Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/102604C78C92915676397D8891E762B57AB2192A.mft
File: 102604C78C92915676397D8891E762B57AB2192A.mft (raw, json)
Hash identifier: IVdqg1HYFqGk8n6ZEKLBZZvkvQWv013IbOeDz07W2dg=
Subject key identifier: 1E:39:57:43:1D:8B:16:81:73:06:62:D2:ED:61:72:52:93:8F:2B:55
Authority key identifier: 10:26:04:C7:8C:92:91:56:76:39:7D:88:91:E7:62:B5:7A:B2:19:2A
Certificate issuer: /CN=102604C78C92915676397D8891E762B57AB2192A
Certificate serial: 7C69C58F316913E77BDFCF46E48B66403D93B62F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102604C78C92915676397D8891E762B57AB2192A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/102604C78C92915676397D8891E762B57AB2192A.mft
Manifest number: A2
Signing time: Sat 07 Jun 2025 03:07:00 +0000
Manifest this update: Sat 07 Jun 2025 03:02:00 +0000
Manifest next update: Sun 08 Jun 2025 06:29:00 +0000
Files and hashes: 1: 102604C78C92915676397D8891E762B57AB2192A.crl (hash: V3kHnorrQ9WC2HxobilhpAyKDx0T0gXW77T+F7SyhM0=)
2: 323830343a393166343a3a2f33322d3438203d3e20323734363738.roa (hash: 9XHrOZxEDIpbn6ZXUulNAEJYCwxEUOXHsN3a+uI3AFo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:69:c5:8f:31:69:13:e7:7b:df:cf:46:e4:8b:66:40:3d:93:b6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102604C78C92915676397D8891E762B57AB2192A
Validity
Not Before: Jun 7 03:02:00 2025 GMT
Not After : Jun 8 06:29:00 2025 GMT
Subject: CN=1E3957431D8B1681730662D2ED617252938F2B55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:a0:5d:89:e6:8a:fa:e5:97:c2:85:59:b7:
55:e9:4c:89:d4:78:2b:0e:72:b0:56:0f:8d:56:c5:
b7:9b:c7:a2:01:6c:61:09:1e:63:33:94:e7:37:8b:
29:02:e5:ce:74:e9:87:6e:be:08:54:f8:9b:a0:69:
81:15:a2:f4:02:e4:4b:39:d2:d8:fb:3a:2f:e0:39:
00:84:16:b4:37:29:ce:e8:16:34:0c:8c:25:90:a3:
9b:1f:ba:b4:69:a1:b8:92:70:2f:9e:93:dd:b0:b2:
9f:6b:21:64:e5:d9:65:10:60:f3:5c:05:44:4b:25:
c9:48:78:6f:2e:e5:7b:99:32:06:aa:ed:0c:44:6d:
28:2c:1f:e7:2f:8d:47:05:5e:58:16:c4:4a:32:c9:
e7:f1:9b:8f:f0:8b:cd:c4:d9:e6:ea:80:d1:9e:fd:
e0:71:7d:ea:70:02:0b:22:02:43:a4:a3:8f:44:13:
a8:12:a5:a2:17:bd:e4:5e:67:57:79:67:ea:c8:19:
98:cf:a0:2b:a4:60:a5:90:10:df:0f:5b:be:70:27:
c9:27:84:23:93:f7:e4:7f:96:82:1a:9a:40:a9:bf:
0c:3a:41:64:7e:5b:6a:9b:51:49:2f:3b:bd:44:59:
df:ce:01:09:b7:f0:6a:d8:ae:64:84:98:cb:29:84:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:57:43:1D:8B:16:81:73:06:62:D2:ED:61:72:52:93:8F:2B:55
X509v3 Authority Key Identifier:
keyid:10:26:04:C7:8C:92:91:56:76:39:7D:88:91:E7:62:B5:7A:B2:19:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/102604C78C92915676397D8891E762B57AB2192A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102604C78C92915676397D8891E762B57AB2192A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/102604C78C92915676397D8891E762B57AB2192A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:60:58:67:ce:48:0c:07:d5:07:65:38:70:35:a5:e1:4b:8f:
4c:19:f9:d3:d3:cd:9a:1c:cf:c3:77:21:7c:1b:5a:05:90:5f:
79:26:21:9c:7c:2d:a7:7a:1a:26:87:b3:59:83:17:72:bf:1f:
05:a4:72:04:14:12:2e:69:b1:83:59:67:8f:67:16:71:6a:06:
78:f3:4f:82:04:95:1d:7c:49:45:9c:9a:be:b8:f6:c2:2f:c1:
ba:73:99:13:41:f8:d2:1b:cc:7b:af:c2:af:7b:f6:e0:c4:7c:
45:75:48:82:06:b0:54:4f:f7:a0:73:90:a1:e0:ff:ee:58:97:
21:0c:ad:31:3c:f6:5d:ed:41:42:d2:4e:a2:5a:01:63:32:9d:
bc:f3:0a:d8:52:42:dd:9f:4e:6b:a0:9c:ca:ff:51:50:61:ab:
9f:22:6f:a4:dd:3d:4d:e2:68:51:96:6c:4f:ad:01:16:ed:c1:
24:d9:64:f1:59:df:53:42:19:ed:ad:06:a9:1e:59:88:81:b1:
4b:c3:32:e8:29:0a:39:c9:cc:26:21:61:9f:1c:4e:6f:1c:d7:
46:2b:f9:5f:bf:90:de:7c:38:be:33:00:20:f5:27:23:99:d3:
8d:89:c8:6f:5e:12:00:29:bd:1a:4b:6e:20:3d:de:3c:57:9d:
7c:67:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:58:42 2025 by rpki-client