
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
File: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json)
Hash identifier: gcU4Q4g37XDhTcg+cP2k8hbwiAPekorSOOyGU0tSNmE=
Subject key identifier: 83:14:0D:3F:AC:59:54:B4:88:80:E4:F8:E7:03:78:2D:D2:F0:D0:67
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Certificate issuer: /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial: 2BF552C6166EB43C551AEEF5CEEEB2E89FC3AA3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
Manifest number: 3D
Signing time: Fri 31 Jan 2025 13:09:11 +0000
Manifest this update: Fri 31 Jan 2025 13:04:11 +0000
Manifest next update: Sat 01 Feb 2025 13:58:11 +0000
Files and hashes: 1: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: Cae0rPwdr4PvPGVJVSIvqFMh016EDP3pEnKTzWFS0Mo=)
2: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: kHLoRmafAK4uIGoyJ2MIAaX2srnBBGsfGchJnwrFwCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f5:52:c6:16:6e:b4:3c:55:1a:ee:f5:ce:ee:b2:e8:9f:c3:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Validity
Not Before: Jan 31 13:04:11 2025 GMT
Not After : Feb 1 13:58:11 2025 GMT
Subject: CN=83140D3FAC5954B48880E4F8E703782DD2F0D067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:5d:f5:d4:28:c8:53:fb:91:bc:1c:53:af:
a3:e3:5f:66:b2:98:ff:80:8a:6f:a8:c2:42:61:70:
a5:90:47:87:97:92:65:3f:f9:12:23:65:cd:a6:cd:
ec:7a:04:05:c9:6f:b1:27:9a:fd:27:39:ee:33:81:
80:4e:c9:c0:7c:66:b6:de:0c:72:09:42:09:70:de:
a6:17:a0:94:a0:db:5e:ff:54:36:f0:5c:77:f8:84:
34:2e:55:ae:23:7c:dc:5f:ae:bb:42:6b:b2:3c:83:
68:63:34:b6:9a:ab:f5:98:00:83:8c:ac:0e:cf:d6:
83:c5:e9:d2:cb:b4:62:2f:f4:0e:ce:0a:81:e7:30:
67:b1:17:d3:d7:01:bf:74:df:30:df:42:fc:85:94:
1c:52:c9:51:88:04:7a:12:4f:6e:5c:bf:8c:59:6d:
48:72:05:c4:76:01:02:a3:63:6b:7c:d4:b7:3a:8b:
00:90:3b:87:2a:05:b1:14:0a:99:58:75:7c:67:68:
6e:89:ab:c9:99:86:c4:14:11:05:68:26:26:cf:c5:
dd:17:fe:b9:8f:27:de:6a:83:e4:a3:a5:de:af:28:
20:a1:cb:76:66:f6:db:ce:96:10:f1:98:f3:a1:4a:
82:02:37:75:42:95:3b:9b:69:bf:8a:ed:08:eb:33:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:14:0D:3F:AC:59:54:B4:88:80:E4:F8:E7:03:78:2D:D2:F0:D0:67
X509v3 Authority Key Identifier:
keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:51:d1:9d:19:a9:81:3c:c8:51:ec:c7:f6:17:19:dc:5f:
ff:b2:13:5f:5f:ab:44:b0:2b:53:7e:94:40:b6:ac:c9:7a:9a:
53:71:d4:c2:53:32:c0:3a:90:95:79:d7:8b:48:20:54:fa:a6:
f1:02:11:24:f1:94:29:ba:74:b1:c2:52:cc:02:99:96:d7:1a:
9b:9a:b7:2c:7e:41:ba:2e:d9:b9:c4:63:3d:a9:71:20:f6:b2:
8d:c2:8f:f9:16:7f:95:75:77:4f:5a:66:4d:35:99:44:ad:c8:
ac:35:4e:b4:61:1d:e3:aa:4a:68:a0:23:34:a7:28:79:8d:b1:
1d:09:f6:89:34:dd:29:3a:4b:fd:0b:41:89:11:3b:d5:c4:dc:
6d:f7:71:fe:d7:cd:84:81:81:11:5a:cf:6a:74:25:cf:0c:76:
81:8f:44:5c:6f:41:0f:fd:53:26:80:fa:f9:11:32:3a:60:69:
5e:da:2a:73:0b:f3:ca:0b:6d:80:4d:76:e2:cf:d2:6f:65:d7:
df:f0:d2:39:dd:69:de:de:d0:32:bc:15:57:57:eb:0b:fd:b0:
0d:4e:17:76:69:c1:9a:6f:0f:c0:90:2a:3f:70:8c:0d:25:6f:
cc:8f:73:e5:9f:84:c6:b5:b1:ef:30:16:62:a4:b7:71:91:e9:
4c:c9:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:41:05 2025 by rpki-client