Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.mft
File: BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.mft (raw, json)
Hash identifier: 1o4htk1onCE+uRz8h2nHjtTEyr+riMntfUVXYty/btU=
Subject key identifier: 29:20:DD:8A:89:31:57:14:46:84:AC:C0:AF:B6:08:2F:6C:2E:F8:23
Authority key identifier: BF:FA:D8:E7:BC:7C:5A:E1:7F:8C:A4:AB:38:21:6E:8F:C2:7A:EC:39
Certificate issuer: /CN=BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39
Certificate serial: 457FFD3B6A851E5B63EA8D70DE98C4BDBA6D9086
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.mft
Manifest number: 03
Signing time: Fri 31 Jan 2025 15:34:37 +0000
Manifest this update: Fri 31 Jan 2025 15:29:37 +0000
Manifest next update: Sat 01 Feb 2025 15:45:37 +0000
Files and hashes: 1: 323830343a373066343a3a2f33322d313238203d3e20323730373538.roa (hash: zM8SRvl4nlgpZnfIrzQ7aoXHJ4/1rgKYCVyZX6Zfjro=)
2: BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.crl (hash: DOYH0G74BUfKgv3RxXLthKyDW5uL+RCrWYDYAlEG0j8=)
3: 3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa (hash: KCnBWO/reTyMoydswB81IiCpxpsdQe1XaLHJQQ9ut2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:7f:fd:3b:6a:85:1e:5b:63:ea:8d:70:de:98:c4:bd:ba:6d:90:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39
Validity
Not Before: Jan 31 15:29:37 2025 GMT
Not After : Feb 1 15:45:37 2025 GMT
Subject: CN=2920DD8A893157144684ACC0AFB6082F6C2EF823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:da:8d:43:45:5a:ff:a2:67:9d:a9:8a:5e:
89:d8:b8:ad:a7:ba:dc:ea:cd:fb:9a:bf:38:57:38:
bd:c0:f5:b7:82:22:5c:66:27:7a:ec:2c:4a:f4:f6:
0b:b3:84:f1:39:37:52:c9:ca:27:44:4f:51:2e:a2:
34:24:af:c7:6c:59:ee:d8:47:e9:49:93:fa:b4:a7:
b1:1f:0d:99:8d:1d:b8:fc:d0:2f:db:ed:a8:a4:d7:
bd:dd:c5:26:15:fc:30:25:f0:b7:1e:aa:33:ca:ad:
a9:a0:52:98:73:c3:a5:77:4a:1f:8e:c7:7f:b3:c8:
d9:2d:82:28:9b:eb:5e:64:fb:33:57:0e:cd:81:39:
d3:99:86:16:3d:e8:9a:05:8b:df:b2:44:5a:15:ea:
c6:8a:af:f6:1d:11:79:19:c4:62:22:c1:e0:35:b3:
0f:ef:c7:33:12:a4:6a:34:f9:02:5e:26:40:cf:5e:
f9:7c:f3:2b:32:ee:c2:02:c3:70:e3:64:2d:c0:74:
a9:fb:e8:b7:e3:c5:f4:37:61:bb:db:c2:e3:a7:c3:
0a:1b:c7:02:b9:47:25:2e:d2:a8:d4:8e:ab:c0:b5:
e9:3a:6d:e0:7a:d7:e9:f8:78:ac:44:e3:19:ae:fd:
b6:6a:bd:d8:5e:05:a5:dd:0d:1d:67:43:72:b9:45:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:DD:8A:89:31:57:14:46:84:AC:C0:AF:B6:08:2F:6C:2E:F8:23
X509v3 Authority Key Identifier:
keyid:BF:FA:D8:E7:BC:7C:5A:E1:7F:8C:A4:AB:38:21:6E:8F:C2:7A:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:64:6a:70:89:85:f3:01:59:46:2c:79:39:16:c0:31:a9:a1:
