Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/11332B40892A7FE90447BE6A8C1D881D90DB17FF.mft
File: 11332B40892A7FE90447BE6A8C1D881D90DB17FF.mft (raw, json)
Hash identifier: znAiau9BaRXIHJk//U33Zn84fldlr9bWrq0q30RGY/s=
Subject key identifier: 00:87:9B:74:64:0F:87:D4:C2:DE:77:73:8E:E3:D2:DE:BC:AE:B2:3E
Authority key identifier: 11:33:2B:40:89:2A:7F:E9:04:47:BE:6A:8C:1D:88:1D:90:DB:17:FF
Certificate issuer: /CN=11332B40892A7FE90447BE6A8C1D881D90DB17FF
Certificate serial: 2452E1E5F6EFAD9FBFD2CDE3FBD9787D60E1753A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11332B40892A7FE90447BE6A8C1D881D90DB17FF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/11332B40892A7FE90447BE6A8C1D881D90DB17FF.mft
Manifest number: 03
Signing time: Wed 29 Oct 2025 16:38:38 +0000
Manifest this update: Wed 29 Oct 2025 16:33:38 +0000
Manifest next update: Thu 30 Oct 2025 20:10:38 +0000
Files and hashes: 1: 323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (hash: EiJCyXzSaDAnft5xashhW3jNVriQaXHrdZ50M6uQzaM=)
2: 3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa (hash: qsUyrZiTzCWIKjxcVsQC4aw40DIoki1Nh8ew5DbBEsI=)
3: 11332B40892A7FE90447BE6A8C1D881D90DB17FF.crl (hash: 86dCKA2RV2XGVobgta3xFQiBcFSWO2HOr0vPQkg4eag=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:52:e1:e5:f6:ef:ad:9f:bf:d2:cd:e3:fb:d9:78:7d:60:e1:75:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11332B40892A7FE90447BE6A8C1D881D90DB17FF
Validity
Not Before: Oct 29 16:33:38 2025 GMT
Not After : Oct 30 20:10:38 2025 GMT
Subject: CN=00879B74640F87D4C2DE77738EE3D2DEBCAEB23E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:77:47:65:d3:37:fd:d5:9c:83:56:b1:73:
c0:0b:37:b6:90:34:84:92:57:72:c2:58:b4:94:08:
f8:57:60:f9:c5:3e:46:ff:6e:a9:37:71:38:5c:1b:
e6:9e:b3:b6:12:5c:75:33:e2:e1:a7:4f:d6:9b:7c:
66:b2:2d:5f:8e:21:56:bf:3b:08:80:20:6f:d1:5f:
16:7b:db:54:57:38:50:c8:d1:95:4e:20:26:22:62:
4b:8f:c2:72:d9:0b:bc:c7:47:69:ae:31:78:8c:db:
3a:ff:70:fa:fd:23:97:5c:f5:db:0c:68:b6:5a:d6:
72:07:6e:63:df:dd:18:41:80:a0:b2:fc:fc:30:46:
94:1f:24:ee:61:90:f0:c1:42:d3:d2:47:6d:7a:89:
65:a5:56:ab:ff:62:e4:5f:10:cd:29:ee:c8:7a:7e:
f4:c0:0d:e3:df:2c:fb:3f:7b:0f:b1:0a:3a:1e:6c:
cc:f2:88:1e:4f:75:f1:e8:42:72:b9:7f:36:1a:e7:
f4:2d:86:4d:f8:04:65:fa:3a:e8:82:74:00:3b:db:
86:2a:af:b1:39:d7:2c:12:8d:bc:d4:ed:db:0c:cf:
0b:db:c9:88:5b:bd:fb:7d:2b:f8:d7:96:14:d1:88:
14:8f:4b:6f:c2:4a:c2:3f:c6:79:98:3f:81:b7:c0:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:87:9B:74:64:0F:87:D4:C2:DE:77:73:8E:E3:D2:DE:BC:AE:B2:3E
X509v3 Authority Key Identifier:
keyid:11:33:2B:40:89:2A:7F:E9:04:47:BE:6A:8C:1D:88:1D:90:DB:17:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/11332B40892A7FE90447BE6A8C1D881D90DB17FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11332B40892A7FE90447BE6A8C1D881D90DB17FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/11332B40892A7FE90447BE6A8C1D881D90DB17FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:66:b1:66:70:3a:b4:de:bd:6a:cb:97:c5:09:08:64:f5:7b:
f5:43:e8:21:6b:83:0a:ef:30:8b:c8:9c:39:8e:cb:4c:f0:7a:
8d:fb:77:07:ac:01:4b:c3:ed:c5:e4:b9:aa:5e:37:7e:e0:bf:
d5:4e:80:07:bd:58:48:52:bd:ff:90:4b:1d:3f:93:16:d5:17:
7e:8b:87:2a:82:07:a0:fe:ce:79:d1:a2:b4:70:6a:36:32:37:
7c:9f:ab:d7:45:c1:46:c9:61:df:32:1e:75:fa:28:9d:bd:35:
f3:55:d9:1c:7a:a6:b5:5b:d5:a2:52:df:cc:50:92:96:5a:6b:
2b:bc:8f:65:cb:02:19:f9:56:70:51:f3:5e:35:9d:e8:23:3b:
ec:ee:bf:8e:2b:08:cd:9f:8d:7f:92:20:14:fc:e1:5c:54:b8:
db:d8:7d:69:d1:8f:34:7b:62:6e:8a:62:6e:ff:de:15:ae:72:
26:72:97:28:39:f9:9c:df:ab:43:e3:5e:06:10:8f:55:57:73:
06:1a:d7:22:cc:eb:0c:e1:d9:2e:83:2e:9c:db:40:0c:a9:ab:
b3:cc:5a:88:b2:dd:56:45:3e:32:4a:04:13:cd:d0:2a:30:7b:
ce:e5:2e:92:1c:36:a0:66:05:16:e0:d6:d1:e4:c1:1a:c9:0f:
09:4b:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:12:09 2025 by rpki-client