Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.mft
File: 9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.mft (raw, json)
Hash identifier: ouWs/gHg9rUZjU3mL3vCIbdoXXGSdiM4U7ZbezVEtSE=
Subject key identifier: 00:20:62:26:9C:E0:FB:A5:DA:1F:0F:A4:91:BA:0B:E6:16:4D:B0:0C
Authority key identifier: 9C:A6:ED:C8:32:1A:C3:02:75:A7:6E:D3:6F:F0:E5:A0:8A:25:50:2F
Certificate issuer: /CN=9CA6EDC8321AC30275A76ED36FF0E5A08A25502F
Certificate serial: 64D7DA2822827B711F7E81FB949138A593FA8469
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.mft
Manifest number: 6B
Signing time: Sat 01 Nov 2025 12:40:54 +0000
Manifest this update: Sat 01 Nov 2025 12:35:54 +0000
Manifest next update: Sun 02 Nov 2025 13:42:54 +0000
Files and hashes: 1: 323830343a383434633a3a2f33322d3438203d3e20323732323532.roa (hash: yG4oCmRZMjccnD2tG1OUkP6bxyFfPBb7C2wfnRo4OPg=)
2: 9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.crl (hash: d6+yWf5i1PmRIzIw+1ESGQRDGANc3qXT7ueOgXRAhNE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d7:da:28:22:82:7b:71:1f:7e:81:fb:94:91:38:a5:93:fa:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CA6EDC8321AC30275A76ED36FF0E5A08A25502F
Validity
Not Before: Nov 1 12:35:54 2025 GMT
Not After : Nov 2 13:42:54 2025 GMT
Subject: CN=002062269CE0FBA5DA1F0FA491BA0BE6164DB00C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:cf:38:88:70:52:f8:65:a5:94:5f:6b:bd:
37:02:16:c5:52:86:00:92:83:d6:e1:68:ee:1f:8c:
bb:91:2a:f6:41:a2:a9:e1:6d:87:56:63:28:0a:eb:
48:16:f4:a1:63:a9:a4:f2:5f:f9:d5:b1:a8:35:fe:
ad:8d:59:8b:51:92:e4:41:50:ea:37:25:1f:9a:e8:
09:2a:af:2e:d0:db:06:01:82:b2:3b:05:9c:b2:ea:
e5:b7:29:85:d3:ea:de:b0:f0:d8:70:26:79:39:6f:
dd:d0:1a:2f:26:4d:fd:ae:8a:b0:2a:33:cb:eb:0b:
49:dc:4b:70:86:4f:a7:97:9b:1c:dd:b2:53:2f:c8:
c3:40:04:22:7f:c0:6a:0d:d4:7d:d1:d8:29:5c:a6:
63:ff:3a:d0:1a:4d:06:76:a6:0d:90:75:d7:b4:70:
3e:a2:b5:1a:4d:ff:34:53:07:17:a1:d2:1a:63:26:
af:3b:a4:80:a5:18:f4:29:7b:50:3b:b9:73:d6:09:
47:86:d8:2a:e6:06:d1:ae:45:b6:10:1b:be:c7:15:
50:95:31:15:77:d7:4c:8b:bd:61:41:de:de:48:b3:
fa:eb:3b:22:0b:17:b0:ff:ea:6f:a4:82:b4:90:6d:
39:67:e7:23:e7:a3:c4:65:ec:29:3a:b4:3c:cd:f4:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:62:26:9C:E0:FB:A5:DA:1F:0F:A4:91:BA:0B:E6:16:4D:B0:0C
X509v3 Authority Key Identifier:
keyid:9C:A6:ED:C8:32:1A:C3:02:75:A7:6E:D3:6F:F0:E5:A0:8A:25:50:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:17:53:1d:0a:5a:bc:b1:d7:56:8e:71:2e:a6:1e:0d:cf:92:
f2:e7:9d:3b:8d:aa:7d:4b:65:f8:aa:12:42:96:a4:c6:39:f4:
cd:67:c9:ec:02:98:29:7b:8d:54:ed:c7:48:c0:93:5c:d3:27:
63:f2:eb:11:fc:b7:ea:24:2c:ca:f6:40:d7:13:a1:75:3c:0a:
20:51:f2:ff:08:34:42:cb:42:90:73:62:08:3f:d9:1f:af:ed:
33:e0:63:0a:fa:2f:a8:63:b3:75:16:fa:9d:4b:82:aa:d5:c7:
61:5f:f5:7c:d5:e1:e7:dc:64:4f:bf:a7:df:81:3c:bb:2b:2a:
42:96:59:e4:3c:c4:a2:39:c2:75:5c:c6:7d:36:cd:fb:18:6b:
af:73:b8:93:09:03:fd:37:54:82:1f:a6:06:da:56:67:4b:14:
b7:e3:84:74:5e:4d:3b:37:7d:99:d9:13:57:c2:56:3d:bc:8d:
3c:3d:0e:4b:bd:50:71:98:76:77:2b:f1:03:07:28:82:2b:08:
d7:11:0d:77:f9:ce:ac:a0:c0:9e:71:48:93:ed:1a:41:9b:bf:
a1:55:9e:af:f7:6c:33:f4:ae:07:f1:16:3e:5a:83:27:84:12:
89:50:c8:25:bb:4d:89:f2:0a:15:8c:15:c3:43:ab:c7:18:a0:
5a:e9:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:36:26 2025 by rpki-client