Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
File: ACDD408319E526575F0E327DBFC28EC9CECDF412.mft (raw, json)
Hash identifier: 6UGIuDOE4sctPoMT5ge+YvfAAIfKhjgT4HguyM5f9Nw=
Subject key identifier: 15:9D:3A:4D:02:85:12:C9:DB:C3:5F:C1:35:D4:F3:EA:C4:50:EE:C2
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Certificate issuer: /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial: 677CAA7A5237D75403137BFD824D315556CAE2D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
Manifest number: 03D7
Signing time: Tue 07 Apr 2026 08:15:18 +0000
Manifest this update: Tue 07 Apr 2026 08:10:18 +0000
Manifest next update: Wed 08 Apr 2026 11:02:18 +0000
Files and hashes: 1: 323830343a353337343a3a2f33332d3333203d3e20323638353835.roa (hash: EL46Y9sagnkSEY+rwBZlOspv52g5meHe59XNHqFusMI=)
2: 34352e3136342e31302e302f32342d3234203d3e20323638353835.roa (hash: VjrHOXQ0JIR0muow4HAt9GuJDdgGFF384Xbx9ji9qvc=)
3: 323830343a353337343a383030303a3a2f33342d3334203d3e20323638353835.roa (hash: YV5QSk2PRSRyDaMdGXJ9GsPreAUXiZ80kJ9VggLDFro=)
4: ACDD408319E526575F0E327DBFC28EC9CECDF412.crl (hash: e+3+giXNtktzLB3lVdIr9njTuvWFou4IN9YjWPc9FXc=)
5: 34352e3136342e31312e302f32342d3234203d3e20323638353835.roa (hash: U2iTonvN7IRhjgK8wYoP172Zo3pgFmS6EEHy6kNocVE=)
6: 323830343a353337343a633030303a3a2f33342d3334203d3e20323638353835.roa (hash: 5mnv+ElXZFe46KDOyPnL+awiHtW19Kq5EZeW5IG3sPw=)
7: 34352e3136342e382e302f32332d3233203d3e20323638353835.roa (hash: yD9XmufoPM/kvxAdJ1CQzt1sSAThMSXGwhfigtCYYZw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7c:aa:7a:52:37:d7:54:03:13:7b:fd:82:4d:31:55:56:ca:e2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Validity
Not Before: Apr 7 08:10:18 2026 GMT
Not After : Apr 8 11:02:18 2026 GMT
Subject: CN=159D3A4D028512C9DBC35FC135D4F3EAC450EEC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:42:6f:b5:e1:c3:02:27:e8:62:3d:05:13:
e1:96:fb:17:cf:66:19:35:69:7e:55:bb:12:3d:e1:
6d:8a:e6:af:43:93:00:58:01:f4:85:ea:5a:d2:7d:
a8:c8:1b:39:06:c9:05:bf:1f:ab:0e:b3:ec:18:68:
a5:aa:9d:13:6b:44:ae:1b:d8:19:fd:86:90:6e:d1:
eb:f0:58:29:33:4f:81:85:1d:d5:cb:03:51:0b:eb:
d4:8d:ec:47:6b:0d:c0:58:64:6f:11:00:b4:4b:f3:
3d:e6:92:81:74:03:47:6b:9e:1b:fb:1f:58:a8:c4:
67:31:3a:59:4a:78:b6:e3:57:af:37:96:d5:54:26:
85:eb:42:a5:f0:f0:b9:cb:80:3a:ca:16:48:37:49:
c8:2b:98:32:eb:9a:16:25:45:ad:87:e0:69:44:5b:
1f:eb:1d:15:9c:a3:d1:91:4d:d6:c7:66:f6:72:d4:
ff:79:a1:2f:4b:13:8a:f0:a3:7a:b0:1a:66:6d:af:
b4:bd:d1:a2:ed:76:e3:b9:59:12:7d:99:15:00:cd:
43:7a:55:40:5f:08:e8:97:73:11:e7:a0:65:f1:7b:
2d:74:92:02:fa:53:a2:95:2b:57:57:6a:6a:f8:b9:
2e:26:c4:df:28:53:6c:2f:8a:53:3d:14:ac:ea:07:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9D:3A:4D:02:85:12:C9:DB:C3:5F:C1:35:D4:F3:EA:C4:50:EE:C2
X509v3 Authority Key Identifier:
keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b0:11:cb:82:a4:f1:28:3e:a9:8a:a5:7c:26:a2:a4:0a:9a:
d9:bd:ec:42:bc:21:89:dc:6e:84:6c:14:91:c6:09:a3:90:3e:
db:a3:07:06:e5:d0:73:fd:ae:46:9d:19:15:5d:c3:be:f1:a4:
78:af:e7:05:59:16:22:c0:33:2f:f1:10:bd:14:7f:c8:53:6a:
92:b1:47:71:94:9b:7d:3c:a4:a8:34:94:d8:c8:6b:12:22:0a:
5e:16:3c:ec:57:c1:df:c5:67:74:a5:85:cf:a5:07:36:2f:42:
7d:34:2a:22:47:f0:ac:2a:94:b0:f4:85:be:d1:2d:9d:76:2c:
ce:9c:da:5f:92:80:10:53:a3:95:9b:44:cc:f1:33:78:0a:e5:
fe:08:16:e5:11:49:bd:b0:3a:79:20:2d:fa:22:6f:2e:d4:2d:
7a:e9:b2:e1:bb:16:aa:29:7d:27:63:a2:e2:ee:07:34:c7:a8:
ab:f1:8c:d0:39:7e:70:bd:d8:7f:f0:e7:57:1e:92:e5:21:c8:
f1:0d:55:c9:5a:6f:2d:55:f8:a2:36:78:5e:bd:5c:9f:ff:11:
b3:6c:b7:b1:aa:66:68:52:33:6b:98:3d:8b:84:d8:01:1f:50:
96:e4:d6:e0:a5:d7:e6:4e:5d:3e:8e:e3:b9:83:9d:25:2d:d4:
3a:6b:b0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:39:01 2026 by rpki-client