3:07:5d:08:00:d5:72:4b:2e:
95:2a:c7:66:0e:4b:54:3b:22:79:dd:4c:f4:51:95:
f0:83:b9:1e:bb:e9:6f:04:63:79:6c:c2:fc:2d:e8:
c3:27:67:1a:a4:2d:9d:21:e2:cc:3b:55:14:67:35:
08:8a:56:1e:af:d0:cc:55:ce:5c:da:43:23:2b:18:
db:ee:6a:d3:b4:9c:04:b7:ac:db:38:f8:20:fd:3e:
ab:f0:ff:ba:7c:ad:78:26:e0:99:33:7f:d2:48:6f:
15:d4:62:11:a4:ad:07:d7:7e:84:a5:2f:97:69:a6:
54:c8:96:93:98:af:05:d9:ee:1c:26:61:60:ea:b8:
33:a0:f2:67:92:12:20:24:22:54:04:af:ee:c1:0c:
65:09:19:60:70:5a:50:73:e6:d2:ed:91:85:23:89:
cf:22:c4:d6:2c:e1:08:f4:47:bf:b9:da:37:ca:df:
c8:21:ca:5c:92:16:fa:a0:d8:f6:f6:cb:bb:8e:f7:
f1:39:47:31:b3:91:0a:5d:fb:29:15:cc:b8:71:e3:
49:8e:04:78:56:e7:b2:1e:6a:77:8b:cc:eb:5d:d9:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:A1:4E:4A:F4:28:CC:C1:B1:8A:5D:85:1C:33:5E:ED:99:3A:33
X509v3 Authority Key Identifier:
keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:31:5b:f2:49:97:0f:5a:d1:c5:bc:44:db:45:bb:d5:8d:be:
4e:13:e1:b7:8d:2f:23:66:cd:df:c4:75:07:d3:95:9e:b6:54:
e1:d1:42:e9:85:03:8d:01:52:9b:4b:0e:dd:82:22:5a:3e:9f:
8f:c1:4d:2a:9f:ed:69:02:7f:b1:a0:6c:48:86:21:76:20:c2:
ac:76:66:91:75:29:85:b0:73:72:07:f4:d1:da:8f:4d:e1:3c:
48:75:b9:f5:f5:74:ff:0c:bf:19:ec:f7:2b:f3:77:90:3a:0b:
d3:74:b4:02:61:1f:b2:ee:b2:df:e3:33:01:cd:02:cb:d3:22:
87:41:cc:6b:62:b4:9d:ae:f6:84:b5:14:a7:7e:ae:d4:ca:25:
3b:2c:d0:f9:00:cc:7d:82:13:05:0f:d7:1c:6e:a3:3e:7f:44:
62:39:81:27:91:9e:e1:bc:6f:c4:66:85:c0:5a:65:2c:c9:af:
42:54:a0:dc:a7:08:1b:3b:48:d7:b1:c2:11:3b:db:aa:ef:ec:
ee:fc:b5:6c:1c:f1:3f:57:43:5b:b8:7b:58:00:7d:66:14:b2:
f7:76:6e:58:61:63:6b:5a:66:41:8f:fd:2e:8c:79:10:3f:38:
5b:1a:2b:73:e6:cc:46:bf:f3:fd:a6:29:bd:10:05:9c:e3:54:
b9:10:29:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:30 2025 by rpki-client