Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
File: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json)
Hash identifier: lTg/FlupWDIfgfL2DZV2lRjoAkzwGzFh6+7HqMOXmUA=
Subject key identifier: 34:1A:7C:33:A6:67:6A:D0:8C:FB:B8:43:5B:0E:AB:61:AE:0F:14:71
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Certificate issuer: /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial: 0A87E82C4796D433DF1A966781FDDAD6F766C494
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
Manifest number: 0196
Signing time: Fri 31 Jan 2025 01:19:26 +0000
Manifest this update: Fri 31 Jan 2025 01:14:26 +0000
Manifest next update: Sat 01 Feb 2025 04:15:26 +0000
Files and hashes: 1: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: 23FRy86N/kyEC8SyUn72Ttmr+cXH0zMMdz8pBAM28vk=)
2: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: dt07wAYXTKfdLNJO1iIrUYr3NRHhSKYVAGHiZfaafis=)
3: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: ixwL8GR/axA21nR76nKx1XueUYEzryo10D9oWHqMUbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:87:e8:2c:47:96:d4:33:df:1a:96:67:81:fd:da:d6:f7:66:c4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Validity
Not Before: Jan 31 01:14:26 2025 GMT
Not After : Feb 1 04:15:26 2025 GMT
Subject: CN=341A7C33A6676AD08CFBB8435B0EAB61AE0F1471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:54:b2:96:49:b1:52:09:a2:b3:70:1a:6d:
e8:5b:fe:5f:78:87:be:2f:be:9d:86:82:5b:d1:d6:
18:6d:10:6d:9b:7f:b2:0e:de:d6:85:e5:a7:2a:20:
9c:70:cd:88:ba:23:db:1d:4e:ce:e6:ed:31:f6:15:
bc:27:e6:62:2f:82:6c:06:83:11:54:c5:9d:c5:f7:
16:32:1c:e7:50:e3:1b:5d:5c:60:a3:b1:22:7c:30:
34:ba:70:4f:43:bf:20:b7:41:e5:5c:12:5a:70:46:
b0:72:07:de:8c:36:99:12:aa:e5:5f:4b:7d:ce:8e:
44:ef:ae:26:85:50:f1:ad:76:2b:86:37:d6:fd:f3:
0f:6d:34:4a:cc:43:66:4d:c6:d7:bd:2d:2f:60:6a:
6d:7c:1e:31:cb:cf:eb:bc:88:ac:ac:8d:93:96:ef:
69:c5:b9:d0:43:2b:a2:7e:91:16:4d:ea:b3:2d:99:
a1:81:23:67:27:9f:72:5d:68:46:7c:40:2a:6c:db:
86:ed:35:b1:bc:66:6e:24:ec:81:92:92:55:e7:85:
46:a1:e9:f6:74:9a:90:c1:f0:5d:42:5e:07:72:9a:
25:28:88:98:fc:62:6b:07:3c:e1:31:f7:e3:29:58:
3a:d8:12:25:3d:91:e5:e9:e7:c8:10:04:72:92:9f:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1A:7C:33:A6:67:6A:D0:8C:FB:B8:43:5B:0E:AB:61:AE:0F:14:71
X509v3 Authority Key Identifier:
keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e5:13:6f:54:83:30:e2:d5:a0:62:3a:ca:e3:15:80:30:4e:
dd:53:65:77:5d:2c:88:50:be:28:d6:06:62:ac:40:7e:eb:ee:
81:97:3c:af:4b:6c:36:4d:ce:57:30:bb:f9:27:a2:7a:d8:74:
05:e4:87:3a:90:d2:da:60:09:e4:c7:77:0c:2f:cc:cc:99:34:
6b:fe:b6:6f:71:21:13:2d:4a:cc:2b:76:01:0b:a9:e8:16:5e:
a9:93:4e:58:45:fc:13:14:57:93:b9:6a:4b:6f:ea:57:6a:7a:
09:01:f1:4d:3f:4a:a7:db:fc:60:b1:e0:f5:59:88:9d:dc:bb:
75:64:f8:48:6d:c3:7d:7b:4b:03:7f:a2:3f:f1:4b:7f:3e:36:
e7:d5:1f:46:5f:7b:08:c1:7c:03:b2:42:05:93:eb:b0:d3:cb:
9c:ee:d3:9d:8d:19:02:27:52:62:4c:5c:f8:fd:08:a6:b3:2a:
c0:65:32:8b:50:03:f9:09:c9:8d:aa:eb:fc:a9:e2:ae:f6:a7:
78:6c:68:5b:f2:0c:22:15:98:95:37:55:d2:e2:5f:6a:72:de:
64:79:d1:94:ff:2a:b2:e2:f9:0d:e7:49:8d:3a:e2:7b:c3:69:
bc:90:73:ab:ed:99:50:73:89:0b:60:47:be:6b:1e:44:34:0e:
2e:7a:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:53:49 2025 by rpki-client