Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier: M5BmgEaynpllNileu8W3OdZxVy9YyRGQ/COeVWYSEVQ=
Subject key identifier: E6:52:A8:A5:E9:23:D2:C0:D1:E9:0E:EA:8C:64:DE:70:D5:0B:E6:F4
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial: 06EE40AFD1D70AB2484AD99552C8EA414C835A80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number: 35
Signing time: Fri 31 Jan 2025 02:34:09 +0000
Manifest this update: Fri 31 Jan 2025 02:29:09 +0000
Manifest next update: Sat 01 Feb 2025 04:26:09 +0000
Files and hashes: 1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=)
2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: PogKCu0FTng3qjk6caSPewO4KPtTKvrG2JQq+P0NPtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ee:40:af:d1:d7:0a:b2:48:4a:d9:95:52:c8:ea:41:4c:83:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Validity
Not Before: Jan 31 02:29:09 2025 GMT
Not After : Feb 1 04:26:09 2025 GMT
Subject: CN=E652A8A5E923D2C0D1E90EEA8C64DE70D50BE6F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:bb:14:86:a5:51:20:37:fc:d0:58:4c:6a:
e5:b8:80:48:52:92:95:e9:a4:9b:31:cb:4d:ff:5d:
b7:01:c7:e0:6e:80:9e:ac:fd:96:ce:71:bd:05:4a:
bf:17:4c:94:33:c3:e1:a3:f0:92:68:bb:7c:ac:c1:
7f:fb:24:df:73:f1:3c:e6:06:e1:bc:d2:d8:6b:e9:
9a:9a:ea:7e:ed:52:31:a4:af:b9:b1:a6:78:33:dc:
5d:85:3f:7b:49:38:a7:1d:c1:8a:82:32:bc:7b:d8:
de:d4:90:6b:b8:5e:6e:65:bc:a6:ba:e0:fd:a1:05:
2a:6d:8b:5e:90:5f:c6:60:e7:e3:fa:d0:f3:74:a4:
c5:16:f2:f9:a7:74:11:4b:56:99:4a:80:d7:c5:24:
cb:bb:28:0e:ec:06:ec:ab:94:c3:51:90:c2:62:0d:
57:1f:22:01:17:56:2e:b9:ab:6d:c8:b1:3d:5a:cc:
72:53:22:71:9d:0a:4f:a9:df:82:55:67:17:ee:d7:
19:79:26:58:14:84:5b:f5:a1:6e:c2:af:bc:b7:fd:
78:69:ab:e0:29:c5:8c:ed:83:65:67:d8:bd:dd:df:
23:42:39:81:1b:30:ca:fb:ee:32:95:f1:42:3d:b7:
86:bf:78:ad:cb:95:37:8b:36:c7:db:73:65:95:c6:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:52:A8:A5:E9:23:D2:C0:D1:E9:0E:EA:8C:64:DE:70:D5:0B:E6:F4
X509v3 Authority Key Identifier:
keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:df:80:11:d3:77:5a:a6:47:d1:e7:83:45:98:47:c2:97:c9:
52:44:34:b9:cb:d4:d1:f8:14:fc:1f:45:ef:25:5c:57:30:1b:
a2:02:62:e4:48:d6:6b:d6:97:da:28:23:bf:c0:77:03:67:5a:
99:88:52:1e:33:03:28:23:69:1f:ba:87:61:43:81:a4:05:0e:
3e:37:ff:00:0e:ed:d4:10:f4:fe:b3:2b:7d:58:fd:4c:a2:65:
b3:53:f0:a6:af:79:5c:6e:42:9d:d9:2d:be:57:a0:93:32:56:
13:cc:13:20:c0:59:59:f4:7d:05:7e:c6:9d:77:e0:c0:75:ee:
36:ba:ba:eb:59:15:89:e2:67:4d:4f:2e:72:35:60:8f:2c:36:
6d:fe:2b:45:3c:bc:70:4d:35:bc:1c:a4:5d:b7:7e:02:60:68:
4e:a0:b0:82:09:5a:21:ec:83:bb:32:1f:fe:e5:9f:d2:2f:bc:
3a:54:53:ca:6c:96:23:4e:8d:e9:38:52:34:e1:84:e0:0f:24:
4c:a1:96:96:44:30:de:92:96:c6:26:32:0c:46:05:f8:16:ed:
7a:ce:dd:30:78:5d:dc:f4:a8:29:54:76:99:68:74:91:b6:b8:
62:50:e2:c1:40:c4:31:00:cd:56:36:66:d4:1e:45:5c:33:6f:
11:1a:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:36:49 2025 by rpki-client