Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft
File: 4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft (raw, json)
Hash identifier: aP9j2BXR6FNClcifuIPKuT3AKQzzDWdIBetiLCMTKQw=
Subject key identifier: 3D:02:F5:19:03:38:AB:FD:5D:64:68:0D:E9:52:A2:40:56:11:33:CC
Authority key identifier: 4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E
Certificate issuer: /CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
Certificate serial: 70A1E93DE0D6E1E9E54DE46E961A1916FDF03132
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft
Manifest number: 03DA
Signing time: Tue 07 Apr 2026 07:05:18 +0000
Manifest this update: Tue 07 Apr 2026 07:00:18 +0000
Manifest next update: Wed 08 Apr 2026 09:39:18 +0000
Files and hashes: 1: 4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl (hash: DeL+3nTE9pxbZOOSjPoFtcNPMdP7rfbqYazPk+hc1sw=)
2: 34352e3233352e3130342e302f32322d3234203d3e20323637343133.roa (hash: LRYt3DicoLC1lxdyYgYEQnNaZ7NEw/DjxkNKNIAY8Qo=)
3: 323830343a346431633a3a2f33322d3332203d3e20323637343133.roa (hash: 2tjrXJrJ+cpVMYLmvVCby0jWft7IHxoGNUgT84/1w74=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a1:e9:3d:e0:d6:e1:e9:e5:4d:e4:6e:96:1a:19:16:fd:f0:31:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
Validity
Not Before: Apr 7 07:00:18 2026 GMT
Not After : Apr 8 09:39:18 2026 GMT
Subject: CN=3D02F5190338ABFD5D64680DE952A240561133CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4f:f9:e2:cb:84:d6:30:08:28:d7:f7:80:d8:
d3:05:09:5f:d9:97:f7:84:01:1f:e2:22:53:b7:75:
3c:85:55:8a:a0:11:b6:ac:f9:7a:5d:59:34:ef:ef:
71:3f:d1:29:17:67:ff:49:e9:72:6e:46:aa:f8:d5:
15:08:24:66:8f:57:c1:3d:e7:a0:12:22:89:fb:82:
6b:4e:c8:77:a7:f8:5e:07:4d:62:b1:7d:1a:0f:1c:
59:02:f8:c4:7a:af:d6:19:7c:ee:f0:27:8b:f4:4a:
45:d1:5b:5b:5c:67:c4:a7:ef:3f:19:24:b7:87:57:
62:d2:be:bf:fc:3f:92:f5:89:80:91:8e:d8:dc:94:
c6:75:b5:2b:92:b1:82:c2:ea:c1:8b:29:d4:a4:b6:
45:f1:ff:7e:5a:94:a8:20:68:15:ca:66:26:87:f9:
5f:ad:0e:7f:76:a9:e8:06:52:25:c9:8f:b6:7d:ba:
2d:d2:c1:97:7d:32:d5:a2:7d:29:63:85:b1:12:a1:
e8:dd:f5:ee:bb:a2:58:36:55:ab:08:ff:0f:d2:9f:
53:df:57:76:9a:48:54:c9:ab:4e:aa:77:af:64:9d:
cb:51:81:b7:db:8b:8e:63:1f:33:ca:36:36:a2:19:
92:91:19:cf:97:8a:1b:1a:06:64:63:3f:85:5e:f6:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:F5:19:03:38:AB:FD:5D:64:68:0D:E9:52:A2:40:56:11:33:CC
X509v3 Authority Key Identifier:
keyid:4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b2:2b:56:21:2e:84:02:d1:d8:72:9e:06:f3:9d:55:7b:e0:
