Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/254B1996D1A45FE63D26A398182076F43E51B0FB.mft
File: 254B1996D1A45FE63D26A398182076F43E51B0FB.mft (raw, json)
Hash identifier: a8i0OO3hzDfvAKCGIQ947rW31uxXZJTpXKy9ejgsc4U=
Subject key identifier: BA:5A:9B:29:DF:8B:F3:90:96:CE:47:8A:4C:E4:8E:4A:55:EC:E3:DE
Authority key identifier: 25:4B:19:96:D1:A4:5F:E6:3D:26:A3:98:18:20:76:F4:3E:51:B0:FB
Certificate issuer: /CN=254B1996D1A45FE63D26A398182076F43E51B0FB
Certificate serial: 40D53D897C3FD6FB467836E88ED12A8E632C5B87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254B1996D1A45FE63D26A398182076F43E51B0FB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/254B1996D1A45FE63D26A398182076F43E51B0FB.mft
Manifest number: 0F
Signing time: Wed 21 Jun 2023 21:57:09 +0000
Manifest this update: Wed 21 Jun 2023 21:52:09 +0000
Manifest next update: Thu 22 Jun 2023 22:28:09 +0000
Files and hashes: 1: AS28202.roa (hash: A/ksOYFcJEaRLkGtuzuuCwgQQgRmPsmXmqwxOiI3ow0=)
2: 254B1996D1A45FE63D26A398182076F43E51B0FB.crl (hash: os8h/cvbL8yux+15i/vW3M89M6cv3FLDNvI6bZf13yA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d5:3d:89:7c:3f:d6:fb:46:78:36:e8:8e:d1:2a:8e:63:2c:5b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254B1996D1A45FE63D26A398182076F43E51B0FB
Validity
Not Before: Jun 21 21:52:09 2023 GMT
Not After : Jun 22 22:28:09 2023 GMT
Subject: CN=BA5A9B29DF8BF39096CE478A4CE48E4A55ECE3DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:79:8b:de:46:5e:16:dc:89:08:1b:52:ba:
88:98:ec:9e:8d:15:18:a7:c4:58:88:fb:aa:64:59:
aa:3d:c4:1b:f4:f6:92:6f:f3:54:a0:3d:9b:3f:0a:
e7:b6:8a:ae:65:d6:21:76:e6:18:5a:77:cb:df:59:
62:71:47:90:41:6a:4c:c6:a9:4d:4a:cc:e7:a4:ed:
93:fc:48:7f:42:d7:68:85:39:07:5e:b9:2c:c1:4b:
5b:72:cf:a2:0a:b9:8d:95:6f:20:3b:9d:c4:84:89:
f8:d9:55:01:a5:0b:d2:c6:47:e4:74:99:2f:df:ad:
c4:e3:a6:8f:bc:fa:1b:c7:c7:1d:46:80:fe:6b:70:
2e:19:72:bb:fb:8c:13:51:cf:d0:3b:98:cc:5c:47:
cc:a9:74:df:2f:36:f4:03:c4:c6:0c:0f:a6:13:91:
62:2d:f0:6e:62:d1:e5:f3:d6:04:25:71:92:b3:08:
0f:07:9a:e9:0a:84:85:ac:87:78:d7:b4:ad:99:a6:
97:10:e8:e0:53:54:66:19:43:84:a2:87:ab:bc:dd:
79:49:cf:ab:2f:c6:da:55:9e:2d:44:b7:83:d5:b5:
0a:d2:9c:ee:9b:7d:60:e9:1b:9d:3f:73:2f:b9:55:
06:59:c2:ac:d1:99:d5:ae:4d:ba:90:e9:19:ea:a7:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:9B:29:DF:8B:F3:90:96:CE:47:8A:4C:E4:8E:4A:55:EC:E3:DE
X509v3 Authority Key Identifier:
