Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft
File: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft (raw, json)
Hash identifier: kMvEJw6zzqGdrhafe1Gu8+lNIGXldgt9VL4rI+pjLyo=
Subject key identifier: 07:6F:64:9B:5C:FD:F4:EE:75:CE:0C:58:21:5B:F4:24:4D:59:28:DD
Authority key identifier: DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42
Certificate issuer: /CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542
Certificate serial: 17C9CA91ACE79E1E20F22E19205768DAE8DE45EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft
Manifest number: 3C
Signing time: Fri 31 Jan 2025 08:40:22 +0000
Manifest this update: Fri 31 Jan 2025 08:35:22 +0000
Manifest next update: Sat 01 Feb 2025 10:26:22 +0000
Files and hashes: 1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: zkubuxRpLG1gutEslbctXHKpEp2A7E4iQzNQuetKYz4=)
2: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl (hash: oLe1M5lLPBeUdm7xTr1xgrX4bhN2qccKfpfHNYlpEs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c9:ca:91:ac:e7:9e:1e:20:f2:2e:19:20:57:68:da:e8:de:45:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542
Validity
Not Before: Jan 31 08:35:22 2025 GMT
Not After : Feb 1 10:26:22 2025 GMT
Subject: CN=076F649B5CFDF4EE75CE0C58215BF4244D5928DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:43:3b:9d:68:20:37:d4:45:6e:1c:27:c5:
9a:a2:f5:99:fd:d0:01:ce:3e:df:c1:ad:d0:10:09:
15:ab:7f:0b:01:fb:29:7c:e3:fe:6a:38:5d:88:91:
6e:a7:5d:8f:d1:2f:4b:cf:79:f0:bb:37:37:74:38:
fe:c6:6c:b1:52:94:ce:a3:c0:63:9d:42:4f:30:3b:
22:48:e5:70:6d:99:0b:e1:aa:4c:1c:7a:ef:5e:eb:
54:4e:b0:fb:a9:58:e7:83:c8:40:39:0f:fa:a7:ce:
b8:dd:d9:7a:84:9a:fe:b7:26:37:77:69:d1:5b:04:
09:7f:c8:f9:83:73:49:95:84:c0:7f:b7:bf:47:69:
2b:72:27:36:60:5d:b5:0c:57:30:46:6c:38:6d:86:
c2:58:27:61:95:bb:cf:b5:16:f2:62:c2:64:2a:59:
29:40:cc:00:8d:83:2b:81:f7:d9:7f:b2:fd:f0:96:
ad:6e:59:8f:7b:75:d9:11:33:ae:4c:af:c6:ac:c5:
67:77:5f:7b:dc:7d:a1:02:52:f8:ae:5d:97:e8:9d:
18:6f:24:34:04:31:5b:17:27:aa:bc:4b:49:2b:74:
bf:6f:5e:33:af:6b:b1:39:21:40:26:7d:00:4b:08:
af:cd:a9:8c:dc:89:08:17:5b:c5:18:e9:1a:63:e5:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:64:9B:5C:FD:F4:EE:75:CE:0C:58:21:5B:F4:24:4D:59:28:DD
X509v3 Authority Key Identifier:
keyid:DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:df:a9:30:12:83:2e:5f:91:c4:3e:c4:bb:a9:77:58:60:
fd:16:05:d6:7a:84:04:83:ce:e6:16:1a:5c:db:ab:2a:03:54:
12:b7:c3:94:04:d8:cb:9b:4c:6b:d4:2d:a7:34:5f:f8:05:78:
e6:2c:d9:e6:4c:e3:10:a6:db:e2:f8:10:d0:6d:6d:2e:df:2b:
d4:ba:50:41:2c:5f:fd:43:9f:ba:c2:33:88:4f:01:82:21:ed:
98:ad:4d:7d:50:ff:f4:eb:f5:e1:49:2f:d3:d3:8c:fc:49:cf:
b9:3f:84:77:44:c8:28:69:2b:47:cd:de:ac:b5:43:08:5e:09:
f4:72:fb:7c:30:b7:a6:02:f4:38:aa:08:f3:70:e6:03:dc:ab:
5a:42:47:25:f0:8e:33:f7:fd:61:aa:bf:4d:7a:58:7f:28:7e:
02:0d:08:5f:f9:65:0b:94:49:75:64:86:57:99:ff:87:66:cc:
d3:37:8f:ee:0a:49:71:a1:d1:2c:cd:4e:1e:72:97:9c:9f:81:
f8:85:45:15:a1:39:66:cb:12:e6:47:30:f1:21:23:83:26:2d:
d9:a8:c7:06:7f:de:53:71:35:da:83:af:78:a8:6f:9e:50:67:
d8:a7:86:75:2a:47:7c:f4:50:b3:b4:22:3a:6e:35:f4:01:72:
2c:b3:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:10 2025 by rpki-client