Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json)
Hash identifier: +kyLPcsiYhYq56lEjLEXjY/qA1NiX9KW+YxXl8ZKF0w=
Subject key identifier: BA:08:0D:CC:18:C6:6D:2B:B8:B8:12:EF:B8:29:9C:3E:A6:58:C2:8A
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial: 408208F81F10F60247D850C215343B4775A2D2BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
Manifest number: 3C
Signing time: Fri 31 Jan 2025 18:39:12 +0000
Manifest this update: Fri 31 Jan 2025 18:34:12 +0000
Manifest next update: Sat 01 Feb 2025 21:07:12 +0000
Files and hashes: 1: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=)
2: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: 8lfw0IUmx6hQRC+xSzd1nm60x7Q1bhxsTP3Hly4xBCY=)
3: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:82:08:f8:1f:10:f6:02:47:d8:50:c2:15:34:3b:47:75:a2:d2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Validity
Not Before: Jan 31 18:34:12 2025 GMT
Not After : Feb 1 21:07:12 2025 GMT
Subject: CN=BA080DCC18C66D2BB8B812EFB8299C3EA658C28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:12:98:9b:b9:be:a1:6c:73:40:4e:b6:9c:
64:4d:72:e2:b7:7e:77:47:c0:ed:31:c9:54:ef:b6:
99:01:82:1d:da:b6:4e:48:f9:63:33:cc:f7:3e:4c:
b5:31:ea:25:ed:4a:ce:65:0a:43:dd:49:d6:c5:cc:
80:7e:09:f1:3f:6e:38:61:82:c2:10:5a:93:ca:dd:
2b:f9:4a:e2:1d:35:ca:6a:9d:19:f8:2e:a5:a1:95:
cb:09:db:5f:36:9b:11:5e:e9:c6:fe:6d:c9:db:95:
32:1e:fa:93:e8:d9:52:c6:41:6b:96:b5:aa:e2:15:
ab:49:87:9f:5b:3d:2d:f2:fe:3f:f1:b7:af:2a:b7:
5e:0f:6a:95:14:39:7c:8f:03:cb:42:5c:e8:9b:47:
df:13:da:9a:b5:f8:d1:77:4e:58:96:93:17:06:a0:
4e:8c:37:53:c5:18:3f:5a:58:d7:ef:cf:34:b5:52:
6a:27:19:6e:d4:1b:19:64:d6:e7:83:f3:20:3d:f7:
35:51:e2:05:cc:19:2d:21:43:89:a9:56:1a:b1:3d:
f7:20:20:74:43:a0:25:03:92:2e:0a:e7:b2:38:86:
65:e5:8d:f3:d9:a9:61:64:c5:f3:09:5e:df:d4:0d:
39:88:fc:00:6f:27:7a:5d:8a:0a:fe:45:d6:6f:78:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:08:0D:CC:18:C6:6D:2B:B8:B8:12:EF:B8:29:9C:3E:A6:58:C2:8A
X509v3 Authority Key Identifier:
keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:98:de:e2:83:87:d3:15:8c:a9:a5:f9:33:45:6d:23:04:
7a:97:ec:28:28:a6:93:e6:a1:42:f8:31:8a:3f:7e:af:5c:8a:
1f:6f:a7:81:9e:15:31:eb:52:64:93:c3:78:57:f7:6f:d5:07:
b1:15:e5:49:f4:45:82:f8:72:d2:c4:44:c9:27:b4:75:0a:60:
f7:6c:8c:c3:43:cc:cf:b9:2a:42:00:31:37:06:6f:fd:5f:e8:
e3:00:75:27:6a:df:9c:63:de:08:8d:f5:bf:24:d4:61:13:66:
dc:d7:4b:26:3f:0c:b6:ca:9d:a7:b4:63:2c:09:f7:25:34:2b:
0e:e3:dc:a1:ad:0d:7f:f6:a0:f7:f7:a3:11:e8:92:84:3d:5a:
e1:b9:de:31:f3:f5:68:c7:37:a9:84:23:f1:6e:18:36:eb:0e:
7d:7f:91:c0:0f:46:00:e6:47:af:c3:b0:6f:af:2f:83:d8:f2:
8e:53:c5:63:82:dd:ff:27:5a:3c:b4:b0:3b:40:a5:4b:34:75:
59:e1:8c:a6:50:ff:7f:d2:4b:f4:53:40:fc:f7:74:42:aa:90:
00:a6:82:cc:7d:39:87:81:d4:b6:c1:bd:04:f6:9b:e5:03:08:
8d:0a:90:43:b6:69:0e:84:2b:40:38:d7:2d:e9:0c:f0:e8:62:
e3:ac:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:16 2025 by rpki-client