Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
File: 3D4867F11A1D652682FA95ED911B20D81139853D.mft (raw, json)
Hash identifier: ZlzOn+TZwX6fy+wRVaI11iIwn4kCMkeJyoLIrsCd570=
Subject key identifier: A5:96:82:B7:5A:78:5F:2A:99:2C:42:3A:B1:31:33:B5:D5:59:0B:9A
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Certificate issuer: /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial: 3EDCA6DEF4726710BC23253BC91215D26A7D6D10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
Manifest number: D2
Signing time: Fri 31 Jan 2025 14:20:01 +0000
Manifest this update: Fri 31 Jan 2025 14:15:01 +0000
Manifest next update: Sat 01 Feb 2025 14:58:01 +0000
Files and hashes: 1: 34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (hash: Sd3Ar7cDAQJDd6Hd1vmlThIrr+zDSVpTdG2tNxMrHeU=)
2: 3D4867F11A1D652682FA95ED911B20D81139853D.crl (hash: 1AWNkj/p5pYvFp3BdCex0hB63FZRL9/kAZ4CKIYlqOk=)
3: 34352e3138322e35342e302f32342d3234203d3e20323639323835.roa (hash: EBgFFTNZxxqeFDpmbKEhzeoySxDpiX2ACODx+CMlS8o=)
4: 323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (hash: P/aI2fOCjmqHtLTryd38yNfUhNiOBbbGFBS63z6FtWU=)
5: 34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (hash: Q70kyTfj+QxKruCCBrn3WSIrMJSsLPyhkAU/ItLP5bw=)
6: 34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (hash: iOl1Jhws0osNJtC4QhQxd1miHQOtEQjp0Segq2G7SBk=)
7: 34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (hash: yZuoUZXrLN5QOpQkonHmaQwv1Bwvs5LAhAb58cNmqEQ=)
8: 34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (hash: jCASJLtwmLLKSPVjnJWx0y6Nop2/miPxAX+p8ne3kVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:dc:a6:de:f4:72:67:10:bc:23:25:3b:c9:12:15:d2:6a:7d:6d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
Validity
Not Before: Jan 31 14:15:01 2025 GMT
Not After : Feb 1 14:58:01 2025 GMT
Subject: CN=A59682B75A785F2A992C423AB13133B5D5590B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:f0:df:b3:ef:9d:1c:1e:f6:26:84:31:7f:
da:53:ae:c1:b9:0f:8b:44:38:08:33:19:eb:25:ab:
ac:17:3d:8c:91:2f:03:e1:5b:79:83:74:c1:23:9d:
19:cf:a3:45:e9:e7:01:b2:cc:4c:62:77:80:13:ec:
f9:a1:d8:44:e0:1e:7a:6b:f6:b9:e2:8c:e6:68:fa:
9c:98:32:e2:05:00:d3:53:9b:0e:0e:5f:eb:81:b7:
d3:4d:91:a3:fd:cd:e9:66:8b:c5:af:56:27:68:77:
67:3b:88:72:1c:81:70:45:f7:6f:a5:29:b0:61:2d:
28:73:b3:fd:82:ad:7b:1c:20:09:b6:ef:ae:f9:ed:
5e:d8:42:59:80:5d:eb:c8:c0:88:09:37:08:1f:7d:
23:dd:75:5b:6c:63:32:6e:14:1a:34:59:00:95:2e:
21:35:86:02:78:88:70:dd:9c:e0:1b:f9:27:6b:fc:
f3:a3:34:c0:2a:c0:db:f8:8e:c7:9b:25:c1:7f:5a:
5c:a6:e9:c1:6e:23:bd:e1:03:b1:19:4d:ab:06:95:
3d:df:e1:42:ee:eb:a9:a0:01:b7:d8:5e:5f:63:4b:
