Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft
File: 5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft (raw, json)
Hash identifier: 2cGb5TrYQcmfiWiynUfrKvsHSqgxucDlqwZ0ntXY8qE=
Subject key identifier: 57:B7:C1:6E:AB:0B:39:0A:4F:5E:35:07:0C:8B:30:65:DA:4F:0C:D9
Authority key identifier: 5D:C4:02:BA:39:7E:7E:F1:50:69:B3:A4:F7:A6:67:F0:2B:1F:EA:E4
Certificate issuer: /CN=5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4
Certificate serial: 4F8836A91E459D636ECC5C9DE45DFAB301D289F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft
Manifest number: 02
Signing time: Fri 31 Jan 2025 17:48:02 +0000
Manifest this update: Fri 31 Jan 2025 17:43:02 +0000
Manifest next update: Sat 01 Feb 2025 20:10:02 +0000
Files and hashes: 1: 5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.crl (hash: tDInEV2A19icwAdxzPpbsmfZ6zC3wbkZkQd86Vl6IwQ=)
2: 323830343a393166633a3a2f33322d3438203d3e20323734363830.roa (hash: c3izLnr/OjGSKZRUHX4OgLQfnL+AKWg5KAzv3FJvdjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:88:36:a9:1e:45:9d:63:6e:cc:5c:9d:e4:5d:fa:b3:01:d2:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4
Validity
Not Before: Jan 31 17:43:02 2025 GMT
Not After : Feb 1 20:10:02 2025 GMT
Subject: CN=57B7C16EAB0B390A4F5E35070C8B3065DA4F0CD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:6f:33:c1:a8:12:fa:8b:09:3d:67:60:cb:
f3:29:2e:6f:0d:ab:30:fe:62:80:ed:55:68:69:25:
56:dc:33:96:43:64:81:ef:fd:7f:b2:8c:d0:31:ee:
fd:d8:c6:fe:8d:75:b7:a9:b5:ed:23:64:c4:d4:cc:
0d:17:0d:01:38:37:71:84:0f:a9:c0:d2:ae:ee:bc:
00:60:8f:47:57:46:02:4b:12:d6:53:0e:75:67:b5:
e7:d2:de:e9:fd:7c:df:11:75:39:03:15:f1:6f:d3:
75:7c:bb:22:7a:43:ff:7d:1e:a4:1a:12:d4:dd:81:
f9:4c:cd:6c:34:f3:a9:ed:87:8b:e7:82:4b:6b:a1:
98:be:71:60:bd:4c:ea:9c:84:48:5c:b3:8d:d8:ed:
bb:fb:e6:bd:87:3c:4a:0b:2c:ac:47:11:24:61:bd:
0e:5c:ba:eb:38:77:2c:36:12:a1:61:46:b4:4b:29:
da:42:ff:76:ea:9d:1a:53:75:3d:ed:98:69:2d:e0:
18:0e:17:1d:c7:4d:3b:4a:08:41:b7:f0:11:ad:20:
1c:ee:33:c5:0c:99:e8:0f:3a:1e:a2:2f:3e:61:72:
45:d2:77:4e:74:bb:cb:be:ae:26:ce:3a:27:e5:e7:
1e:c8:4f:65:12:d7:bf:15:e9:3b:4d:46:06:21:d2:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B7:C1:6E:AB:0B:39:0A:4F:5E:35:07:0C:8B:30:65:DA:4F:0C:D9
X509v3 Authority Key Identifier:
keyid:5D:C4:02:BA:39:7E:7E:F1:50:69:B3:A4:F7:A6:67:F0:2B:1F:EA:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:53:1b:8d:92:06:d8:99:21:c2:fb:92:d7:51:b8:68:21:34:
cd:01:80:0c:ca:28:6c:86:85:50:bd:41:54:70:ad:67:55:9f:
82:67:f7:e8:b3:f4:88:54:ad:0e:5b:f2:45:44:c0:56:ed:08:
cc:aa:77:80:85:55:de:59:a3:f0:bd:51:3d:a4:d2:13:d1:43:
d5:50:2e:29:bf:59:02:75:09:4f:2f:20:54:9e:aa:f1:1b:6e:
cf:3d:24:e0:26:f5:03:ce:c2:96:03:4a:9a:88:bc:9d:17:b3:
4e:52:3e:9a:e4:47:1c:4c:b4:3d:47:47:29:60:35:a9:0b:48:
b5:26:6d:9c:f2:ea:55:cb:6f:a9:c2:b9:d6:a4:56:b9:cc:1a:
72:1e:79:95:d3:35:b1:c8:ef:ff:9c:d6:8c:1d:00:fd:d8:a0:
1d:bc:5b:50:48:ca:d9:f9:f1:c2:e4:36:5b:3b:3f:de:f7:c1:
f1:95:f2:0c:ee:16:ba:c2:67:24:b8:7f:3a:38:df:fd:c6:88:
f0:6f:e5:0e:ae:35:22:fb:6a:05:28:bf:07:38:f6:1e:a4:0f:
77:9b:8d:b6:a1:6f:d8:6d:43:2b:f9:79:7c:dd:4a:1f:22:b3:
e5:a0:bf:68:2a:1c:e4:c3:a9:93:cd:75:a9:bd:25:be:94:0d:
09:e1:16:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:55:08 2025 by rpki-client