Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/0689B7A718B9AB008E560C380D8765FF16F902E0.mft
File: 0689B7A718B9AB008E560C380D8765FF16F902E0.mft (raw, json)
Hash identifier: u93rPptXhQMke7SsABOl+Tg+AyXf55zbgS2mOEJwef4=
Subject key identifier: B1:77:92:AF:25:03:9E:19:D0:F5:A4:F9:58:95:18:5A:B9:C5:35:B0
Authority key identifier: 06:89:B7:A7:18:B9:AB:00:8E:56:0C:38:0D:87:65:FF:16:F9:02:E0
Certificate issuer: /CN=0689B7A718B9AB008E560C380D8765FF16F902E0
Certificate serial: 60D3B8FA081ADA90AF877CBE1E5587B0CFA451CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0689B7A718B9AB008E560C380D8765FF16F902E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/0689B7A718B9AB008E560C380D8765FF16F902E0.mft
Manifest number: 0123
Signing time: Fri 31 Oct 2025 08:20:02 +0000
Manifest this update: Fri 31 Oct 2025 08:15:02 +0000
Manifest next update: Sat 01 Nov 2025 09:07:02 +0000
Files and hashes: 1: 0689B7A718B9AB008E560C380D8765FF16F902E0.crl (hash: p8NvnCKiR2BeWBa9O3sh0LYoTxFeP0lC8jrDbwpm7qQ=)
2: 3133382e35392e3139322e302f32322d3234203d3e20323634313333.roa (hash: pjWONDGlsVsXxNFxAwo4LWMQ62nYoRh6XJ/Pjt3sY0A=)
3: 323830343a323266303a3a2f33322d3438203d3e20323634313333.roa (hash: WFcjZWS38ho0VBFG8ZOUJpj+GVFEtmFb4WNzp9QLcJ0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d3:b8:fa:08:1a:da:90:af:87:7c:be:1e:55:87:b0:cf:a4:51:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0689B7A718B9AB008E560C380D8765FF16F902E0
Validity
Not Before: Oct 31 08:15:02 2025 GMT
Not After : Nov 1 09:07:02 2025 GMT
Subject: CN=B17792AF25039E19D0F5A4F95895185AB9C535B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:5e:e2:7c:1f:b0:73:0a:5a:17:30:26:ac:
99:32:da:e6:27:2b:5b:33:4e:a8:c0:59:9f:84:86:
49:7b:ee:c0:8d:bf:2f:93:9e:ea:ec:50:46:86:f4:
6c:3f:a8:c5:00:46:8f:68:80:c6:d5:da:29:f0:da:
7c:4d:94:07:ea:f2:db:b6:4b:ac:4f:28:e0:fb:2c:
e7:7f:01:84:63:28:af:04:ee:3a:67:c9:82:a4:c6:
cf:08:5f:22:14:ea:22:02:d2:e3:2a:6e:c9:f8:6a:
64:4d:55:c9:9d:8c:a0:fa:f1:37:fc:9b:39:f1:45:
3a:d7:3c:d9:07:77:a4:80:36:15:f6:27:c5:1b:0f:
35:c0:29:17:c4:03:17:55:b9:76:11:7b:e5:28:68:
81:cd:38:e0:e3:e1:6e:92:e2:bb:ad:fc:c7:3f:95:
2e:80:9c:31:84:66:20:77:2e:bd:f9:ba:8d:b0:d7:
39:d9:77:a7:97:d7:61:60:70:6d:61:ad:5c:c6:72:
95:fe:68:88:f0:56:73:ba:7f:48:0b:54:ad:30:ef:
3d:9d:db:8f:5a:77:fc:41:de:85:7f:01:c0:b0:a5:
45:c0:2f:74:e8:8e:62:a6:b9:00:e9:26:47:1f:44:
35:bc:71:20:0f:96:7a:a5:65:bf:e7:55:f6:44:d8:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:77:92:AF:25:03:9E:19:D0:F5:A4:F9:58:95:18:5A:B9:C5:35:B0
X509v3 Authority Key Identifier:
keyid:06:89:B7:A7:18:B9:AB:00:8E:56:0C:38:0D:87:65:FF:16:F9:02:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/0689B7A718B9AB008E560C380D8765FF16F902E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0689B7A718B9AB008E560C380D8765FF16F902E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/0689B7A718B9AB008E560C380D8765FF16F902E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:35:d6:16:51:da:c2:f6:be:9c:a4:48:09:d3:9f:99:0b:ee:
73:d6:9d:38:7f:87:4e:02:b0:eb:f4:77:a8:84:6f:de:9d:aa:
93:bb:29:cc:ae:41:ce:94:85:77:85:50:6c:6a:7c:3d:2d:23:
d7:b5:98:c9:30:43:3d:10:0c:70:1b:3f:47:d2:bf:d9:b2:e4:
74:4c:5c:4a:e8:eb:56:1d:70:1e:ca:1f:e8:83:02:57:aa:50:
62:9e:1c:ad:30:ba:f5:9b:d2:be:89:9c:e8:d7:4d:6a:91:93:
fd:cf:1b:c3:92:44:3a:02:c5:19:7e:0b:25:42:42:d4:90:2f:
55:3e:4c:5d:af:68:75:07:47:1e:52:8b:08:ef:2a:75:74:b6:
3f:f6:75:14:1b:79:99:3c:d3:78:fa:9c:68:ed:a7:01:bf:73:
66:2b:18:e3:c8:b9:68:5c:10:3e:41:95:68:96:b2:14:2d:d3:
34:60:f8:2e:1b:c7:e7:24:6b:72:85:83:ac:19:56:b8:1e:60:
af:a6:62:3f:0c:79:f4:62:ee:7d:19:6d:1b:70:a4:60:4a:d1:
5b:b8:c6:15:ce:d0:e4:96:cc:36:33:07:79:9e:78:c5:e0:0c:
31:dd:31:d3:d8:19:64:2e:cc:8c:b5:0e:55:98:99:6f:66:ea:
11:a6:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:02 2025 by rpki-client