Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft
File: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft (raw, json)
Hash identifier: kxB28eu4p6z9VemxvfteHS7TZq9hqoFCl4vHgDVaQEA=
Subject key identifier: 8F:2A:EA:49:75:93:51:22:DD:22:F8:0C:03:F6:21:17:BA:D9:2B:AE
Authority key identifier: 9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01
Certificate issuer: /CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01
Certificate serial: 69EE0DB304B60A37D69FB1D6681BCA5624B90190
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft
Manifest number: CA
Signing time: Fri 31 Oct 2025 14:39:41 +0000
Manifest this update: Fri 31 Oct 2025 14:34:41 +0000
Manifest next update: Sat 01 Nov 2025 17:45:41 +0000
Files and hashes: 1: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl (hash: 2VOP6Cg5rgstt1kUb9NZzPmidqYjWtYIq672VUAOEyI=)
2: 323830343a373934633a3a2f33322d3332203d3e20323731323937.roa (hash: EPgT0uqHRP14e2Ydws+qdNEZrTAIh7Vm9BAP/DL1mMo=)
3: 3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa (hash: RvjBWTTGSRQhFYPFHIcADDXN+HPlEAjpyTfgUWjt4MY=)
4: 34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa (hash: +o5sIScdM46kmAqqS9GWVWLK1tGhtWhWXgceQVZIZ0s=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ee:0d:b3:04:b6:0a:37:d6:9f:b1:d6:68:1b:ca:56:24:b9:01:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01
Validity
Not Before: Oct 31 14:34:41 2025 GMT
Not After : Nov 1 17:45:41 2025 GMT
Subject: CN=8F2AEA4975935122DD22F80C03F62117BAD92BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:6b:ea:95:7f:e5:61:d1:f9:d0:75:a6:54:
75:f5:98:ec:a9:85:ea:b3:77:8f:eb:28:49:67:78:
28:7c:ff:14:5d:1e:d3:be:f7:8d:81:23:78:14:83:
47:88:0a:38:0a:35:64:c5:f2:1a:9a:60:60:8a:91:
a4:58:f5:0c:a4:32:b1:9a:fe:38:ef:c4:39:1f:70:
09:eb:0b:82:b6:fc:57:79:d3:d4:fa:9f:c7:3d:56:
3b:e1:b6:df:0d:23:8f:c8:7a:1b:08:77:6c:7d:e7:
86:9b:7b:e1:48:a3:8e:4e:38:a6:5e:3c:c6:a8:6a:
f9:9c:16:18:3d:40:fd:2f:ea:ec:fe:6c:4a:bb:04:
53:56:58:24:af:29:34:02:b9:e1:c9:a7:85:10:84:
0f:fe:06:97:d5:34:b6:a2:f6:e6:4c:c7:3a:93:25:
02:f5:29:5b:44:68:15:3d:4f:ec:b1:59:77:22:92:
59:70:4f:ee:28:b8:02:5b:b3:9d:cf:dd:3f:5d:ce:
d6:2a:ab:22:ee:3c:7c:df:e2:90:82:1f:4b:a1:6d:
db:30:19:13:37:eb:4a:83:7f:43:c9:a1:9f:d8:08:
88:36:2f:a1:61:33:8b:e0:2c:01:76:66:e2:0a:95:
6c:f4:9f:ea:75:e1:6c:39:58:7d:67:c1:01:b1:be:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2A:EA:49:75:93:51:22:DD:22:F8:0C:03:F6:21:17:BA:D9:2B:AE
X509v3 Authority Key Identifier:
keyid:9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cd:ad:a4:35:01:8c:60:5b:12:64:2c:a6:9e:d6:8b:42:c4:
31:d7:50:07:6d:4e:fa:75:24:e0:39:c5:9f:c9:86:be:91:1a:
7a:4e:91:63:94:81:1d:2a:e5:66:28:4a:20:9e:8f:0e:98:79:
cf:c9:41:57:e1:ed:98:f7:04:1b:63:54:ea:d3:b3:bb:81:f4:
9c:84:11:4b:72:35:27:34:d9:48:f0:0c:71:30:16:49:6c:8f:
b3:a4:8f:87:a4:c5:5c:91:60:3d:42:95:65:98:a3:0f:6e:c2:
93:fa:08:65:78:7f:ce:a6:42:3d:32:9b:4b:43:c7:6c:3d:e7:
83:d5:4c:d1:f4:d5:e4:df:eb:7e:02:09:d2:95:92:92:16:96:
6e:5b:a6:60:96:4c:a6:04:4d:68:a3:af:00:31:f1:6e:3d:3f:
6f:08:bf:0b:aa:2b:27:49:64:8e:61:e1:10:bd:68:25:38:4b:
09:92:78:a9:59:40:0b:9e:f5:40:51:35:0f:cf:58:07:33:1c:
1a:54:41:08:26:72:c4:ba:2c:dd:5d:18:fd:fa:c8:c0:ce:69:
f3:f7:21:e0:2d:7b:c8:0e:84:9d:a1:db:05:db:1e:86:2c:f4:
db:8f:59:af:d3:87:99:1b:8d:d0:2a:b4:b8:2d:3e:16:66:f0:
87:82:49:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:27:58 2025 by rpki-client