82:6f:9d:5b:80:85:f6:ff:48:63:24:08:b7:dc:5c:a2:4a:c3:
e2:a5:fb:99:55:53:bb:76:47:b4:9f:d6:dd:a7:da:d4:9b:3c:
0a:35:16:d2:c6:a4:1d:b3:b0:93:23:7c:a1:05:78:91:ad:94:
a9:fa:1c:f5:0f:98:90:c9:63:fa:d4:62:89:02:ee:37:d2:c7:
ee:db:83:c9:86:7b:5a:4f:d8:84:a3:7f:b0:ae:93:47:a9:dc:
c5:ed:4e:83:dd:04:7f:32:57:ff:33:f3:2d:80:1f:f7:7f:f7:
bb:72:f0:51:cd:03:f5:8d:47:bc:ac:c2:68:7f:0c:5a:e8:60:
e3:d3:5b:a2:99:5e:a1:7d:5a:77:1f:ba:f7:63:80:53:40:e1:
65:3c:7c:ad:b4:35:ab:f3:41:5c:ff:a3:5f:a1:a7:bf:4a:bb:
7a:69:0b:c2:83:8e:b7:fe:42:35:d3:fe:4a:9a:31:8b:d4:fb:
f4:00:eb:0c:b5:22:a9:66:34:87:09:15:5d:7a:80:e1:3c:83:
14:25:6b:37:da:a5:33:89:62:f9:e1:a2:a2:e6:22:2b:87:3c:
74:63:2b:2b:55:13:06:78:e7:7c:f0:1e:5c:5e:d3:c4:9d:cc:
3e:e4:8d:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURX/9O2qFHltj6o1w3pjEvbptkIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZGQUQ4RTdCQzdDNUFFMTdGOENBNEFCMzgyMTZFOEZD
MjdBRUMzOTAeFw0yNTAxMzExNTI5MzdaFw0yNTAyMDExNTQ1MzdaMDMxMTAvBgNV
BAMTKDI5MjBERDhBODkzMTU3MTQ0Njg0QUNDMEFGQjYwODJGNkMyRUY4MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdtqNQ0Va/6JnnamKXonYuK2n
utzqzfuavzhXOL3A9beCIlxmJ3rsLEr09guzhPE5N1LJyidET1EuojQkr8dsWe7Y
R+lJk/q0p7EfDZmNHbj80C/b7aik173dxSYV/DAl8LceqjPKramgUphzw6V3Sh+O
x3+zyNktgiib615k+zNXDs2BOdOZhhY96JoFi9+yRFoV6saKr/YdEXkZxGIiweA1
sw/vxzMSpGo0+QJeJkDPXvl88ysy7sICw3DjZC3AdKn76LfjxfQ3YbvbwuOnwwob
xwK5RyUu0qjUjqvAtek6beB61+n4eKxE4xmu/bZqvdheBaXdDR1nQ3K5RRD9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKSDdiokxVxRGhKzAr7YIL2wu+CMwHwYDVR0j
BBgwFoAUv/rY57x8WuF/jKSrOCFuj8J67DkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0V4WnFiZzRzNWtucnNjNlZLS3piaGFmS1pEMWhlUkR1S2VmeGFqa3E0
cEUvMC9CRkZBRDhFN0JDN0M1QUUxN0Y4Q0E0QUIzODIxNkU4RkMyN0FFQzM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGRkFEOEU3QkM3QzVBRTE3
RjhDQTRBQjM4MjE2RThGQzI3QUVDMzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0V4WnFiZzRzNWtucnNjNlZLS3piaGFmS1pEMWhlUkR1S2VmeGFqa3E0cEUvMC9C
RkZBRDhFN0JDN0M1QUUxN0Y4Q0E0QUIzODIxNkU4RkMyN0FFQzM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUmRqcImF8wFZRix5ORbAMamhgm+dW4CF9v9IYyQIt9xcokrD4qX7mVVTu3ZH
tJ/W3afa1Js8CjUW0sakHbOwkyN8oQV4ka2Uqfoc9Q+YkMlj+tRiiQLuN9LH7tuD
yYZ7Wk/YhKN/sK6TR6ncxe1Og90EfzJX/zPzLYAf93/3u3LwUc0D9Y1HvKzCaH8M
Wuhg49NbopleoX1adx+692OAU0DhZTx8rbQ1q/NBXP+jX6Gnv0q7emkLwoOOt/5C
NdP+Spoxi9T79ADrDLUiqWY0hwkVXXqA4TyDFCVrN9qlM4li+eGiouYiK4c8dGMr
K1UTBnjnfPAeXF7TxJ3MPuSNRg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:20:33 2025 by rpki-client