Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
File: 21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft (raw, json)
Hash identifier: KjIEE7ZDSrDKWomHgIGCl6aSmMS1+l1537itdpolSLw=
Subject key identifier: EC:93:4B:45:39:D8:70:62:4A:AD:B1:24:0A:49:31:BB:0E:51:DA:39
Authority key identifier: 21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
Certificate issuer: /CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
Certificate serial: 06F2B070E5BAE6DACE8B3A8F260955F9AF343EC6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
Manifest number: 7A
Signing time: Fri 31 Jan 2025 17:28:38 +0000
Manifest this update: Fri 31 Jan 2025 17:23:38 +0000
Manifest next update: Sat 01 Feb 2025 20:38:38 +0000
Files and hashes: 1: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: F/5uoS80CbfVSBqDoAaPMmWNWgMlOrH8siX2/GuuEDo=)
2: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: 7paOLLCXTS/6J0SVjmbHabnegWo4UQbhdmaeVAST0g4=)
3: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: jSJKCG6Dd8KPD0thnB/kAUfSmgjxE2Y6R8Jgw6js0Eo=)
4: 3137372e37342e36342e302f32302d3234203d3e20323632333136.roa (hash: H+rjNNN33HYHPhsY/++o+N6jUgAcds6B+fTxN+TTGlk=)
5: 21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl (hash: 2VsiWh9rfeliEi+kLpEO7H8QjesYxjs33SLwX0lKwF8=)
6: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: uKlW6ey3gtuTHtGtsRuiQzb77eO/RtkKavczvp/qvgc=)
7: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: q8y18T/cZ0wq8rBp5y9YkJ8i/Tb1hTdYdSmC4bye+V0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f2:b0:70:e5:ba:e6:da:ce:8b:3a:8f:26:09:55:f9:af:34:3e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
Validity
Not Before: Jan 31 17:23:38 2025 GMT
Not After : Feb 1 20:38:38 2025 GMT
Subject: CN=EC934B4539D870624AADB1240A4931BB0E51DA39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:b1:3e:2f:18:c9:87:9e:76:9c:1a:93:69:
a5:c8:4d:5b:37:50:6d:c6:c6:27:0a:8a:f3:f5:69:
4a:53:16:c2:cb:9e:d7:67:2d:77:48:8a:e4:5a:94:
1e:40:aa:eb:eb:1d:7d:3d:93:26:8f:4d:4e:9a:73:
69:1b:f4:24:6e:da:41:cc:8f:08:44:78:14:12:ce:
84:ba:3a:3c:f6:d7:5e:f8:7b:e0:ce:80:85:27:be:
5b:e1:c5:8f:4d:0b:d4:56:7a:d0:3d:ee:57:f4:8d:
12:fd:14:be:ac:a3:c6:f2:31:28:02:62:ee:d8:52:
7c:b4:ae:e7:60:26:e2:af:48:c9:88:2a:fd:25:7a:
78:84:1a:b7:95:51:0b:85:c6:46:fe:33:c8:16:8d:
f8:f5:f3:76:0c:01:b9:62:ac:0c:7c:25:13:ce:aa:
97:a8:71:04:85:b2:b2:fa:16:0f:83:d1:ce:69:86:
75:15:95:66:3f:01:b3:07:54:fa:af:34:a3:e5:e2:
00:3f:17:8e:f9:0d:6f:0a:6d:28:c9:36:ec:fe:03:
dd:13:e1:c5:bc:e6:c9:a6:98:4d:52:fb:e7:dd:3e:
7c:4c:9a:b2:3b:e9:05:fe:62:97:0a:59:b0:bb:c0:
0a:1c:75:46:e0:83:70:02:a9:be:4a:e5:6c:3c:b1:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:93:4B:45:39:D8:70:62:4A:AD:B1:24:0A:49:31:BB:0E:51:DA:39
X509v3 Authority Key Identifier:
keyid:21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:50:f3:57:f2:ba:12:8c:62:f0:4b:27:19:90:ff:7e:dc:93:
bb:a1:2d:3d:55:53:a2:da:ba:66:d2:e6:ff:94:5a:7e:08:3d:
8d:e6:d8:16:52:e7:85:c9:4b:55:96:5a:56:d3:de:1b:3f:ab:
02:0b:84:cf:c1:a0:48:f1:3d:bd:40:1a:86:b0:2b:f7:05:20:
1b:20:9b:71:dd:dc:7f:47:1a:d6:72:ac:64:0b:86:58:a2:b7:
b2:74:4d:9c:b3:98:e4:aa:6f:64:ac:a2:8b:79:69:7f:85:97:
a8:63:cb:29:80:0c:e7:3b:b5:e1:33:bb:d4:16:4e:1a:f9:4b:
54:f2:08:d4:3f:8c:b3:33:97:39:83:24:1a:8e:5c:28:75:c7:
54:71:88:98:e8:1a:10:d7:4f:38:33:68:78:4c:34:06:34:21:
c0:62:f4:f9:9c:49:7c:af:9b:19:1b:83:d6:e6:79:d4:cf:d1:
15:03:c5:17:42:e2:6e:c9:e1:0a:5b:b4:a7:48:85:19:90:3d:
95:98:e6:36:32:8f:c2:fd:98:3a:13:5e:45:cf:d5:07:d5:f1:
2c:6f:8d:e4:e4:3e:69:db:68:db:73:30:f5:8e:bc:61:84:8c:
5c:89:94:ad:5d:da:c2:4a:66:36:54:f0:7d:6f:7c:7f:0b:20:
00:14:f1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:45 2025 by rpki-client