![](/console.gif)
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/79850E90B00295449D73112E86E0EB79DBC9B2A8.mft
File: 79850E90B00295449D73112E86E0EB79DBC9B2A8.mft (raw, json)
Hash identifier: 3yML6fGosWXvgN/NpEGyopHTxkc0JrfTArGDOoXX43M=
Subject key identifier: 71:16:B0:6E:79:C1:31:F8:58:E5:4E:FC:5E:AE:01:E9:15:8B:2A:79
Authority key identifier: 79:85:0E:90:B0:02:95:44:9D:73:11:2E:86:E0:EB:79:DB:C9:B2:A8
Certificate issuer: /CN=79850E90B00295449D73112E86E0EB79DBC9B2A8
Certificate serial: 6C3DE0416F0C06798B99821458985699DB4FFD65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79850E90B00295449D73112E86E0EB79DBC9B2A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/79850E90B00295449D73112E86E0EB79DBC9B2A8.mft
Manifest number: 013D
Signing time: Mon 17 Feb 2025 06:57:05 +0000
Manifest this update: Mon 17 Feb 2025 06:52:05 +0000
Manifest next update: Tue 18 Feb 2025 09:11:05 +0000
Files and hashes: 1: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: ywJGU3MRDrCY3Q3pSK1+vis/YtjubPSWQV7awvyeIJ0=)
2: 79850E90B00295449D73112E86E0EB79DBC9B2A8.crl (hash: tYovslz60FEhqgZSURpFY/zHXOgm/ao6oBlU6yT7yXI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3d:e0:41:6f:0c:06:79:8b:99:82:14:58:98:56:99:db:4f:fd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79850E90B00295449D73112E86E0EB79DBC9B2A8
Validity
Not Before: Feb 17 06:52:05 2025 GMT
Not After : Feb 18 09:11:05 2025 GMT
Subject: CN=7116B06E79C131F858E54EFC5EAE01E9158B2A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:37:7d:40:36:a6:ec:0c:af:de:c6:03:25:
86:e4:02:40:84:04:ce:4e:d5:74:a8:23:2f:e8:a4:
0c:df:b9:40:1c:e6:75:d6:8d:6e:d3:47:04:7d:2f:
e0:d8:87:a1:80:8e:eb:f1:f2:61:23:52:e4:d2:29:
61:72:c1:da:7d:8e:d2:d8:98:61:84:64:55:46:7e:
ce:be:7e:72:3a:c2:de:27:23:e9:0a:d1:fc:ec:50:
3f:12:3c:2e:2f:9c:a6:7b:ae:ae:e0:e3:76:8e:3a:
66:36:2e:c5:c9:89:18:e8:0c:3f:2b:d8:8b:5b:0c:
ff:f0:1f:30:5e:03:24:27:aa:e9:06:76:65:2a:1d:
25:29:28:ff:07:c5:a7:36:5b:ac:3a:37:7d:f4:7f:
08:c1:4e:16:a8:df:7f:c6:d6:0c:9e:df:77:ef:54:
6f:ed:6c:97:28:1a:0d:d5:04:f8:e8:2b:f9:84:c9:
6c:7b:e7:79:71:18:e3:ba:50:db:de:12:3d:ad:e9:
60:33:30:de:f5:74:39:f3:f9:17:cf:97:07:ce:8e:
1a:f1:61:5b:0b:16:d8:7a:e5:cf:6e:7d:20:52:7c:
5f:bc:96:80:23:74:ba:19:f7:91:dd:08:3b:13:f2:
e8:fd:c2:93:16:19:bc:2e:ae:01:66:5f:cb:6a:2c:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:B0:6E:79:C1:31:F8:58:E5:4E:FC:5E:AE:01:E9:15:8B:2A:79
X509v3 Authority Key Identifier:
keyid:79:85:0E:90:B0:02:95:44:9D:73:11:2E:86:E0:EB:79:DB:C9:B2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/79850E90B00295449D73112E86E0EB79DBC9B2A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79850E90B00295449D73112E86E0EB79DBC9B2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/79850E90B00295449D73112E86E0EB79DBC9B2A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:a2:ba:5a:a4:3a:f2:a9:02:87:a3:35:d7:e6:17:28:0d:
ab:e8:ff:00:7c:09:97:d8:4c:1c:9d:aa:58:97:51:3c:6d:16:
d0:9b:b6:2c:5c:ac:cb:22:5f:6a:d4:61:37:2f:12:d8:61:fd:
56:ab:c1:3c:d5:9d:12:cc:82:35:18:10:bb:b1:3a:5d:a4:3e:
16:c5:ec:38:cd:4b:0b:4f:f9:11:2e:5f:6a:fd:4a:38:fa:3d:
22:c6:ee:b9:09:16:59:cf:df:25:13:bd:5c:da:3e:a7:6c:f7:
d7:e2:d1:2a:67:f9:b2:b3:39:6f:21:96:04:f6:68:3d:3c:26:
a1:98:a9:3f:55:80:83:89:b4:80:f8:56:6e:bb:24:32:97:56:
16:db:ef:0a:a7:26:8e:85:22:e4:ed:9c:13:77:99:9f:55:3f:
b5:b7:9d:ab:e9:23:b5:06:98:89:77:83:41:19:c9:26:7d:3c:
87:98:04:f0:b9:77:f1:dc:f3:58:e9:38:5a:bf:58:3d:51:20:
f5:b9:bf:86:8e:87:6d:10:03:48:5f:a6:4c:30:c3:68:b9:4e:
8c:e3:0f:30:1b:6a:66:a7:45:39:da:f1:11:79:82:18:cf:85:
46:74:2a:ca:f0:27:16:e1:8a:aa:45:00:d9:bb:10:6d:1b:85:
6b:8a:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:12 2025 by rpki-client