Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
File: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json)
Hash identifier: x/LMzoQZQ1M4ckxbd/PEbPkFdGaIhNQBwZi5MoH09ws=
Subject key identifier: C1:60:2E:4F:5B:09:CC:D9:C1:18:30:DC:3E:16:8B:5A:7A:EE:4D:4D
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Certificate issuer: /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial: 6D99EEC8230F061E2954FAAA4F5396CC0CBF2D5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
Manifest number: 03D2
Signing time: Tue 07 Apr 2026 10:45:24 +0000
Manifest this update: Tue 07 Apr 2026 10:40:24 +0000
Manifest next update: Wed 08 Apr 2026 11:21:24 +0000
Files and hashes: 1: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: 09XJptJe6BHMi3j7IBL3YmUoD58ZQ88kduDfU20p9EA=)
2: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: 6gpCSdjLQ7wjZtRORlH6qNiQgozBKjMkRDB69zKGyws=)
3: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: wlYX9LT4oAF2XaLjWHRwh1BF2XSf3RHpXlcHZvG8Qf8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:99:ee:c8:23:0f:06:1e:29:54:fa:aa:4f:53:96:cc:0c:bf:2d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Validity
Not Before: Apr 7 10:40:24 2026 GMT
Not After : Apr 8 11:21:24 2026 GMT
Subject: CN=C1602E4F5B09CCD9C11830DC3E168B5A7AEE4D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:d6:a4:7a:c0:87:0d:97:50:1f:d4:65:cf:
3d:b1:f9:a0:74:4e:a7:06:12:3c:ef:ed:46:7a:eb:
c6:f9:5d:cc:f5:40:76:16:44:23:08:cc:67:2d:9c:
4c:b4:d1:59:20:35:1d:45:31:f9:77:60:a5:e8:6f:
fe:54:0e:7f:7e:62:1d:8d:d2:ac:62:cc:b0:ae:51:
33:ff:4a:14:88:6a:a0:3f:77:11:c5:4b:b2:42:28:
03:5e:e6:e3:fb:22:3f:d9:41:4d:20:e0:2f:c5:58:
06:eb:f8:d4:d5:19:d3:46:3a:ae:89:5d:f3:e2:b3:
af:82:1b:d3:a8:64:ac:85:e8:8c:06:72:62:13:d0:
51:4e:88:b0:cf:72:69:42:6c:79:75:29:57:04:21:
c1:b3:b9:0d:d5:57:c5:c2:71:cc:ff:ba:ac:40:f7:
7f:1c:f8:45:8c:5b:fd:65:d7:5e:d2:0e:31:13:8c:
16:6e:b1:4d:bc:9b:e2:44:80:7f:34:d6:f1:3b:80:
68:93:44:a6:80:78:7e:ff:2f:b3:b0:7a:25:26:93:
ae:2b:cd:2a:5e:76:f0:a2:96:81:62:44:22:c5:be:
5e:0b:f7:2c:ac:5a:40:a8:16:09:1d:b8:82:79:38:
f2:c2:84:28:7f:ff:59:1f:ad:be:52:79:4b:eb:07:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:2E:4F:5B:09:CC:D9:C1:18:30:DC:3E:16:8B:5A:7A:EE:4D:4D
X509v3 Authority Key Identifier:
keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:17:d4:fb:10:86:d2:3d:c8:81:00:32:23:a0:51:f8:66:5f:
