Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft
File: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft (raw, json)
Hash identifier: lt5NkVsCThEUtqdQxZCWAT3gy/b9zZBOSUNoRa5zHnU=
Subject key identifier: D5:1F:88:99:6E:8C:FD:D3:EC:D1:1E:AE:9E:A4:5A:69:64:61:15:5F
Authority key identifier: 2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3
Certificate issuer: /CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3
Certificate serial: 2694FE4A0D74DDEF5180D6D7BFC991411FB8D869
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft
Manifest number: 1A
Signing time: Fri 31 Jan 2025 17:55:17 +0000
Manifest this update: Fri 31 Jan 2025 17:50:17 +0000
Manifest next update: Sat 01 Feb 2025 20:59:17 +0000
Files and hashes: 1: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: op6z5zv5bXYx/GC1V945At+HHF1/DnboG7Nwmgwomqc=)
2: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl (hash: tqtkWgx2dtHw80LwZaiKovzzV3SBKs5JAEflML3OkuA=)
3: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: ZPSfVx1LgqAUvWD4JVlPK1AKbkJ6+EyPJ3Dbf/KroU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:94:fe:4a:0d:74:dd:ef:51:80:d6:d7:bf:c9:91:41:1f:b8:d8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3
Validity
Not Before: Jan 31 17:50:17 2025 GMT
Not After : Feb 1 20:59:17 2025 GMT
Subject: CN=D51F88996E8CFDD3ECD11EAE9EA45A696461155F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:a2:cd:e3:56:29:8f:ab:d6:01:58:b6:e0:
2b:45:7d:8d:ce:fe:c3:18:cf:d3:cd:83:60:30:f4:
21:58:1c:1c:ae:90:60:74:3e:2d:be:ee:e6:ef:6f:
43:c8:04:bf:35:ff:2e:84:0d:63:6e:4f:39:c2:99:
fb:88:a6:0b:e0:6c:23:8f:12:71:2c:1f:68:f8:c7:
e1:c5:e0:f3:6f:a0:04:ed:b5:3e:4d:90:26:dc:9d:
47:f6:55:3b:cf:a2:8c:6b:aa:1b:36:a9:35:7e:44:
6c:b7:e2:63:9a:e1:23:d1:11:94:d6:fc:73:99:6f:
bb:0e:93:4e:89:5a:d4:4e:a7:5d:3b:c9:8c:2e:29:
ab:00:b4:e4:bf:53:59:0f:a1:20:5a:b6:af:89:43:
1e:41:5e:63:48:7b:3b:ba:be:cd:6a:3c:ee:1d:f7:
05:8c:13:fb:3d:d4:73:09:84:70:77:7f:7a:3f:8b:
88:1b:c9:3b:85:2d:88:39:14:0e:0e:ff:2b:de:7c:
0f:51:cf:a2:f9:b5:89:18:14:4c:34:49:10:22:4e:
00:e3:36:11:44:fa:9a:c8:81:18:b3:60:03:58:68:
c6:ed:3a:7a:9e:bb:ff:62:06:04:85:40:0a:83:96:
04:86:88:5a:cf:d4:30:6a:b8:0c:7d:15:41:c2:b0:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:88:99:6E:8C:FD:D3:EC:D1:1E:AE:9E:A4:5A:69:64:61:15:5F
X509v3 Authority Key Identifier:
keyid:2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a1:f3:0d:3b:38:79:53:6c:8d:12:79:e2:f6:20:f2:d0:52:
b8:7d:cc:47:3b:ee:94:54:2b:5f:3a:44:3b:a0:a1:36:cd:74:
ac:3f:76:cb:00:5f:ed:21:2b:bd:17:a0:89:50:d1:56:5c:90:
6c:6b:99:f7:77:aa:77:82:86:28:3f:ef:66:2c:9a:1c:81:82:
82:b1:69:3a:9a:14:6e:01:bf:7b:a8:79:d3:8e:0e:d3:64:8e:
c5:50:a7:58:9f:c4:7c:f9:51:39:84:72:43:0d:c3:35:96:69:
38:96:bd:c4:5f:7f:5b:87:7b:77:a5:0d:d1:a6:c4:45:dc:86:
c8:42:7d:50:9d:65:29:6d:ff:ad:7c:d0:90:01:6f:a1:3c:d9:
f4:d7:f7:4b:2f:0f:f1:e3:fe:82:21:24:7a:7c:c4:7d:f9:35:
7b:47:f5:5c:cc:53:8a:20:6e:8f:46:4b:fe:f2:55:34:0a:54:
d8:d0:a7:9e:88:71:43:97:7a:7b:90:1f:11:dd:b9:d9:af:a8:
07:6b:b1:64:5d:eb:6d:7f:fe:02:eb:dc:4f:2d:25:66:25:93:
2b:27:7a:47:56:f3:2e:73:a2:a6:b0:53:b7:0c:21:2e:55:87:
80:29:58:2c:02:e7:a3:e7:d7:09:a2:d2:01:8a:64:7c:3f:af:
5c:f2:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:10:42 2025 by rpki-client