Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
File: BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json)
Hash identifier: rSPvKW3WOTuAL2gs8t5DDnEOXckIkOukZt+/+4zFrZk=
Subject key identifier: 27:38:0F:0F:94:50:7F:3F:12:2C:0F:47:53:6F:8A:5F:F7:5B:48:31
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Certificate issuer: /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial: 13A31460B130E4966459B8009EAD3DB6D616298E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
Manifest number: 03DA
Signing time: Tue 07 Apr 2026 07:40:18 +0000
Manifest this update: Tue 07 Apr 2026 07:35:18 +0000
Manifest next update: Wed 08 Apr 2026 10:07:18 +0000
Files and hashes: 1: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (hash: Rvo51TuPLd1M8Qn3gxgvH5b8+pcMostBoJ2Bw5X49aQ=)
2: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: Jvk4BhtkTqCaEGOfHpRXl47mcoGZIB2qsIvobQVyGEY=)
3: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: BRDX2bcHpAwtqDa7mj74P+hWC5po7P4vzhu+qudBurg=)
4: 323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (hash: EXKoERunxHBjD0wM17VenuhxYo/CI6MX+lv8XDiQ0Z0=)
5: 34352e3138372e3136382e302f32342d3234203d3e20323639343733.roa (hash: Aa284McDfTPmjic3mysbGGpbN5J63jS24v2FD6iYht0=)
6: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (hash: KrbejnEAB1jYoyxgNuPx+4IjNgbAPuqfamW0X1CVqgY=)
7: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: Cl7g+L9W1yndOCJQu3aDjo4mJ9zAxRG6jj4vII7dy3w=)
8: 34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (hash: TxOIhbwzlN7I7q94EScK4FFwq4vxuPW0ymjAuYngXN8=)
9: 323830343a363532633a343030303a3a2f33342d3334203d3e20323639343733.roa (hash: QYuarhhb51IIJNcMd8PqyCgbNMJp1l2Brpl4eGszn1Q=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a3:14:60:b1:30:e4:96:64:59:b8:00:9e:ad:3d:b6:d6:16:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Validity
Not Before: Apr 7 07:35:18 2026 GMT
Not After : Apr 8 10:07:18 2026 GMT
Subject: CN=27380F0F94507F3F122C0F47536F8A5FF75B4831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:a4:c0:0d:3f:47:c8:4d:35:b0:c5:c0:f2:
28:1a:82:e3:15:23:c6:bd:39:89:20:78:58:35:ff:
1f:2d:83:08:a2:59:ce:6e:6d:ce:08:e3:bf:d9:4a:
68:59:49:af:f8:8b:0f:54:6e:81:91:f5:ff:00:3e:
f8:4d:70:0e:13:27:51:3c:6c:2f:a5:1a:0b:8d:31:
5f:d9:e5:bd:c9:58:9f:9e:c2:ec:99:fa:aa:0c:6a:
e9:06:ed:08:71:9d:5e:66:5e:92:c1:61:18:66:cc:
24:16:6c:76:9b:33:f3:61:95:3f:be:16:2c:75:d6:
07:04:a2:27:e8:b8:dd:1b:2b:ec:89:e2:cf:c8:2b:
8c:8a:97:56:31:57:32:50:c2:3c:b8:38:9b:0a:53:
dd:e1:f4:91:a9:7d:25:3b:ff:9c:c1:38:6e:cb:87:
19:20:02:7d:27:21:50:ed:4f:d0:51:a1:8a:dd:65:
fc:f1:c6:d3:27:a7:91:ba:09:0d:10:59:f8:ba:87:
7d:aa:87:19:71:21:c1:2f:fd:7f:fc:c2:65:ab:3d:
1b:f2:76:1a:02:bf:b2:d4:6f:e5:91:36:7d:47:b2:
99:9b:32:4d:7b:e9:6f:8a:bf:0a:a8:e7:b7:5b:49:
a1:14:64:a0:e8:69:58:d3:bd:ff:7a:ec:b8:7a:6e:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:38:0F:0F:94:50:7F:3F:12:2C:0F:47:53:6F:8A:5F:F7:5B:48:31
X509v3 Authority Key Identifier:
keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8e:4d:06:7b:92:57:f7:9f:08:d5:d0:cd:c3:ea:a6:2c:74:
28:50:80:d8:e0:25:60:c6:10:6e:0d:df:3e:6f:2f:d0:42:10:
47:43:17:28:49:bf:8d:14:ef:e5:38:19:fa:e0:10:87:ef:b6:
4a:8c:3f:08:bc:e1:ac:dc:d3:b0:67:c7:2c:e3:47:2a:2c:b6:
d6:36:61:e9:88:20:e7:4c:81:73:e2:7b:f6:63:93:b0:f5:c5:
f6:ff:86:f5:06:45:29:da:c5:58:a2:fc:00:58:b3:0f:99:62:
8d:ba:c7:2f:0c:37:f8:74:ec:04:70:c6:e1:da:a2:75:e8:88:
6a:52:76:bc:4a:c5:66:1e:dc:a5:a5:f9:ef:e0:63:12:21:05:
6b:65:09:79:dd:c7:a3:cb:44:49:16:e0:78:e4:6b:b3:5a:28:
4a:13:00:9e:1a:7e:1d:57:66:53:af:00:d1:4e:ea:e9:af:aa:
fc:01:99:f3:79:b4:18:e7:b1:2b:3a:0b:06:3e:f4:bc:ba:c7:
e0:64:94:65:77:98:0f:5a:1c:42:3e:02:2d:eb:93:a8:f7:6b:
0b:f6:93:ad:87:31:e3:4a:71:34:90:a3:57:74:d9:67:02:3f:
56:53:58:13:57:b0:63:77:d9:ef:24:ed:af:2f:cf:c8:b1:a1:
34:12:05:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:16:58 2026 by rpki-client