e3:3b:86:e7:70:08:83:16:88:e7:6e:22:ac:2d:42:d2:66:82:
17:86:9a:b7:47:21:14:c1:f5:c5:ed:70:32:43:3d:64:59:1c:
9b:cd:07:f4:d2:c0:eb:b3:4a:ef:1a:78:05:91:c9:6b:e9:35:
54:f7:f3:8e:c8:32:97:d9:3b:53:d8:51:55:37:b1:81:01:f2:
e5:2f:dc:55:a2:50:4a:6e:28:56:54:f0:bc:c5:d1:61:ed:bc:
8f:16:98:ff:67:d3:94:10:8c:34:07:9a:9b:00:84:ee:e5:d2:
2f:b8:8c:b4:87:a6:6a:c2:aa:e5:90:d9:be:b3:f8:f7:48:9e:
ac:0c:a1:e7:e5:0d:89:30:b5:81:07:d8:33:ed:d0:93:8d:9d:
75:2a:48:b4:48:fa:4b:c2:06:9c:90:91:8e:c2:49:7e:e5:92:
de:1a:7b:e3:77:cb:ad:2a:4b:4a:ca:27:ee:10:33:29:5d:7e:
cd:f1:ac:83:ce:99:89:e2:37:a9:60:2f:52:f2:91:95:44:40:
0a:20:a3:c3:e4:11:ed:b6:21:0b:5d:3f:84:3b:57:c3:08:ed:
4c:fc:b6:e2:54:b1:c7:62:ec:6c:88:9a:2d:a3:87:54:74:f1:
da:cd:4f:7f
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUbZnuyCMPBh4pVPqqT1OWzAy/LVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcy
RkYwRjYyOTAeFw0yNjA0MDcxMDQwMjRaFw0yNjA0MDgxMTIxMjRaMDMxMTAvBgNV
BAMTKEMxNjAyRTRGNUIwOUNDRDlDMTE4MzBEQzNFMTY4QjVBN0FFRTRENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC929akesCHDZdQH9Rlzz2x+aB0
TqcGEjzv7UZ668b5Xcz1QHYWRCMIzGctnEy00VkgNR1FMfl3YKXob/5UDn9+Yh2N
0qxizLCuUTP/ShSIaqA/dxHFS7JCKANe5uP7Ij/ZQU0g4C/FWAbr+NTVGdNGOq6J
XfPis6+CG9OoZKyF6IwGcmIT0FFOiLDPcmlCbHl1KVcEIcGzuQ3VV8XCccz/uqxA
938c+EWMW/1l117SDjETjBZusU28m+JEgH801vE7gGiTRKaAeH7/L7OweiUmk64r
zSpedvCiloFiRCLFvl4L9yysWkCoFgkduIJ5OPLChCh//1kfrb5SeUvrB6w/AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUwWAuT1sJzNnBGDDcPhaLWnruTU0wHwYDVR0j
BBgwFoAUiQrVhMg9RP+y3/+VXRvRxy/w9ikwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0NhdEtEUDJNYVBV
LzEvODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcyRkYwRjYyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTBBRDU4NEM4M0Q0NEZGQjJE
RkZGOTU1RDFCRDFDNzJGRjBGNjI5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1lE
enp6VVc2OUZuZTJSR1p6Ym1YWkpwbUdqOXdDZGpHQ2F0S0RQMk1hUFUvMS84OTBB
RDU4NEM4M0Q0NEZGQjJERkZGOTU1RDFCRDFDNzJGRjBGNjI5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
KxfU+xCG0j3IgQAyI6BR+GZf4zuG53AIgxaI524irC1C0maCF4aat0chFMH1xe1w
MkM9ZFkcm80H9NLA67NK7xp4BZHJa+k1VPfzjsgyl9k7U9hRVTexgQHy5S/cVaJQ
Sm4oVlTwvMXRYe28jxaY/2fTlBCMNAeamwCE7uXSL7iMtIemasKq5ZDZvrP490ie
rAyh5+UNiTC1gQfYM+3Qk42ddSpItEj6S8IGnJCRjsJJfuWS3hp743fLrSpLSson
7hAzKV1+zfGsg86ZieI3qWAvUvKRlURACiCjw+QR7bYhC10/hDtXwwjtTPy24lSx
x2LsbIiaLaOHVHTx2s1Pfw==
-----END CERTIFICATE-----
Generated at Wed Apr 8 20:21:40 2026 by rpki-client