2a:b6:a3:d0:8a:a7:25:d2:5c:88:4c:13:f0:1c:51:
b6:2c:78:95:70:66:6b:74:eb:cb:c6:67:df:45:41:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:82:B7:5A:78:5F:2A:99:2C:42:3A:B1:31:33:B5:D5:59:0B:9A
X509v3 Authority Key Identifier:
keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:eb:7a:ab:bf:2f:97:8e:5b:41:b6:46:06:31:38:19:1c:99:
ea:85:3e:f9:3b:9b:c9:60:f8:00:a0:36:06:89:f0:1c:84:f9:
b1:37:ba:0a:47:e6:82:0a:3f:78:34:3f:a3:40:89:0d:70:02:
08:60:da:4e:12:05:8f:6a:ef:8a:e9:02:e8:9b:b8:71:cd:23:
4b:9f:18:9b:aa:68:3c:fd:10:65:a8:94:69:51:11:36:6f:f9:
f8:0c:e4:6c:f4:e4:74:f3:8c:b4:f1:6d:58:d5:93:f9:21:aa:
90:ba:e0:04:bc:a7:8f:93:bd:0c:55:b9:5f:33:32:8d:db:b7:
54:bd:15:b2:f1:27:56:dc:dd:b2:30:84:87:32:3b:d6:13:c8:
57:d1:c8:b0:8c:05:0b:95:ab:97:98:d9:d6:2c:89:14:bd:3f:
4d:80:ba:2f:1a:57:b3:4b:fe:86:f4:6d:47:44:93:6a:66:d4:
a7:70:74:7a:12:99:7f:a9:22:83:34:18:ac:8a:dc:39:27:76:
bb:e8:1c:47:9f:6a:44:96:e7:5b:a5:88:2a:46:dd:74:fc:88:
84:69:2b:b9:a6:d7:17:1f:6e:6a:cd:72:72:70:71:e1:ef:92:
6e:16:48:0f:05:05:17:70:d8:78:1c:a4:c8:0c:2e:9e:fa:eb:
48:c7:e2:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPtym3vRyZxC8IyU7yRIV0mp9bRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0ODY3RjExQTFENjUyNjgyRkE5NUVEOTExQjIwRDgx
MTM5ODUzRDAeFw0yNTAxMzExNDE1MDFaFw0yNTAyMDExNDU4MDFaMDMxMTAvBgNV
BAMTKEE1OTY4MkI3NUE3ODVGMkE5OTJDNDIzQUIxMzEzM0I1RDU1OTBCOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyvDfs++dHB72JoQxf9pTrsG5
D4tEOAgzGeslq6wXPYyRLwPhW3mDdMEjnRnPo0Xp5wGyzExid4AT7Pmh2ETgHnpr
9rnijOZo+pyYMuIFANNTmw4OX+uBt9NNkaP9zelmi8WvVidod2c7iHIcgXBF92+l
KbBhLShzs/2CrXscIAm276757V7YQlmAXevIwIgJNwgffSPddVtsYzJuFBo0WQCV
LiE1hgJ4iHDdnOAb+Sdr/POjNMAqwNv4jsebJcF/Wlym6cFuI73hA7EZTasGlT3f
4ULu66mgAbfYXl9jSyq2o9CKpyXSXIhME/AcUbYseJVwZmt068vGZ99FQQkjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpZaCt1p4XyqZLEI6sTEztdVZC5owHwYDVR0j
BBgwFoAUPUhn8RodZSaC+pXtkRsg2BE5hT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3
aWQvMC8zRDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDg2N0YxMUExRDY1MjY4
MkZBOTVFRDkxMUIyMEQ4MTEzOTg1M0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3aWQvMC8z
RDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFet6q78vl45bQbZGBjE4GRyZ6oU++TubyWD4AKA2BonwHIT5sTe6Ckfmggo/
eDQ/o0CJDXACCGDaThIFj2rviukC6Ju4cc0jS58Ym6poPP0QZaiUaVERNm/5+Azk
bPTkdPOMtPFtWNWT+SGqkLrgBLynj5O9DFW5XzMyjdu3VL0VsvEnVtzdsjCEhzI7
1hPIV9HIsIwFC5Wrl5jZ1iyJFL0/TYC6LxpXs0v+hvRtR0STambUp3B0ehKZf6ki
gzQYrIrcOSd2u+gcR59qRJbnW6WIKkbddPyIhGkruabXFx9uas1ycnBx4e+SbhZI
DwUFF3DYeBykyAwunvrrSMfiNg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:36:25 2025 by rpki-client