
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft
File: 684027F204382A1BC3E39E8891804EBB07906C89.mft (raw, json)
Hash identifier: HTAAV/oRn4g4hwWreP912NxypM6nT8zQoxwamYx/H60=
Subject key identifier: 39:14:EC:A7:6E:70:FC:1A:B2:13:7F:01:C0:26:41:0B:3D:CA:74:80
Authority key identifier: 68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89
Certificate issuer: /CN=684027F204382A1BC3E39E8891804EBB07906C89
Certificate serial: 7E2BB37264114BB3A0F888C9DD436DB1F2DC2370
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft
Manifest number: 02A1
Signing time: Tue 19 Aug 2025 11:22:26 +0000
Manifest this update: Tue 19 Aug 2025 11:17:26 +0000
Manifest next update: Wed 20 Aug 2025 13:30:26 +0000
Files and hashes: 1: 323830343a316338383a3a2f33322d3438203d3e203631363630.roa (hash: MvNPDvg0woR5lDZdBX/lK4ar4Gu89zfPe2BonQZJePQ=)
2: 3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa (hash: 6YsXPpgLqbq344UXVGiq4LR05vluWKsQGp3V/suUdvU=)
3: 684027F204382A1BC3E39E8891804EBB07906C89.crl (hash: +Tq0dmjHCCBS0a3XncD341MnH2qfBLZXW1JU3tFkMNc=)
4: 3133312e3130382e34342e302f32322d3234203d3e203631363630.roa (hash: XEQZpmAzMMqorDI3DWFDpfVoTNRRMat6uA9b3KZO36M=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2b:b3:72:64:11:4b:b3:a0:f8:88:c9:dd:43:6d:b1:f2:dc:23:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684027F204382A1BC3E39E8891804EBB07906C89
Validity
Not Before: Aug 19 11:17:26 2025 GMT
Not After : Aug 20 13:30:26 2025 GMT
Subject: CN=3914ECA76E70FC1AB2137F01C026410B3DCA7480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:db:e2:63:fe:45:f6:62:14:ab:bb:5b:c1:
ab:b9:e3:28:8e:42:d3:cb:6a:47:f3:7b:ea:67:7c:
5b:71:72:18:23:25:fb:34:94:cc:2e:9c:36:d9:31:
94:33:66:d7:fd:1b:e9:0c:6b:84:8a:e7:c9:e3:96:
91:4e:c0:d3:76:0e:67:87:11:93:58:f1:b4:16:6e:
38:4c:23:94:4c:74:f5:a9:ab:f0:c1:4d:9a:a1:73:
e9:33:de:45:cc:c6:4e:4c:28:37:41:e0:7d:96:60:
61:b0:70:1d:ad:2b:e4:4a:9e:48:c5:b3:1d:36:01:
60:fe:ab:82:6d:cc:64:f4:fb:64:91:84:dc:2d:e6:
8d:ff:c7:46:8a:40:50:49:2e:9f:c3:dd:09:38:c7:
98:b7:06:08:e1:34:8d:43:49:64:e3:cb:c5:66:4a:
90:e6:f6:43:d4:d8:e2:c8:9e:6f:b2:8a:82:5b:09:
a5:69:59:e0:90:c4:e5:b1:08:d0:c6:15:24:59:94:
54:de:73:a8:7e:c7:d8:4e:14:c9:1b:8d:b3:89:1d:
48:d6:b1:ed:7d:64:81:02:e0:ff:4c:89:08:2c:cd:
bf:0f:73:d8:3d:db:b8:f0:75:67:cb:7b:12:ed:f4:
5e:53:1b:50:e8:ad:0b:f2:4c:e6:0e:f4:3b:df:7a:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:EC:A7:6E:70:FC:1A:B2:13:7F:01:C0:26:41:0B:3D:CA:74:80
X509v3 Authority Key Identifier:
keyid:68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:72:17:f3:8d:70:ef:a1:a9:2e:a0:c6:b7:4b:92:5d:12:1a:
46:bb:71:c3:22:35:3d:a9:13:d0:fd:82:1a:4a:83:14:42:a2:
77:e0:ac:00:c4:a6:89:90:b7:8e:2c:43:17:f5:32:02:0b:ee:
84:9e:92:b2:84:dd:71:23:be:79:f7:6c:ab:70:f0:0d:3e:ad:
d1:ae:bd:8e:4c:f6:ed:f1:c9:03:7c:48:e2:a7:47:88:f8:da:
1d:11:c6:3b:6b:6b:60:4f:21:12:69:54:06:7a:0f:55:66:96:
1c:e5:58:d4:79:4e:b9:5f:15:cd:bd:b1:16:52:22:be:6a:aa:
77:49:59:2b:7e:aa:a7:79:47:05:ea:57:20:89:ad:1c:29:12:
19:29:1b:99:ab:54:6a:0f:15:71:6e:0c:b2:67:f0:39:3b:1f:
a9:83:3d:2f:3e:d3:86:a3:38:34:41:89:17:b2:f6:80:3e:bf:
01:4c:26:fc:e1:24:b8:92:ef:e4:7b:ac:e8:0f:05:b6:dc:2b:
c4:96:de:49:45:92:cb:b4:9c:1b:a0:c9:9d:64:a8:ec:a8:d0:
e1:e9:aa:0b:63:07:5f:99:96:27:11:08:4d:d7:d9:d8:e8:f3:
26:54:27:6e:02:5f:89:4a:18:c8:e4:b9:60:60:21:e4:3a:f6:
41:3b:38:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:31:19 2025 by rpki-client