Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json)
Hash identifier: g66AzpyIbd91lFJkM2PXCxKW/YVLQ2ZUKkEn0+hUbio=
Subject key identifier: FA:86:F6:C4:0D:46:56:5D:76:CA:66:A7:C1:BA:85:8E:93:CB:96:77
Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A
Certificate serial: 26016390189462D92434B530FF497A5B424C00A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
Manifest number: 010A
Signing time: Fri 31 Jan 2025 17:30:59 +0000
Manifest this update: Fri 31 Jan 2025 17:25:59 +0000
Manifest next update: Sat 01 Feb 2025 19:08:59 +0000
Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: VhQYyJGh2/YYCo4AZAErkZydt2hvw3mvenBB7aJh1Bw=)
2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: NDp9eJe+42eDm6yXHvEdf9HcdpGANCOWFpMiqcNAZv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:01:63:90:18:94:62:d9:24:34:b5:30:ff:49:7a:5b:42:4c:00:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A
Validity
Not Before: Jan 31 17:25:59 2025 GMT
Not After : Feb 1 19:08:59 2025 GMT
Subject: CN=FA86F6C40D46565D76CA66A7C1BA858E93CB9677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:e5:1d:6a:46:13:13:5c:40:ea:41:37:f6:
c0:fb:c6:4f:80:a9:b9:c7:f8:0f:8e:dd:1c:a8:22:
6f:2c:13:a9:3a:a2:b7:17:27:4f:e4:c2:30:c6:3d:
5c:88:4d:db:92:b6:6e:cd:34:af:e8:e3:66:3f:0d:
00:36:57:c7:99:f6:31:e8:53:19:34:53:02:af:79:
b3:ac:74:a2:ea:07:d7:4f:82:18:b2:fa:3a:2d:7c:
f7:48:b5:55:b5:d5:1f:9c:20:ce:8c:a0:63:3e:cf:
7a:18:00:4d:c6:e0:ec:46:ea:98:a4:d3:de:d2:47:
b4:57:ab:4b:58:0f:57:a0:a0:22:96:9e:f4:f7:dc:
f9:00:ca:9b:b7:29:15:04:db:62:ce:d5:aa:52:01:
74:ba:57:95:9e:b0:bf:24:06:cf:62:85:3b:44:9e:
7d:6d:91:f7:21:03:57:de:bb:86:d0:49:6e:24:b6:
66:97:96:69:ab:b3:38:e3:ec:dd:56:77:71:30:5b:
82:16:7c:70:c3:b5:64:0b:0c:b2:0d:de:2f:18:68:
07:24:f0:6d:e1:f2:86:7e:d5:f8:8f:cc:42:04:b3:
6d:d5:2c:a2:36:6b:59:57:d4:6f:46:9f:aa:c4:82:
93:6b:ee:f5:11:6a:5f:da:47:5f:a2:25:b2:6b:c5:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:86:F6:C4:0D:46:56:5D:76:CA:66:A7:C1:BA:85:8E:93:CB:96:77
X509v3 Authority Key Identifier:
keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f9:b9:58:e7:e0:1c:85:67:56:50:08:62:ec:eb:1b:2f:89:
8f:85:13:02:46:16:57:48:a6:b6:1b:d0:8e:e5:45:82:3c:cb:
f5:90:f3:29:1d:5b:5e:83:dd:4d:db:95:49:c3:37:4d:9c:8b:
4d:74:0f:fc:f5:25:80:d3:66:85:0e:13:44:6b:6a:7e:bc:c0:
09:b9:97:66:fc:2a:56:da:ef:f6:ec:13:1b:3a:09:f6:a6:89:
3e:c7:3b:55:55:91:c4:72:8a:7f:d5:56:4c:2a:98:3e:e6:3c:
f4:89:81:12:44:05:32:16:f0:f4:6d:56:91:ca:3a:46:14:9f:
70:ec:1f:e7:de:01:6a:f1:af:0f:54:76:60:0a:4a:41:23:04:
64:71:88:a7:70:55:bd:22:8a:62:d3:1a:b2:08:ab:4e:b6:a9:
21:de:e0:51:f0:f7:f2:8e:c9:35:19:13:21:52:01:5c:b1:45:
42:3f:0d:43:bc:09:7f:b3:85:4c:da:9a:cc:28:92:df:ab:11:
da:e3:83:88:0b:af:97:e7:83:1c:5f:6b:05:4f:80:60:59:0a:
a5:01:82:a5:b3:fc:2f:c7:6d:76:76:45:9e:d5:94:70:b9:93:
9a:60:94:af:13:15:52:3c:d3:17:f6:02:7e:fb:b7:7a:c2:e9:
0c:8f:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:45:18 2025 by rpki-client