Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
File: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft (raw, json)
Hash identifier: vWlYZR3ojQsS6QPeYHFBBgCHTopSn0S/xyTiHP+e9AI=
Subject key identifier: 70:1C:1C:0F:CD:C3:0A:26:C4:C4:F2:19:15:56:19:87:40:6C:8E:A5
Authority key identifier: 1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0
Certificate issuer: /CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
Certificate serial: 3EFCE0C1D2C9C181302557FA5E3569D8519A1E38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
Manifest number: 6C
Signing time: Sat 01 Nov 2025 13:45:55 +0000
Manifest this update: Sat 01 Nov 2025 13:40:55 +0000
Manifest next update: Sun 02 Nov 2025 14:20:55 +0000
Files and hashes: 1: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl (hash: Y+GUlITlp28wTd+XiP8N8D7xtAV0Gyv8at97E39x96U=)
2: 323830343a383237303a3a2f33322d3334203d3e203631363038.roa (hash: uUEwAyOnSKMgNrv6cimHSGDyRpN3j7PzrC2gtxszUfQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:fc:e0:c1:d2:c9:c1:81:30:25:57:fa:5e:35:69:d8:51:9a:1e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
Validity
Not Before: Nov 1 13:40:55 2025 GMT
Not After : Nov 2 14:20:55 2025 GMT
Subject: CN=701C1C0FCDC30A26C4C4F21915561987406C8EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:30:0e:70:9e:36:de:3e:5c:96:90:cc:7c:6e:
4b:52:a8:cb:3c:1c:b1:c4:cf:98:41:e2:49:dd:63:
f0:73:57:29:6e:18:49:d9:86:c3:e0:24:dd:5d:21:
58:f1:51:ea:16:81:12:f7:7b:8a:38:37:75:58:20:
71:58:22:20:80:3e:d5:fa:22:ef:6f:95:53:ab:08:
57:34:b4:19:9b:dc:dc:d2:3e:f9:d3:71:1f:b5:52:
dd:72:c2:05:39:4b:9a:80:c7:f2:e6:f2:a1:84:bc:
0a:76:50:34:18:3a:88:60:58:37:5d:91:55:cd:a6:
73:9d:7d:6c:b5:1c:f8:7d:03:be:d1:37:36:54:7a:
44:d5:b5:b9:f1:6d:a4:71:2d:fe:9b:e2:88:16:8d:
89:41:e4:d3:89:f0:c3:a7:40:a2:fe:12:b5:e9:e8:
63:fc:15:fd:ae:9c:1e:5f:e3:34:60:49:82:e2:82:
7e:99:08:91:64:53:3e:9a:cb:e6:47:7a:84:93:d5:
1a:88:4c:d7:7e:bf:49:3e:4c:22:88:8e:9e:0a:62:
17:82:6e:93:a9:1b:87:45:24:b5:86:09:8b:73:f0:
b2:0d:1a:5c:4d:06:51:90:a0:1d:82:84:23:81:04:
5d:87:6e:6d:1c:ab:c9:22:6e:16:fb:33:e0:a2:09:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:1C:0F:CD:C3:0A:26:C4:C4:F2:19:15:56:19:87:40:6C:8E:A5
X509v3 Authority Key Identifier:
keyid:1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:36:48:02:9e:c3:63:35:96:df:b6:2d:89:4b:f8:5e:91:90:
6b:09:66:22:49:6e:69:ff:1c:c0:2d:38:ac:82:87:83:bc:77:
3f:ea:50:a1:90:9a:15:db:d9:fe:a5:34:f3:61:2b:53:3f:28:
fb:41:c5:e4:4c:40:e4:34:36:d7:77:8d:55:21:6d:2d:1f:3e:
ac:76:50:7d:c1:f1:59:ca:6d:cf:bc:04:29:0f:e5:44:bd:8b:
2d:3a:0a:fe:67:58:c1:03:93:a2:c8:1e:8c:bd:cd:ec:8f:e7:
d0:6e:42:9b:a7:25:57:4c:e2:99:a2:ac:ab:4f:95:94:4d:e6:
b5:d5:c0:c3:6c:fb:fd:0f:5f:e8:d5:0e:65:48:c1:f0:dd:12:
6d:4f:78:2e:d0:c9:98:28:28:00:6f:6e:e4:5f:72:90:4d:93:
05:74:4a:6e:93:f2:b8:f2:a7:df:4e:d8:13:b4:c2:f5:28:5b:
a6:99:2c:3b:b2:64:30:91:26:83:b1:43:e6:94:f1:f8:09:b1:
70:42:c2:27:44:3f:7f:8e:b7:e5:b6:97:87:a9:6c:ed:5b:ce:
38:23:00:61:a8:e8:b8:b7:24:15:5c:d9:99:66:eb:bd:a3:a1:
8b:e5:4b:9b:c0:3a:f4:f3:23:9c:bd:06:e9:d2:82:8e:5f:02:
bf:9f:1e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:07:23 2025 by rpki-client