Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.mft
File: 2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.mft (raw, json)
Hash identifier: sCiq7QQxEdKM/K5DBiIYcxW6i9i62dUhC42456vRN5k=
Subject key identifier: 23:A3:48:1A:41:42:B8:AC:F1:2F:A1:76:88:C4:C3:1E:94:4F:EA:E3
Authority key identifier: 2A:72:36:C5:E8:90:B7:B0:7F:86:E5:EC:AA:9A:69:F1:2B:AE:D2:85
Certificate issuer: /CN=2A7236C5E890B7B07F86E5ECAA9A69F12BAED285
Certificate serial: 159037C63AF8B92FADB71B9423BB0015235F89EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.mft
Manifest number: 8A
Signing time: Thu 24 Jul 2025 02:40:39 +0000
Manifest this update: Thu 24 Jul 2025 02:35:39 +0000
Manifest next update: Fri 25 Jul 2025 04:17:39 +0000
Files and hashes: 1: 2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.crl (hash: oj3b2Q5JrxU/qMlTcD8CdJjccCbkAy2OdiNy4ylLz4g=)
2: 3134332e3230322e302e302f32322d3332203d3e20323634303635.roa (hash: eRO63zfW4SbVUGZ0oLdUW5Hv9mm+zzWqR1iypTDuKn4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:90:37:c6:3a:f8:b9:2f:ad:b7:1b:94:23:bb:00:15:23:5f:89:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A7236C5E890B7B07F86E5ECAA9A69F12BAED285
Validity
Not Before: Jul 24 02:35:39 2025 GMT
Not After : Jul 25 04:17:39 2025 GMT
Subject: CN=23A3481A4142B8ACF12FA17688C4C31E944FEAE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:d9:14:0c:43:29:68:a0:0f:06:22:c5:ac:
19:c2:5e:b3:70:eb:f3:3c:dc:b2:df:eb:6f:d2:62:
c3:be:bd:9e:1a:38:b7:c7:cc:a6:72:93:7a:ce:e8:
1c:4b:bc:4e:51:e5:d1:ba:6b:5a:e8:9e:02:74:d7:
e6:9b:b2:0a:19:1f:c7:1b:52:64:21:53:a0:e1:03:
26:29:bb:b0:d1:88:ca:a6:9c:a3:37:68:1e:12:7b:
18:1b:19:67:e9:2d:c3:11:b6:4a:28:a2:98:41:65:
8a:ad:22:3f:b9:27:fe:78:a3:c3:de:51:83:ce:a0:
3a:87:45:3f:44:a3:92:d1:29:0b:1c:29:00:21:a3:
d2:5b:5a:c6:b8:40:4b:cf:7c:f4:9d:36:ea:f3:cb:
78:32:6b:81:b3:38:59:3f:42:97:ac:c4:b2:3f:e4:
03:ff:b4:05:32:9b:95:ce:95:9e:6c:0d:55:5e:b8:
24:84:2e:e3:4c:60:c5:f2:6f:d6:25:1e:45:91:56:
ac:e5:59:c3:73:98:c4:2d:20:94:01:1d:3b:6a:56:
e3:1d:cc:9e:3e:f5:b6:6f:3b:db:72:37:5a:a2:9a:
c3:96:e8:62:90:90:7d:29:aa:4c:60:97:f2:70:b0:
8b:6a:31:3f:15:7b:ed:fc:bf:10:ed:52:1e:91:3f:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A3:48:1A:41:42:B8:AC:F1:2F:A1:76:88:C4:C3:1E:94:4F:EA:E3
X509v3 Authority Key Identifier:
keyid:2A:72:36:C5:E8:90:B7:B0:7F:86:E5:EC:AA:9A:69:F1:2B:AE:D2:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:c3:42:2f:d5:e4:e7:4b:8e:8e:24:02:17:dd:18:76:83:
6a:e5:71:b8:78:e6:c9:93:d8:82:b6:c9:4c:31:47:ae:53:57:
53:17:a3:52:8c:6f:ff:cc:d5:e2:10:20:3d:40:06:fe:d0:94:
26:d9:58:cb:8d:ae:1e:2f:87:3b:28:b0:96:cc:5b:25:c7:c8:
d0:59:58:d9:df:48:59:e3:de:77:b4:8c:5a:47:df:2f:76:dd:
ff:6f:b2:00:1f:b3:b1:93:b3:3f:f5:c0:c1:13:9b:5b:71:a6:
23:15:1f:21:57:6f:e1:20:c6:f6:4b:e0:49:d2:fe:4a:38:69:
56:d3:a3:41:c0:3b:2d:af:d1:c4:2f:52:7e:f0:1a:76:a8:fb:
19:59:a1:78:5f:de:a3:06:b3:f0:4b:1d:19:ff:5b:11:de:52:
cc:5c:3b:15:f0:57:a1:96:69:c0:e5:d3:87:e7:6e:46:34:c8:
01:8b:23:de:2b:78:d2:29:ae:55:19:7f:af:87:2f:57:e8:a0:
42:ae:7f:89:0c:41:3e:d4:9b:86:c6:c8:a3:89:ea:78:2f:a0:
d4:33:96:12:ff:be:53:1d:0e:9b:af:79:f1:41:0d:b5:94:1c:
22:1b:b2:99:ff:64:a9:8d:87:55:28:ea:4b:25:28:77:39:d9:
e4:03:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:51:58 2025 by rpki-client