Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
File: D27F46706288934EA75FEFCBDB933497E0E92077.mft (raw, json)
Hash identifier: SCNo1kCkMRvrKnuo+WUX3HlFv115XTuEdSYHfxyR81Q=
Subject key identifier: 94:73:2A:95:E2:C5:E5:05:CD:9A:17:6A:C9:B3:C0:18:C1:17:85:B8
Authority key identifier: D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77
Certificate issuer: /CN=D27F46706288934EA75FEFCBDB933497E0E92077
Certificate serial: 2CBFEC7C13D124843FA95020F6151B2872E6FC69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
Manifest number: 03D3
Signing time: Tue 07 Apr 2026 09:10:18 +0000
Manifest this update: Tue 07 Apr 2026 09:05:18 +0000
Manifest next update: Wed 08 Apr 2026 11:08:18 +0000
Files and hashes: 1: 323830343a343133343a383033303a3a2f34342d3434203d3e20323636303130.roa (hash: 2pxEU75duhNAWIqEmuWaO+yhf8KHIV5cgXj4wbZ5FJk=)
2: D27F46706288934EA75FEFCBDB933497E0E92077.crl (hash: JfYA+odX4X2SiQqZuzyPTi9fWNFB7wNzxAepze/2ciQ=)
3: 323830343a343133343a383031303a3a2f34342d3434203d3e20323636303130.roa (hash: YdWUvvxWDsaoDIQ14NU4wS6j/OAGJz9ksxPrmyLs7UQ=)
4: 3138312e3139312e3131322e302f32322d3234203d3e20323636303130.roa (hash: bw1lcTX85wDUcUgNY48u1xEsYJt72cubg7EHZa5F7ro=)
5: 323830343a343133343a383032303a3a2f34342d3434203d3e20323636303130.roa (hash: cg1jl41BpyWpdDhJpE2N8Rxwe8o4kLVbfNXZvOkUWuc=)
6: 323830343a343133343a3a2f33322d3332203d3e20323636303130.roa (hash: xQFs0VD4KFGXPzA/wISbCLnAM/sEAG8Fy3fYaEBznbQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:bf:ec:7c:13:d1:24:84:3f:a9:50:20:f6:15:1b:28:72:e6:fc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D27F46706288934EA75FEFCBDB933497E0E92077
Validity
Not Before: Apr 7 09:05:18 2026 GMT
Not After : Apr 8 11:08:18 2026 GMT
Subject: CN=94732A95E2C5E505CD9A176AC9B3C018C11785B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:13:c3:9b:59:9b:70:d2:88:92:33:99:24:
62:88:6a:c4:bd:6c:46:65:d6:63:52:92:c2:c8:b6:
27:af:e7:4a:ce:25:34:7e:19:89:40:ce:41:4c:e2:
0b:e9:2c:f2:97:21:d1:72:eb:56:cb:4d:5a:8b:3b:
0f:ba:8f:91:95:aa:a3:57:75:cc:21:c7:8b:d7:47:
ff:22:7b:44:15:cc:2d:89:1e:5b:7a:4a:89:22:46:
6e:d3:74:d0:c4:35:16:a3:2c:df:01:27:ba:1b:77:
89:9a:90:40:08:7f:cc:8f:a8:a2:ca:c9:85:0c:8d:
cb:a7:70:6b:2c:49:f5:05:a5:b5:29:5d:ab:07:d6:
76:7a:47:eb:ec:df:ba:8b:87:a9:83:18:f6:29:e1:
41:fb:21:61:ae:d8:70:d7:fa:6a:31:70:15:4a:9f:
21:98:f9:76:96:29:8a:53:5c:a6:3e:dd:1c:7e:1a:
bc:77:9d:b7:02:d5:5e:7b:70:f6:0e:51:94:ef:f3:
65:c3:58:b0:d1:e8:7b:37:97:4b:40:b5:e4:bc:ee:
d0:3b:80:de:ab:57:8e:de:75:bb:05:95:d8:89:6d:
6f:91:d1:64:55:06:76:03:5a:33:a1:b3:25:cf:f1:
21:2b:e8:07:be:85:aa:7c:f1:7a:1d:7c:84:ec:4d:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:73:2A:95:E2:C5:E5:05:CD:9A:17:6A:C9:B3:C0:18:C1:17:85:B8
X509v3 Authority Key Identifier:
keyid:D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:00:05:7e:38:9d:dd:15:9f:78:b4:33:b6:a4:eb:ff:73:90:
bf:9a:ed:80:08:a4:8d:4c:cd:83:d5:b9:3c:18:5c:a4:df:f9:
10:96:b4:a7:47:c4:7e:e4:b0:c9:22:c5:b7:fc:61:be:46:d6:
b8:92:ec:bd:c0:77:de:98:98:1d:38:dc:76:9d:7c:7d:25:e1:
88:eb:51:17:4e:84:7a:38:58:4c:34:59:69:7b:46:f9:43:a4:
cf:9a:98:2f:ca:7a:da:31:be:d5:95:ba:ad:5c:f5:5c:b9:f0:
53:65:54:4d:6b:1d:cc:ac:36:41:e1:87:50:06:cb:db:24:3e:
22:fd:43:39:89:b1:26:8c:10:c0:1c:a9:a4:8a:fa:6f:3f:eb:
c5:b3:7f:df:19:e5:b3:c7:73:ec:63:71:20:5a:10:58:de:f4:
65:01:8a:f4:d6:ad:69:c6:e8:31:69:8a:1d:0a:e1:33:1a:e8:
89:26:1e:1e:ae:ad:06:23:ce:91:52:78:d8:1d:e9:b8:c8:ce:
8c:c8:a5:93:e7:a3:14:3f:60:aa:c9:35:67:12:da:03:05:05:
be:64:e2:ab:9c:ec:16:78:6d:43:96:51:16:43:27:5b:db:51:
3c:0e:e7:9c:32:d3:b7:f4:64:cc:39:a0:67:e8:7c:6d:86:77:
58:13:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:04:23 2026 by rpki-client