Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/1/7144A25056381147DFC3DCDC6541F98F698E0817.mft
File: 7144A25056381147DFC3DCDC6541F98F698E0817.mft (raw, json)
Hash identifier: hVd0sa8+1DBZDrUYO4AA40kbXZES3EQwjnNYvXrKR5o=
Subject key identifier: 1D:FA:A4:5B:65:80:D9:81:56:CE:24:65:B9:7D:8E:36:A1:D7:60:0B
Authority key identifier: 71:44:A2:50:56:38:11:47:DF:C3:DC:DC:65:41:F9:8F:69:8E:08:17
Certificate issuer: /CN=7144A25056381147DFC3DCDC6541F98F698E0817
Certificate serial: 726FA97C5DBF10D074D275F56CB273E73FE1D129
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7144A25056381147DFC3DCDC6541F98F698E0817.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/1/7144A25056381147DFC3DCDC6541F98F698E0817.mft
Manifest number: 029F
Signing time: Tue 19 Aug 2025 00:49:47 +0000
Manifest this update: Tue 19 Aug 2025 00:44:47 +0000
Manifest next update: Wed 20 Aug 2025 03:28:47 +0000
Files and hashes: 1: 3137372e31302e3132382e302f32322d3234203d3e20323632373339.roa (hash: rCa4sWlB6Czj3BlGefz++e3UX7aoi6tdYGunPOcGlRY=)
2: 7144A25056381147DFC3DCDC6541F98F698E0817.crl (hash: 4nYeG4q+5jzVNqShyJcTeZpexZpm4WCCDyCvT2Didx0=)
3: 323830343a3563633a3a2f33322d3438203d3e20323632373339.roa (hash: dv5gqYdUo7GMDDAKozQkm5RZinzQnjYros4GylYj8U8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6f:a9:7c:5d:bf:10:d0:74:d2:75:f5:6c:b2:73:e7:3f:e1:d1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7144A25056381147DFC3DCDC6541F98F698E0817
Validity
Not Before: Aug 19 00:44:47 2025 GMT
Not After : Aug 20 03:28:47 2025 GMT
Subject: CN=1DFAA45B6580D98156CE2465B97D8E36A1D7600B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:fd:d7:03:95:bc:33:38:f2:5b:fb:bb:a1:
6a:a0:36:e8:d8:a1:0e:2c:73:14:b8:c3:87:65:77:
61:81:e6:59:8c:19:92:48:4e:20:df:72:bb:4d:3c:
1b:15:d0:bb:38:29:63:3e:5b:41:8d:14:f4:87:1b:
73:29:c2:6c:33:b7:44:1a:e4:84:2a:59:bc:c8:44:
a9:a8:b7:05:3c:c5:c0:50:de:41:c7:7f:e6:c3:10:
a1:89:96:f0:bd:3c:8b:67:a1:08:6a:3a:ce:38:50:
e7:99:47:49:f9:a9:af:d4:ef:82:c4:5d:ac:30:1c:
14:8b:b1:42:15:25:c3:7e:2b:df:6d:65:1a:00:98:
6c:93:3e:21:fd:d3:b4:e8:22:4e:56:e5:81:df:d4:
e2:fe:db:78:45:05:e3:dc:7b:44:e9:f1:1d:86:d1:
db:89:31:7a:c3:0a:36:35:f0:f6:ee:d3:b4:a6:da:
3b:94:8f:4b:33:6d:9e:cc:1d:26:cd:06:76:75:fa:
bc:b3:9c:58:a6:ba:9c:c3:39:44:64:52:0e:92:96:
53:fd:cc:7c:a9:06:c0:72:dc:87:77:bb:51:0a:af:
22:ca:d8:c6:87:59:65:32:fa:7b:6b:68:32:c9:9c:
04:6b:25:a7:4f:be:b7:27:ca:23:a4:b3:1e:96:dc:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FA:A4:5B:65:80:D9:81:56:CE:24:65:B9:7D:8E:36:A1:D7:60:0B
X509v3 Authority Key Identifier:
keyid:71:44:A2:50:56:38:11:47:DF:C3:DC:DC:65:41:F9:8F:69:8E:08:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/1/7144A25056381147DFC3DCDC6541F98F698E0817.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7144A25056381147DFC3DCDC6541F98F698E0817.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/1/7144A25056381147DFC3DCDC6541F98F698E0817.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:67:9f:f0:47:a1:5e:11:f1:17:dd:45:34:52:ab:9f:8e:f0:
46:da:45:42:ba:8d:89:76:58:89:be:f3:20:70:b6:1d:f5:c0:
13:93:93:6f:25:f5:0e:38:e7:5f:fe:02:4b:5b:bf:a7:af:e2:
69:58:bc:64:78:d1:89:40:1c:62:fe:3b:47:28:06:d0:19:e3:
2c:b2:b8:fb:39:0a:dd:36:27:17:cc:49:d4:dc:6d:3f:96:f3:
17:18:eb:82:ef:41:30:9e:64:7c:65:11:10:c4:96:26:f6:00:
e9:6f:76:83:fe:5f:f2:33:83:4d:45:d8:3a:85:6d:94:84:e9:
ee:d7:81:00:69:49:91:0a:08:1d:99:4a:90:d6:14:6e:e2:19:
80:ac:43:06:60:97:4e:e0:9c:28:be:d1:f8:48:90:dc:7a:8f:
9d:23:64:2b:98:23:4c:f3:8d:9a:08:96:e4:d5:b9:4e:92:a0:
a9:f8:6c:77:27:c9:05:6a:b1:4b:78:8c:06:18:d9:11:c9:d5:
14:75:b4:9d:5f:6a:92:cb:ec:ad:09:85:d4:7a:ad:cd:45:65:
d2:0f:0b:b5:ae:25:13:23:b3:4a:0e:24:b2:bd:4c:a8:83:f0:
32:8b:d6:75:3b:17:1f:fb:7c:0e:0b:11:2b:4f:8e:4f:5d:5d:
ad:49:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:24:22 2025 by rpki-client