Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft
File: CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft (raw, json)
Hash identifier: 9XUly6p0R44FUudqThSavI+bzMMQYzv3tmgiqxCoWiY=
Subject key identifier: 6E:25:D9:02:E5:F5:B3:85:75:1C:AF:A3:2C:39:96:1B:3B:96:2C:71
Authority key identifier: CC:28:C3:C1:82:92:43:E5:DD:90:53:B7:9F:04:CA:57:0C:54:DE:EE
Certificate issuer: /CN=CC28C3C1829243E5DD9053B79F04CA570C54DEEE
Certificate serial: 2E84877F7CF228887406CF3053E9429893D2829C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft
Manifest number: 2D
Signing time: Fri 01 Nov 2024 20:09:11 +0000
Manifest this update: Fri 01 Nov 2024 20:04:11 +0000
Manifest next update: Sat 02 Nov 2024 22:48:11 +0000
Files and hashes: 1: 323830343a393138383a3a2f33322d3334203d3e20323734363437.roa (hash: SzOlfsswc8GeVrjYzfe1xiVTQLZgC+4H7gy02X0ViCE=)
2: CC28C3C1829243E5DD9053B79F04CA570C54DEEE.crl (hash: 1QpHRRMzYmGCui/qTBbq9rCxL/vOrcopsK1RkVAmq6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:84:87:7f:7c:f2:28:88:74:06:cf:30:53:e9:42:98:93:d2:82:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC28C3C1829243E5DD9053B79F04CA570C54DEEE
Validity
Not Before: Nov 1 20:04:11 2024 GMT
Not After : Nov 2 22:48:11 2024 GMT
Subject: CN=6E25D902E5F5B385751CAFA32C39961B3B962C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:6a:e6:63:bf:a5:e7:f0:be:68:75:1c:f1:
ed:65:e4:d2:2e:51:0d:8c:8a:ea:55:8a:9f:4d:19:
2c:ee:ba:c8:73:d9:8b:e5:dc:ce:dd:60:bb:28:68:
f1:cb:c0:3e:ad:98:f5:36:de:66:72:1f:cd:2c:94:
de:6f:4a:92:69:b7:d1:29:b4:f2:a7:7f:65:1c:c1:
84:57:1f:cb:04:51:c4:c6:b1:11:ca:e0:ab:84:ca:
a1:7a:3d:43:be:9b:25:3a:64:23:d6:fa:fe:10:45:
18:24:72:42:b7:68:ed:a8:5f:8c:f8:36:74:64:17:
58:5c:27:b9:ad:9a:74:30:12:a2:d3:a9:b6:cf:7c:
06:5f:43:fa:98:e0:63:d9:bc:77:d2:ae:a3:3d:57:
78:51:b1:8b:fa:e9:34:7a:bc:b5:1a:bc:0d:d5:48:
59:db:d6:32:30:13:a2:65:bd:d3:84:75:aa:42:f7:
9b:13:57:4c:69:23:f2:2d:fc:3c:5a:57:0f:b7:01:
ed:b0:77:ac:b8:85:9f:14:2d:8c:ce:73:e8:64:26:
cc:7a:b7:23:61:33:40:58:b7:bb:0b:97:7c:7b:17:
18:2b:25:46:31:33:a3:c7:ae:bd:00:57:c7:ec:9f:
71:46:3a:0b:c9:29:9e:60:c8:cf:18:a9:0b:91:fb:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:25:D9:02:E5:F5:B3:85:75:1C:AF:A3:2C:39:96:1B:3B:96:2C:71
X509v3 Authority Key Identifier:
keyid:CC:28:C3:C1:82:92:43:E5:DD:90:53:B7:9F:04:CA:57:0C:54:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:95:a4:15:7b:6c:1b:4e:b6:d1:cf:bc:27:3d:96:06:2e:ce:
06:1e:ce:13:49:8e:cb:da:30:0e:14:5a:a6:b5:ad:95:c8:de:
3a:45:50:9d:d2:f6:c1:33:57:1a:c9:10:0a:d0:d4:16:27:89:
ae:bd:f3:f3:5c:55:48:6d:c9:c9:1a:7b:2d:07:20:fd:a1:91:
bc:12:99:46:bd:80:7d:86:ef:f6:09:96:9b:ec:44:08:6e:89:
d1:8e:2b:21:92:ed:f4:20:ab:b9:74:02:5f:4f:1a:c6:61:3e:
fc:60:1d:42:ca:93:2c:b6:69:b7:ab:67:f9:ce:b2:3f:93:5e:
16:df:64:33:de:48:97:05:bb:2d:f7:04:2e:5e:95:e8:cf:d2:
d5:a0:d3:bb:74:64:7d:6e:ca:d5:df:0d:f3:5f:b2:b1:46:82:
83:82:e3:c1:5f:cd:31:eb:47:f4:1f:5d:6d:dd:b7:46:91:7d:
37:38:37:26:65:8a:f7:25:72:ae:1b:c5:78:77:18:78:7b:8d:
44:8d:04:c6:52:d4:30:82:21:4f:22:04:14:c7:74:d0:48:98:
f8:24:56:5b:81:74:db:76:49:6a:5c:aa:cf:fa:16:d9:72:5e:
98:16:6f:4b:2d:50:99:36:69:b7:39:56:c1:da:0d:c0:f6:1f:
6a:d7:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:18 2024 by rpki-client on console.sobornost.net