5e:57:bb:b0:fc:12:ce:33:82:8a:7c:ed:b7:a8:6d:18:22:20:
72:ed:8f:ca:ca:db:27:4c:76:9b:8c:59:89:72:c0:82:03:cd:
a4:0e:bf:b5:8e:77:6a:14:2d:51:d8:24:88:c7:db:d3:1c:53:
6a:be:b8:aa:ba:7d:c9:28:70:83:fb:67:21:62:97:6e:cf:0d:
71:bd:f5:99:28:f0:6f:bd:5a:f6:13:81:a1:57:7c:06:00:b1:
44:13:69:fd:fc:71:76:70:b1:c8:b4:fd:10:0a:e2:20:a0:23:
b6:6d:09:10:86:5d:28:8d:53:91:0e:ac:a0:29:69:20:9c:c9:
79:d4:7a:e8:f7:a6:38:1f:84:26:d5:9c:99:1c:81:fb:74:f4:
64:bd:26:31:c8:de:9c:4c:f7:f7:a1:36:07:15:f7:65:40:8e:
d2:37:f7:55:f2:0f:f1:f2:f6:c8:40:71:ea:38:f5:ad:3f:58:
1f:69:65:8b:62:c1:9e:2b:2e:99:00:8c:89:32:f8:96:91:61:
af:41:43:20:5f:8c:d9:68:84:0a:df:66:6e:81:69:db:7b:17:
b4:3d:a2:a4:24:1d:a9:39:fc:50:ad:46:d8:55:5c:5d:69:32:
b3:18:25:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcKHpPeDW4enlTeRulhoZFv3wMTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI1QkMzMzM4REMyQ0FCQjIxQTBBQTU1QTI5M0ZFNjJC
Rjc4MzgzRTAeFw0yNjA0MDcwNzAwMThaFw0yNjA0MDgwOTM5MThaMDMxMTAvBgNV
BAMTKDNEMDJGNTE5MDMzOEFCRkQ1RDY0NjgwREU5NTJBMjQwNTYxMTMzQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxT/niy4TWMAgo1/eA2NMFCV/Z
l/eEAR/iIlO3dTyFVYqgEbas+XpdWTTv73E/0SkXZ/9J6XJuRqr41RUIJGaPV8E9
56ASIon7gmtOyHen+F4HTWKxfRoPHFkC+MR6r9YZfO7wJ4v0SkXRW1tcZ8Sn7z8Z
JLeHV2LSvr/8P5L1iYCRjtjclMZ1tSuSsYLC6sGLKdSktkXx/35alKggaBXKZiaH
+V+tDn92qegGUiXJj7Z9ui3SwZd9MtWifSljhbESoejd9e67olg2VasI/w/Sn1Pf
V3aaSFTJq06qd69knctRgbfbi45jHzPKNjaiGZKRGc+XihsaBmRjP4Ve9g/dAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPQL1GQM4q/1dZGgN6VKiQFYRM8wwHwYDVR0j
BBgwFoAUS1vDM43CyrshoKpVopP+Yr94OD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTV4bUE1eUhLbllMYUFQOHBBWldLRXZncTI2Z1lOaDlZS1BWcExLUDFI
c0MvMS80QjVCQzMzMzhEQzJDQUJCMjFBMEFBNTVBMjkzRkU2MkJGNzgzODNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCNUJDMzMzOERDMkNBQkIy
MUEwQUE1NUEyOTNGRTYyQkY3ODM4M0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTV4bUE1eUhLbllMYUFQOHBBWldLRXZncTI2Z1lOaDlZS1BWcExLUDFIc0MvMS80
QjVCQzMzMzhEQzJDQUJCMjFBMEFBNTVBMjkzRkU2MkJGNzgzODNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD7IrViEuhALR2HKeBvOdVXvgXle7sPwSzjOCinztt6htGCIgcu2PysrbJ0x2
m4xZiXLAggPNpA6/tY53ahQtUdgkiMfb0xxTar64qrp9yShwg/tnIWKXbs8Ncb31
mSjwb71a9hOBoVd8BgCxRBNp/fxxdnCxyLT9EAriIKAjtm0JEIZdKI1TkQ6soClp
IJzJedR66PemOB+EJtWcmRyB+3T0ZL0mMcjenEz396E2BxX3ZUCO0jf3VfIP8fL2
yEBx6jj1rT9YH2lli2LBnisumQCMiTL4lpFhr0FDIF+M2WiECt9mboFp23sXtD2i
pCQdqTn8UK1G2FVcXWkysxglIQ==
-----END CERTIFICATE-----
Generated at Wed Apr 8 19:04:56 2026 by rpki-client