keyid:25:4B:19:96:D1:A4:5F:E6:3D:26:A3:98:18:20:76:F4:3E:51:B0:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/254B1996D1A45FE63D26A398182076F43E51B0FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254B1996D1A45FE63D26A398182076F43E51B0FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/254B1996D1A45FE63D26A398182076F43E51B0FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:71:5e:63:38:9a:b1:06:1b:d9:98:05:19:0a:ff:c1:52:b9:
72:e1:f4:bd:1c:d4:df:19:d5:35:74:52:86:89:f7:83:25:fe:
f8:84:f0:14:95:ca:c6:b2:74:d3:68:54:97:b9:03:a5:07:39:
c9:ce:13:9f:f5:49:7f:1d:ac:be:0b:ea:fe:f9:44:a5:22:47:
77:33:32:01:1a:67:c2:43:27:c6:08:43:dd:01:a4:b1:c1:a9:
b1:d9:5b:54:06:aa:ee:5a:04:7d:b4:19:14:48:a1:98:c3:b0:
e9:d9:f3:fa:8e:94:56:8e:65:a4:35:a7:9c:50:dc:03:12:c6:
cd:58:03:67:3e:2d:ef:fb:ce:8a:a3:0f:9c:b9:15:ce:a1:6c:
cb:77:af:0f:c0:ba:4e:f9:b0:4b:62:2c:be:3d:55:e6:6b:b6:
8f:e4:18:af:db:7c:33:19:6e:36:ed:ec:2d:b0:2a:2f:f8:77:
e1:ca:15:de:20:a1:13:76:cb:e9:33:a7:52:15:9d:65:73:8d:
6b:0a:f8:4b:c8:dd:fd:45:af:40:39:0c:2e:e7:bc:09:20:49:
9a:d3:21:36:2f:ae:af:f5:d5:d9:c3:44:f2:a9:f2:60:2d:75:
a7:72:ff:4e:6b:ce:88:7c:ee:76:b7:bd:3c:3e:49:4c:4b:4b:
5a:1f:e1:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQNU9iXw/1vtGeDbojtEqjmMsW4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU0QjE5OTZEMUE0NUZFNjNEMjZBMzk4MTgyMDc2RjQz
RTUxQjBGQjAeFw0yMzA2MjEyMTUyMDlaFw0yMzA2MjIyMjI4MDlaMDMxMTAvBgNV
BAMTKEJBNUE5QjI5REY4QkYzOTA5NkNFNDc4QTRDRTQ4RTRBNTVFQ0UzREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gHmL3kZeFtyJCBtSuoiY7J6N
FRinxFiI+6pkWao9xBv09pJv81SgPZs/Cue2iq5l1iF25hhad8vfWWJxR5BBakzG
qU1KzOek7ZP8SH9C12iFOQdeuSzBS1tyz6IKuY2VbyA7ncSEifjZVQGlC9LGR+R0
mS/frcTjpo+8+hvHxx1GgP5rcC4Zcrv7jBNRz9A7mMxcR8ypdN8vNvQDxMYMD6YT
kWIt8G5i0eXz1gQlcZKzCA8HmukKhIWsh3jXtK2ZppcQ6OBTVGYZQ4Sih6u83XlJ
z6svxtpVni1Et4PVtQrSnO6bfWDpG50/cy+5VQZZwqzRmdWuTbqQ6Rnqp/U3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUulqbKd+L85CWzkeKTOSOSlXs494wHwYDVR0j
BBgwFoAUJUsZltGkX+Y9JqOYGCB29D5RsPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vMC8yNTRCMTk5NkQxQTQ1RkU2M0QyNkEzOTgxODIwNzZGNDNFNTFCMEZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1NEIxOTk2RDFBNDVGRTYz
RDI2QTM5ODE4MjA3NkY0M0U1MUIwRkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1VV00vMC8y
NTRCMTk5NkQxQTQ1RkU2M0QyNkEzOTgxODIwNzZGNDNFNTFCMEZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjXFeYziasQYb2ZgFGQr/wVK5cuH0vRzU3xnVNXRShon3gyX++ITwFJXKxrJ0
02hUl7kDpQc5yc4Tn/VJfx2svgvq/vlEpSJHdzMyARpnwkMnxghD3QGkscGpsdlb
VAaq7loEfbQZFEihmMOw6dnz+o6UVo5lpDWnnFDcAxLGzVgDZz4t7/vOiqMPnLkV
zqFsy3evD8C6TvmwS2Isvj1V5mu2j+QYr9t8MxluNu3sLbAqL/h34coV3iChE3bL
6TOnUhWdZXONawr4S8jd/UWvQDkMLue8CSBJmtMhNi+ur/XV2cNE8qnyYC11p3L/
TmvOiHzudre9PD5JTEtLWh/hzg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:53:42 2025 by rpki-client