Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.mft
File: 8AF533141D3555FA3A251444F1A8E556BE76DF24.mft (raw, json)
Hash identifier: yaDJ95n7XocwZ7skM2CanGFo45sTqOv7U1+zeJ1fe6c=
Subject key identifier: 2B:BA:9F:8D:68:48:12:8A:01:51:7F:5A:B6:EA:7A:2E:9B:EF:E0:1F
Authority key identifier: 8A:F5:33:14:1D:35:55:FA:3A:25:14:44:F1:A8:E5:56:BE:76:DF:24
Certificate issuer: /CN=8AF533141D3555FA3A251444F1A8E556BE76DF24
Certificate serial: 20497DB9C90ACBF92456D89B9DEA13BF9671D6AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF533141D3555FA3A251444F1A8E556BE76DF24.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.mft
Manifest number: 01
Signing time: Mon 17 Mar 2025 15:55:20 +0000
Manifest this update: Mon 17 Mar 2025 15:50:20 +0000
Manifest next update: Tue 18 Mar 2025 19:39:20 +0000
Files and hashes: 1: 8AF533141D3555FA3A251444F1A8E556BE76DF24.crl (hash: yNZkHVSnctywS38Ck34P6jE+b37ZKyZlr0u5gRKD2kU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:49:7d:b9:c9:0a:cb:f9:24:56:d8:9b:9d:ea:13:bf:96:71:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AF533141D3555FA3A251444F1A8E556BE76DF24
Validity
Not Before: Mar 17 15:50:20 2025 GMT
Not After : Mar 18 19:39:20 2025 GMT
Subject: CN=2BBA9F8D6848128A01517F5AB6EA7A2E9BEFE01F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:91:a0:3c:13:c2:c1:92:63:90:e1:fc:bd:
c3:17:2f:03:39:54:2d:73:bb:5a:6d:33:15:8a:d0:
ca:40:0f:9c:3a:5f:04:b0:1f:8c:51:61:fa:3e:85:
73:36:c1:a9:a2:bb:a8:ea:e7:63:3d:c9:6c:72:81:
b6:d7:d3:7b:15:eb:c6:5b:ab:34:c8:c5:c7:b8:45:
db:10:5b:67:f4:44:31:e3:f0:86:93:fb:0f:e3:ac:
fa:39:53:0a:0e:cb:fb:c8:f6:45:e0:a6:a5:e6:f5:
59:f0:e7:f3:1e:97:e3:38:0b:b0:c1:36:60:2e:c2:
33:ec:0f:ff:ad:76:85:4d:8b:6e:dd:9b:86:17:0e:
cb:2b:f1:37:a6:32:33:a6:08:66:82:49:82:a9:75:
02:c3:a0:0d:5a:9e:fa:76:13:30:1a:b9:ca:36:71:
34:6b:1f:ce:94:cf:ee:ba:ec:9a:00:25:cf:89:6c:
2f:78:ac:29:af:f3:b0:b5:42:46:9d:c6:b1:d1:4e:
6e:27:72:3d:31:78:1e:36:31:5c:06:86:b1:db:56:
bf:c0:ef:5c:83:19:42:9a:f8:e7:99:ca:95:e1:ed:
b3:67:e5:d9:e1:18:f3:88:09:6f:81:75:8a:e5:f3:
9b:c9:e3:25:c7:c0:8a:50:07:5a:11:12:14:f7:6e:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BA:9F:8D:68:48:12:8A:01:51:7F:5A:B6:EA:7A:2E:9B:EF:E0:1F
X509v3 Authority Key Identifier:
keyid:8A:F5:33:14:1D:35:55:FA:3A:25:14:44:F1:A8:E5:56:BE:76:DF:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF533141D3555FA3A251444F1A8E556BE76DF24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bb:64:3e:53:c8:ce:d6:b4:f9:cf:fe:9f:66:b4:5c:25:70:
c3:95:55:ac:0c:10:39:1f:61:7b:c9:1b:af:11:48:39:53:bc:
65:98:e0:4f:2c:fc:d2:8b:5a:fc:ce:b2:2f:55:ca:3a:a5:8f:
e7:72:8c:04:88:d9:d6:be:29:cc:07:f4:0e:54:b8:3d:8c:d7:
6c:58:6b:e1:9f:87:1f:ae:24:36:c7:3f:c7:f1:80:45:9f:d9:
1e:8a:c6:74:bc:80:08:48:4d:ae:a5:58:65:30:c1:54:12:85:
11:f0:ac:de:8f:48:15:2c:01:e3:5d:51:60:69:1e:15:67:d0:
98:fd:70:47:1b:ee:c7:e3:ae:c4:d0:2b:b7:96:a9:9d:a9:90:
02:a3:f1:1d:18:0c:ea:c9:95:19:aa:6c:41:55:b2:be:d9:fa:
63:1d:44:bb:d1:ce:f5:24:b6:cc:7b:e9:d4:2d:03:9c:cd:1f:
e0:51:43:22:69:27:e6:d0:49:ee:f4:11:0b:15:65:96:09:0a:
5e:e2:9b:9d:25:8d:8c:5f:81:70:be:3d:fb:36:38:ab:4e:cd:
ba:aa:c9:77:54:87:a5:fa:ae:eb:5a:6b:b7:74:a7:d9:f5:05:
25:bd:67:66:ed:d4:eb:88:e7:5e:99:1b:dc:1e:e1:7d:7a:cd:
de:6f:9a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:26:24 2025 by rpki-client