Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.mft
File: 9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.mft (raw, json)
Hash identifier: zU1Tab1H2GphYft7PGYmLIFHUUSDfDZmNgRNeJmWxCc=
Subject key identifier: A0:04:41:4B:B5:B4:39:0C:87:90:DF:FF:CF:BC:3A:60:D4:C0:3D:B6
Authority key identifier: 9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC
Certificate issuer: /CN=9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC
Certificate serial: 6849E29239299741A082170EF5A3D926E8EF7273
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.mft
Manifest number: 0194
Signing time: Fri 31 Jan 2025 07:58:37 +0000
Manifest this update: Fri 31 Jan 2025 07:53:37 +0000
Manifest next update: Sat 01 Feb 2025 09:58:37 +0000
Files and hashes: 1: 9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.crl (hash: 9qgoIlNLKcnxZ1YOMBrHAWYSCQ41x3aO30yEjKvM2FY=)
2: 34352e3138352e39392e302f32342d3234203d3e20323639333732.roa (hash: 7HK+qlsK8Dd9l5OLW1IaxPejNBqyYKT5mGCzzrnpqa0=)
3: 34352e3138352e39382e302f32342d3234203d3e20323639333732.roa (hash: 3mkNpbx57q4G6XyoO6Xc6yOIDF8r5i7EHJuM98T7erY=)
4: 34352e3138352e39362e302f32332d3233203d3e20323639333732.roa (hash: asvHkqNTNXK5R1p2EP8g3ahRmtHnpaYxPCInKj8cWmA=)
5: 323830343a363339633a3a2f33332d3333203d3e20323639333732.roa (hash: Am0om9YSsO8f4fpnXNswfV2NSwnjZt208B18THXd5NI=)
6: 34352e3138352e39362e302f32342d3234203d3e20323639333732.roa (hash: IEdncDoOSDpTtFAAaYsjhQzLpeJSXcmmD3bJ71k19uU=)
7: 34352e3138352e39372e302f32342d3234203d3e20323639333732.roa (hash: FAygBOMVJXrgSUoQbZ8bHUDdjNJb0BPH/t/zDJT1jT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:49:e2:92:39:29:97:41:a0:82:17:0e:f5:a3:d9:26:e8:ef:72:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC
Validity
Not Before: Jan 31 07:53:37 2025 GMT
Not After : Feb 1 09:58:37 2025 GMT
Subject: CN=A004414BB5B4390C8790DFFFCFBC3A60D4C03DB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:9c:8d:98:94:e5:37:ac:d6:dc:15:ad:ec:
6c:eb:ba:e1:30:a9:f9:64:f9:28:8f:43:90:cf:50:
4c:eb:6b:bf:89:be:b5:e1:53:5b:a1:ae:00:2b:fa:
03:91:46:3d:3d:47:0c:f3:a1:23:d3:6c:bb:09:0d:
83:bf:ab:aa:58:10:cc:a3:53:ab:ca:df:12:a7:14:
19:b7:f9:c1:cb:11:38:e0:b0:df:e2:7e:51:d1:1d:
fd:3f:5e:9a:9c:ab:f3:d1:2a:85:5e:7b:9b:36:9e:
e0:f7:e0:c0:a8:b0:c7:1a:76:14:a9:db:2e:14:66:
69:2b:cb:1b:a3:a6:9f:49:d6:f4:0a:f2:5b:fa:62:
3d:35:ce:31:fe:c1:2a:00:af:0b:fe:c5:3e:88:db:
e9:a2:99:f2:a4:6a:5b:20:ee:38:e1:d5:b0:4f:ae:
91:14:9c:d1:c6:5a:58:25:7e:2d:55:38:77:f5:a6:
81:fb:90:83:35:7b:ff:86:e6:43:a0:55:07:b7:f4:
f7:a0:f8:2a:bb:25:d7:7f:3f:cc:c3:1d:db:7e:04:
72:d6:42:36:4f:d1:cb:1e:10:26:c7:22:89:08:10:
89:28:dc:45:eb:8c:e5:76:38:a1:df:c1:d5:0c:49:
