Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json)
Hash identifier: /U1vqdWt7N+f9CZpbq1t4KHIS4Ld/dxJ6APW8SXVPdU=
Subject key identifier: 9A:03:3D:A6:65:4A:41:01:67:14:F0:56:0A:A7:51:8D:AE:19:43:B8
Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201
Certificate serial: 110782B0D1C132DB50A69181646FC69348D0DB30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
Manifest number: 6B
Signing time: Fri 31 Jan 2025 12:53:15 +0000
Manifest this update: Fri 31 Jan 2025 12:48:15 +0000
Manifest next update: Sat 01 Feb 2025 15:15:15 +0000
Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: hEaTsmU/aLgekhTP/qTXU4ZBE+0PT8nCxD+D1NIplAQ=)
2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:07:82:b0:d1:c1:32:db:50:a6:91:81:64:6f:c6:93:48:d0:db:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201
Validity
Not Before: Jan 31 12:48:15 2025 GMT
Not After : Feb 1 15:15:15 2025 GMT
Subject: CN=9A033DA6654A41016714F0560AA7518DAE1943B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:93:49:a4:2d:fd:3f:f3:73:43:55:6c:32:
28:24:dd:98:a1:2d:60:0b:22:f5:79:9e:70:18:91:
e2:17:63:3f:4e:5f:a4:d7:a9:58:f1:22:38:da:3c:
56:6c:5f:99:17:82:97:ec:ef:1e:42:46:2c:66:ad:
f5:85:43:04:4c:37:ef:83:17:dc:5b:4a:c2:74:df:
28:18:42:2f:04:cb:84:1f:13:bb:e6:8f:ab:a8:0b:
a8:63:32:0c:3e:25:17:b0:3d:e8:2c:5b:44:5e:b6:
f6:6f:b8:de:1d:19:ac:72:19:5a:b9:75:d4:ec:4d:
9d:d0:38:55:f4:c0:71:03:3d:6e:13:a5:5a:ad:37:
19:47:65:35:a7:bd:ed:c2:18:43:72:aa:86:65:ae:
75:2f:b7:75:e0:74:35:7e:4f:ca:8d:28:46:86:bc:
ea:2f:29:e4:96:5a:6d:ea:25:66:36:eb:44:c3:18:
76:ca:62:85:94:54:75:aa:82:3a:d3:c0:cd:46:f4:
15:1b:cf:f3:33:47:64:2f:0c:29:6a:d3:d2:05:c5:
5f:52:88:46:84:b0:9b:54:eb:44:28:d4:3c:7a:03:
e7:ce:85:59:1a:c8:73:b5:fc:c4:db:4b:d2:e5:1f:
3b:50:20:7c:67:88:6e:9d:90:f2:44:d9:3a:bd:09:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:3D:A6:65:4A:41:01:67:14:F0:56:0A:A7:51:8D:AE:19:43:B8
X509v3 Authority Key Identifier:
keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:46:c6:3f:cb:b0:9a:35:f3:21:cc:7f:9f:ef:93:d1:f6:d6:
ac:b5:44:6f:18:6e:c9:b5:34:37:c2:b4:62:62:56:cc:8e:f9:
6e:7b:bd:7c:b5:b3:66:f2:6c:67:e7:15:1f:ef:a3:30:e6:b9:
4e:96:64:82:99:7e:6a:d8:ff:9a:3c:e2:06:1e:da:36:29:88:
4c:70:e3:5a:b0:24:a5:13:64:22:13:19:51:cd:3f:01:32:d6:
73:d5:cd:8e:ac:6d:e3:0d:9b:54:92:18:c0:30:56:3c:96:e4:
5d:5e:2b:2b:ee:ee:f5:1e:c8:59:2e:60:c7:e4:70:1b:71:7f:
82:ea:6a:11:0c:eb:d8:0d:4d:a5:4e:c3:b6:33:1c:7d:c0:de:
86:11:34:96:3a:be:32:bd:c0:8f:6f:c8:30:e9:14:27:b3:db:
dc:4d:07:0f:49:ba:cb:3c:25:9c:f6:c8:7e:25:31:3e:e6:06:
ae:10:a0:0b:ba:88:8e:75:66:b9:7e:3e:e4:17:86:0a:4e:55:
87:b9:f1:1f:82:58:96:5a:c8:a3:44:05:c1:63:29:d8:29:18:
6e:08:5f:49:a6:45:e1:1d:90:46:e2:5f:55:bb:38:8f:94:ae:
c9:b7:1c:4b:6b:42:0a:fa:ed:cf:f5:2c:96:8d:e8:04:d4:d0:
2f:83:f7:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEQeCsNHBMttQppGBZG/Gk0jQ2zAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy
NzBBOTIwMTAeFw0yNTAxMzExMjQ4MTVaFw0yNTAyMDExNTE1MTVaMDMxMTAvBgNV
BAMTKDlBMDMzREE2NjU0QTQxMDE2NzE0RjA1NjBBQTc1MThEQUUxOTQzQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvy5NJpC39P/NzQ1VsMigk3Zih
LWALIvV5nnAYkeIXYz9OX6TXqVjxIjjaPFZsX5kXgpfs7x5CRixmrfWFQwRMN++D
F9xbSsJ03ygYQi8Ey4QfE7vmj6uoC6hjMgw+JRewPegsW0RetvZvuN4dGaxyGVq5
ddTsTZ3QOFX0wHEDPW4TpVqtNxlHZTWnve3CGENyqoZlrnUvt3XgdDV+T8qNKEaG
vOovKeSWWm3qJWY260TDGHbKYoWUVHWqgjrTwM1G9BUbz/MzR2QvDClq09IFxV9S
iEaEsJtU60Qo1Dx6A+fOhVkayHO1/MTbS9LlHztQIHxniG6dkPJE2Tq9CZHbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmgM9pmVKQQFnFPBWCqdRja4ZQ7gwHwYDVR0j
BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW
RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1
OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E
Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd0bGP8uwmjXzIcx/n++T0fbWrLVEbxhuybU0N8K0YmJWzI75bnu9fLWzZvJs
Z+cVH++jMOa5TpZkgpl+atj/mjziBh7aNimITHDjWrAkpRNkIhMZUc0/ATLWc9XN
jqxt4w2bVJIYwDBWPJbkXV4rK+7u9R7IWS5gx+RwG3F/gupqEQzr2A1NpU7DtjMc
fcDehhE0ljq+Mr3Aj2/IMOkUJ7Pb3E0HD0m6yzwlnPbIfiUxPuYGrhCgC7qIjnVm
uX4+5BeGCk5Vh7nxH4JYllrIo0QFwWMp2CkYbghfSaZF4R2QRuJfVbs4j5Suybcc
S2tCCvrtz/Uslo3oBNTQL4P3Yw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:02 2025 by rpki-client