Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft
File: 648C0855082FB44E47607549445757FD4ABB0BD4.mft (raw, json)
Hash identifier: +jxrELGFgJE7YeF6JvgcD1w5aRtSQiDG5f64bLSfR7k=
Subject key identifier: DB:9E:29:91:77:2C:86:1B:4D:2A:54:CD:4D:A3:E4:FF:03:3F:C6:A4
Authority key identifier: 64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4
Certificate issuer: /CN=648C0855082FB44E47607549445757FD4ABB0BD4
Certificate serial: 5DA4BFF2A65A5F5CD1154EECB1F13E55A57EA102
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft
Manifest number: 013C
Signing time: Wed 25 Jun 2025 01:24:03 +0000
Manifest this update: Wed 25 Jun 2025 01:19:02 +0000
Manifest next update: Thu 26 Jun 2025 04:04:02 +0000
Files and hashes: 1: 648C0855082FB44E47607549445757FD4ABB0BD4.crl (hash: BW14Cqu3xfGHEvTNUYOkUhHcMFRHiu9FX2grAYbXNUE=)
2: 323830343a383331383a3a2f33322d3332203d3e20323732313736.roa (hash: TPVGPWOQX/cU300xBlikgEFrpgEM5qA/wXpZH/BbeVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a4:bf:f2:a6:5a:5f:5c:d1:15:4e:ec:b1:f1:3e:55:a5:7e:a1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=648C0855082FB44E47607549445757FD4ABB0BD4
Validity
Not Before: Jun 25 01:19:02 2025 GMT
Not After : Jun 26 04:04:02 2025 GMT
Subject: CN=DB9E2991772C861B4D2A54CD4DA3E4FF033FC6A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:b4:da:3c:5d:93:ce:36:f6:86:39:03:af:
cb:b3:2e:52:aa:2b:2b:67:44:a1:fc:93:4e:b8:82:
aa:f4:95:38:fb:30:ad:38:48:b7:de:3d:11:95:64:
06:b4:f1:95:aa:4b:dc:fb:d4:80:07:0e:3c:85:53:
96:0c:93:1d:0c:09:e1:d2:cd:96:3c:16:5c:b3:79:
b2:94:1a:4e:e0:a8:97:1d:69:94:10:a3:e4:57:1e:
3b:3c:34:56:4c:38:77:09:b4:07:87:bf:b4:24:84:
a3:95:e0:79:73:b2:a0:48:59:48:b8:c7:d2:b4:67:
ad:ec:03:3e:09:ae:f1:aa:5e:40:cc:60:94:f3:03:
c7:be:bc:28:bd:b2:43:6c:6d:f4:86:c5:89:c6:33:
95:dd:e1:af:fc:c0:13:bc:a1:35:80:05:54:dc:49:
67:62:89:2e:2b:4c:ee:e9:b4:7c:40:c0:31:8f:74:
be:56:cc:bb:19:42:8b:b1:04:81:55:e4:4e:c5:5e:
c4:f5:ed:3f:45:18:f5:94:67:a6:2c:ee:6e:21:28:
93:06:b7:d3:52:fe:dc:c5:35:40:9a:4a:15:59:47:
f6:12:b2:1a:a2:d6:c4:8b:97:c9:b3:7b:c7:6b:a3:
88:7e:4a:ef:b2:ea:30:b4:78:1f:84:52:15:d7:b4:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9E:29:91:77:2C:86:1B:4D:2A:54:CD:4D:A3:E4:FF:03:3F:C6:A4
X509v3 Authority Key Identifier:
keyid:64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:6a:1f:f0:36:4d:fa:53:7b:d4:81:4f:bd:18:c3:12:0c:08:
13:0f:ee:98:77:70:14:2f:56:58:1c:8a:6d:07:bb:52:65:b1:
e7:d8:3b:a9:fe:d8:2e:1d:93:1f:49:a8:78:3d:0a:1b:0b:9a:
9c:32:4a:4b:5c:37:69:f5:9b:ed:f2:0c:c3:98:c7:4d:f8:5d:
94:8d:ed:68:16:ec:5d:fc:48:95:99:ae:20:f1:51:2c:1d:e7:
a3:23:fd:45:df:04:0a:59:86:9b:61:c3:76:79:0b:f8:2d:57:
03:ac:8d:95:58:56:33:06:e0:f7:3c:f4:3e:c1:39:5f:98:31:
14:76:aa:40:22:a4:3a:c7:58:41:19:d9:dd:eb:a0:a1:ad:b5:
0b:52:ea:d4:c1:09:0b:8e:7e:a5:44:cb:8a:72:e7:ef:02:f7:
01:d8:7e:b1:7e:89:40:80:9b:9c:a4:0f:50:61:c1:16:65:17:
4c:ff:4a:8c:50:7b:02:df:d0:ba:b9:21:a7:12:23:8b:e2:19:
aa:84:7c:a9:39:58:f1:31:0b:14:46:e6:d0:e8:4a:b0:62:43:
57:78:cc:b0:07:cd:36:72:f2:75:68:ff:e4:f5:86:de:a9:04:
24:42:c7:18:d0:8c:98:e3:ed:bb:9d:11:31:07:50:16:cb:fd:
5e:46:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:29:46 2025 by rpki-client