Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
File: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft (raw, json)
Hash identifier: Vx/gjWn6Wu167ui32NQOhRO08W7t1CeU5cAW1IHttmM=
Subject key identifier: 84:2E:5B:5B:CA:71:F1:65:E6:57:93:DD:D8:22:3F:74:46:B3:0A:7C
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial: 19DA43BB662AE8B58FDA7AD96A2D2460F2D6993A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
Manifest number: 03D3
Signing time: Tue 07 Apr 2026 10:45:24 +0000
Manifest this update: Tue 07 Apr 2026 10:40:24 +0000
Manifest next update: Wed 08 Apr 2026 13:34:24 +0000
Files and hashes: 1: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (hash: OBHqqNIz3akR1irPnJT6tdTN25bwOM4IlaaFdhrY5NI=)
2: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl (hash: MM5pPe2+sVbQYxUbN7dXXa6ugz1L7Uh5oDOSI7ija20=)
3: 323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (hash: U/ovWadhGltgw0D0M1sX0nDnEp7KUWwkhB9kAvT0gHA=)
4: 3136342e3136332e32322e302f32342d3234203d3e20323635393335.roa (hash: 2IsxxXEamqB2maTRmILSDsKb58bzuLOS5GUocJaoi/A=)
5: 3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (hash: jQ6/5frxDqkVkkcEfiI4JX9SVRQPGQReqALs4lhfh9o=)
6: 323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (hash: OCsEcACfuvtGrDuTTiwuUJYuYSKLgkK1iRwH2rQNkxI=)
7: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (hash: NFULb+Ozf0iG+L/W/CfsLNj7mhTa1xp+/r+3JiJCy+Y=)
8: 3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa (hash: wg2cqsCgcZbAdOFn10mzbSUzdoDtdWxiDjUxBp/NKqA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:da:43:bb:66:2a:e8:b5:8f:da:7a:d9:6a:2d:24:60:f2:d6:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Validity
Not Before: Apr 7 10:40:24 2026 GMT
Not After : Apr 8 13:34:24 2026 GMT
Subject: CN=842E5B5BCA71F165E65793DDD8223F7446B30A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:ee:6c:66:5e:c7:e1:3c:4d:ec:f1:57:e3:
64:59:f2:7e:6b:3a:8a:9f:76:9c:64:62:14:6b:75:
ac:b3:26:c0:3f:4c:db:bd:0b:3a:bf:a7:de:a1:cb:
5a:c6:24:6e:85:e3:13:2a:5c:ed:08:13:dd:3b:96:
97:7b:b8:07:da:a8:94:9f:35:4b:00:7a:2e:7d:be:
26:2e:c8:19:85:19:68:94:64:61:4e:31:02:ab:61:
de:0c:3a:a4:41:e8:ee:b0:4a:8d:bc:16:dd:1d:0a:
d2:76:04:70:38:00:9c:2c:9a:79:4c:a8:fd:e0:5c:
a6:ab:97:ad:c1:72:18:e6:0b:e3:bf:3c:a5:73:74:
b8:c5:b0:58:17:e6:7e:82:8a:13:6e:66:57:41:cd:
db:47:9b:13:37:0a:20:7b:52:cf:cc:68:2a:52:ff:
58:d2:f2:85:2d:f2:5f:72:97:a9:98:b3:f2:f1:3e:
bc:cc:f3:ce:1a:a3:79:53:6e:d7:57:a2:ea:a7:91:
2a:8d:e3:56:ff:12:d8:16:18:53:0c:b7:3f:05:45:
b3:a1:94:0f:ec:20:b3:89:f1:3a:75:04:82:3a:12:
2a:8a:7a:5b:f0:81:b2:04:e2:ec:06:27:10:fc:f0:
25:f7:a5:92:90:c8:0e:a2:43:68:45:72:42:ee:69:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2E:5B:5B:CA:71:F1:65:E6:57:93:DD:D8:22:3F:74:46:B3:0A:7C
X509v3 Authority Key Identifier:
keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2c:b0:4b:b4:ec:a3:75:55:a2:ff:26:bd:82:5b:26:30:ba:
40:86:27:b0:66:e3:66:47:f4:39:b5:2c:b2:ee:b4:a0:16:09:
81:25:18:a9:40:2a:53:d6:d7:5c:d7:5f:d4:68:d2:db:59:05:
86:2b:37:7c:7a:5d:18:45:1a:61:07:a5:6c:40:bb:af:2e:ac:
dd:9e:bb:01:e6:15:79:98:92:dc:0d:c4:6f:54:55:3d:e0:88:
2e:67:cc:c9:06:ce:f0:1b:0b:1e:0f:d8:69:f4:05:c7:42:7e:
51:32:2e:df:03:2a:f0:40:22:05:6c:4a:ef:9a:ff:51:cc:83:
f2:8c:66:ec:08:b7:a1:46:22:0f:43:52:8b:63:1e:ea:da:bf:
f9:fb:e7:12:a1:68:15:30:6d:4c:3c:82:b6:3d:04:e3:15:c8:
bb:44:39:e2:08:11:11:f2:0f:87:78:ee:89:ae:e8:61:50:89:
25:3e:77:4d:df:27:ed:40:a8:dd:9f:31:0d:78:cc:e0:cc:f8:
4f:b2:ab:0a:51:e7:8a:ec:e1:cf:a3:5e:8b:6b:91:c1:aa:0b:
41:88:62:a8:07:7a:07:19:7f:79:de:b0:03:c4:2c:e2:df:00:
b0:7a:c7:28:2d:a3:dd:91:42:93:47:72:e1:a5:88:cd:60:ed:
82:84:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:50:14 2026 by rpki-client