Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/C96F475755CA37BC1D53AFDCE8B451F444F7129F.mft
File: C96F475755CA37BC1D53AFDCE8B451F444F7129F.mft (raw, json)
Hash identifier: qrVnX385eoVe3R9/Vw2Ovwa6Uh3XbyZXcRJP+eqyErc=
Subject key identifier: C9:A6:06:83:70:D8:B6:45:55:CB:2C:DB:62:A4:1D:CB:30:B0:ED:8B
Authority key identifier: C9:6F:47:57:55:CA:37:BC:1D:53:AF:DC:E8:B4:51:F4:44:F7:12:9F
Certificate issuer: /CN=C96F475755CA37BC1D53AFDCE8B451F444F7129F
Certificate serial: 09AEC0EE956C9EE8AB46852E0ACC1203C4E3216A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F475755CA37BC1D53AFDCE8B451F444F7129F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/C96F475755CA37BC1D53AFDCE8B451F444F7129F.mft
Manifest number: 10
Signing time: Mon 30 Jun 2025 08:22:17 +0000
Manifest this update: Mon 30 Jun 2025 08:17:17 +0000
Manifest next update: Tue 01 Jul 2025 12:00:17 +0000
Files and hashes: 1: 3133382e3230342e32302e302f32322d3332203d3e20323633383738.roa (hash: PTYAF47n82UjzE1q2h2GEkc5SPozudG3WpptD/wa7lw=)
2: 323830343a323732303a3a2f33322d313238203d3e20323633383738.roa (hash: Qn/4YM2oacFJYzNiNXULrs4VWtW1Mr5ADuTjv3n/1po=)
3: C96F475755CA37BC1D53AFDCE8B451F444F7129F.crl (hash: g3j8aVsbyvWqG5zhMYSRKfgTYjRkf+6ZtlCeVqXlIB4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ae:c0:ee:95:6c:9e:e8:ab:46:85:2e:0a:cc:12:03:c4:e3:21:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C96F475755CA37BC1D53AFDCE8B451F444F7129F
Validity
Not Before: Jun 30 08:17:17 2025 GMT
Not After : Jul 1 12:00:17 2025 GMT
Subject: CN=C9A6068370D8B64555CB2CDB62A41DCB30B0ED8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:27:5c:88:af:99:06:50:a7:e0:18:24:e3:
8f:7e:e8:11:fc:fd:5d:41:b0:31:21:3a:85:04:62:
68:eb:64:e5:f2:a5:26:09:c5:18:6c:ac:91:bc:72:
fb:b7:ae:5a:d8:f4:f2:c2:b9:25:78:c9:3a:f6:28:
a5:eb:d0:a4:24:e3:f6:c6:4b:33:3a:6a:7f:3c:b0:
d6:df:dc:3a:c8:9e:94:df:52:d1:60:8e:0b:8d:9e:
06:9b:be:70:ef:cf:79:50:85:c8:17:45:7b:f0:38:
14:63:3e:27:b6:ee:84:e3:78:21:04:73:db:28:5a:
f2:3f:78:d0:1a:e4:fb:e9:76:3e:05:f2:47:78:44:
7f:30:1d:dc:07:7b:e7:77:57:d9:2b:83:c8:46:31:
b7:e1:0e:2b:56:16:db:41:32:dd:c9:ee:f7:82:8c:
5d:32:be:9e:55:85:48:a6:e1:18:b7:c7:42:63:ac:
f7:ab:1c:4d:ad:a7:4a:7b:de:ca:84:91:e5:97:16:
c2:5c:7f:82:a5:2d:b3:be:9e:4e:74:df:9c:d0:05:
3b:3d:76:ea:fa:0f:f8:39:ac:a2:89:2d:e0:84:5c:
5e:09:78:e6:d0:76:a1:ab:e4:3c:bf:2f:06:ec:71:
84:c4:76:3b:ee:34:10:0b:b2:6d:ab:b1:e0:f3:d0:
bc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:06:83:70:D8:B6:45:55:CB:2C:DB:62:A4:1D:CB:30:B0:ED:8B
X509v3 Authority Key Identifier:
keyid:C9:6F:47:57:55:CA:37:BC:1D:53:AF:DC:E8:B4:51:F4:44:F7:12:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/C96F475755CA37BC1D53AFDCE8B451F444F7129F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F475755CA37BC1D53AFDCE8B451F444F7129F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/C96F475755CA37BC1D53AFDCE8B451F444F7129F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:76:6c:1b:95:b8:9d:41:db:4d:7d:84:30:3d:c4:db:e8:
41:84:fd:e8:c6:16:c7:cb:fb:17:41:d9:76:a0:d7:4d:a0:96:
bc:41:1e:da:19:91:bd:6d:b1:ee:40:22:9e:fc:5a:a6:df:8c:
74:ad:2d:47:4f:fd:9d:95:f1:28:d9:d8:c8:33:fa:6c:a3:d1:
ba:88:75:7b:7d:94:26:2d:51:85:a8:db:a5:51:23:f2:e9:c2:
9f:5e:9c:d7:84:21:fe:15:6a:c7:86:37:22:5a:ec:76:e3:ad:
ad:72:49:ad:1c:05:92:bf:b7:7f:f0:b7:68:b5:58:b6:bf:ac:
74:bb:39:46:97:3b:d8:be:08:62:cf:a5:ad:d0:02:50:df:89:
c0:fd:ac:48:0a:c6:3f:65:bc:b5:15:0f:01:3a:ac:d7:1f:36:
c0:ab:a0:de:96:a1:ac:b7:69:6a:dd:2d:29:47:a5:31:57:ef:
28:79:f9:af:88:77:0b:99:1e:51:11:a5:cf:74:a6:ea:da:d3:
08:ce:eb:25:36:ef:4a:74:f1:42:47:3b:de:89:5d:88:a7:d5:
95:23:56:36:1a:9b:3c:6f:ba:57:47:0d:e4:e5:db:76:24:2d:
b7:1f:4d:f6:4b:2c:75:2c:40:96:f1:0e:e7:30:a0:d0:d3:30:
ea:f1:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:49:13 2025 by rpki-client