b6:f8:e6:89:1a:56:da:9e:c0:09:e5:c9:d4:3c:c9:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:41:4B:B5:B4:39:0C:87:90:DF:FF:CF:BC:3A:60:D4:C0:3D:B6
X509v3 Authority Key Identifier:
keyid:9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e3:74:2a:2b:26:64:76:bd:02:7b:bf:f3:dc:25:f6:06:62:
0b:de:6b:d4:dc:8d:b1:f8:46:96:38:83:5c:38:a1:61:0c:8c:
76:e9:46:ab:7d:ed:40:53:29:a4:dd:53:11:9b:3b:0e:dc:6d:
f4:d7:a2:e7:4f:ec:7b:62:d4:36:47:a0:78:50:d3:d2:62:0f:
1f:40:fd:ba:ee:bd:d1:09:a1:9c:0c:ca:e4:be:21:e5:37:c6:
ca:d3:54:63:57:b0:07:a1:68:8b:e6:39:36:f7:52:f4:21:db:
7d:86:8f:34:ac:dc:41:37:4c:13:14:8d:0d:42:90:b7:12:f4:
2b:c1:11:74:bf:a7:54:ee:28:27:13:51:42:73:77:78:f4:99:
d9:a9:e1:a5:f8:69:6a:85:b6:2b:ef:69:65:04:34:a3:f4:c8:
27:7a:df:ec:18:50:ec:65:f8:97:cd:76:a8:3b:7d:19:bf:d5:
1a:c8:db:8d:39:6b:5f:3b:4a:2d:3c:de:c3:43:95:99:15:e8:
23:7a:94:8a:d8:20:43:8a:06:0b:3a:c1:e9:08:0c:38:3f:9b:
82:ee:1b:b3:b2:17:42:62:33:f1:58:00:0f:ee:46:9b:99:2c:
fc:4c:94:c5:92:68:a0:73:38:8e:16:23:ff:b6:63:94:06:46:
5a:1b:ad:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaEnikjkpl0GgghcO9aPZJujvcnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDNDQzQTBCNEFGNkYyNjYwRjlFNEIyMkZCRTZCRkRG
NEVFRTdDQzAeFw0yNTAxMzEwNzUzMzdaFw0yNTAyMDEwOTU4MzdaMDMxMTAvBgNV
BAMTKEEwMDQ0MTRCQjVCNDM5MEM4NzkwREZGRkNGQkMzQTYwRDRDMDNEQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlZyNmJTlN6zW3BWt7GzruuEw
qflk+SiPQ5DPUEzra7+JvrXhU1uhrgAr+gORRj09RwzzoSPTbLsJDYO/q6pYEMyj
U6vK3xKnFBm3+cHLETjgsN/iflHRHf0/Xpqcq/PRKoVee5s2nuD34MCosMcadhSp
2y4UZmkryxujpp9J1vQK8lv6Yj01zjH+wSoArwv+xT6I2+mimfKkalsg7jjh1bBP
rpEUnNHGWlglfi1VOHf1poH7kIM1e/+G5kOgVQe39Peg+Cq7Jdd/P8zDHdt+BHLW
QjZP0cseECbHIokIEIko3EXrjOV2OKHfwdUMSbb45okaVtqewAnlydQ8ya+ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoARBS7W0OQyHkN//z7w6YNTAPbYwHwYDVR0j
BBgwFoAUm8RDoLSvbyZg+eSyL75r/fTu58wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG43OGNUN3d4emNCOTdLZGo4Qm5YN2Y0UVZxdlQ2ZVVwdEhiRnc5bndv
clkvMS85QkM0NDNBMEI0QUY2RjI2NjBGOUU0QjIyRkJFNkJGREY0RUVFN0NDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQzQ0M0EwQjRBRjZGMjY2
MEY5RTRCMjJGQkU2QkZERjRFRUU3Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RG43OGNUN3d4emNCOTdLZGo4Qm5YN2Y0UVZxdlQ2ZVVwdEhiRnc5bndvclkvMS85
QkM0NDNBMEI0QUY2RjI2NjBGOUU0QjIyRkJFNkJGREY0RUVFN0NDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfON0KismZHa9Anu/89wl9gZiC95r1NyNsfhGljiDXDihYQyMdulGq33tQFMp
pN1TEZs7Dtxt9Nei50/se2LUNkegeFDT0mIPH0D9uu690QmhnAzK5L4h5TfGytNU
Y1ewB6Foi+Y5NvdS9CHbfYaPNKzcQTdMExSNDUKQtxL0K8ERdL+nVO4oJxNRQnN3
ePSZ2anhpfhpaoW2K+9pZQQ0o/TIJ3rf7BhQ7GX4l812qDt9Gb/VGsjbjTlrXztK
LTzew0OVmRXoI3qUitggQ4oGCzrB6QgMOD+bgu4bs7IXQmIz8VgAD+5Gm5ks/EyU
xZJooHM4jhYj/7ZjlAZGWhutAQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:02:42 2025 by rpki-client