Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft
File: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft (raw, json)
Hash identifier: nJfDEBisZ/gIFV1ucUm3NMklmbEJToorgcSv7uCDnw4=
Subject key identifier: 62:89:20:07:09:BB:95:B4:F8:6D:4B:55:79:C4:C2:49:72:93:12:69
Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Certificate serial: 4CE670A18CB6166BA2842490E64C4442EF7472D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft
Manifest number: 01C3
Signing time: Sat 04 Apr 2026 10:11:42 +0000
Manifest this update: Sat 04 Apr 2026 10:06:42 +0000
Manifest next update: Sun 05 Apr 2026 12:36:42 +0000
Files and hashes: 1: 34352e3137302e35372e302f32342d3234203d3e20323638313438.roa (hash: 0CN5/x4pe7jCWlGDMfrti4b9viPPpk7/PhRpMCGNR6o=)
2: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl (hash: aUpy3vQqEszuJnLYDyrcEoDBXrkA4x8HySm33pjIF8c=)
3: 323830343a353863343a3a2f33322d3332203d3e20323638313438.roa (hash: zRGNZud26qHSrSYjjg6YCk1GClPSJdsr2PGUbQApwKk=)
4: 34352e3137302e35362e302f32342d3234203d3e20323638313438.roa (hash: RR55rTrnkFH8g4KCfPl393pfA1ZwfrCfgh454gl9sUk=)
5: 34352e3137302e35362e302f32332d3233203d3e20323638313438.roa (hash: +QoBzfGWPmyyT6uMMJ1rR650eEC+cffrEF+pbeGZ30k=)
6: 34352e3137302e35382e302f32342d3234203d3e20323638313438.roa (hash: gZsOGS3Rnh0duEef3BgRuCE3E5aFmjV1uvpgLG3C2FQ=)
7: 34352e3137302e35382e302f32332d3233203d3e20323638313438.roa (hash: vKt5YiGfJ/p3wFZGbhdNGhU33vTogG+ziJ+0H7Wk5tw=)
8: 34352e3137302e35362e302f32322d3232203d3e20323638313438.roa (hash: W9xRzvOgULXFcSdjaAuhRP5lwrh1PRtOm3yof/oj2wk=)
9: 34352e3137302e35392e302f32342d3234203d3e20323638313438.roa (hash: fH+8ZWzbvvsqMsWzR9QX9mvlIisuZ7O9/R+CHUmmgYo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e6:70:a1:8c:b6:16:6b:a2:84:24:90:e6:4c:44:42:ef:74:72:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Validity
Not Before: Apr 4 10:06:42 2026 GMT
Not After : Apr 5 12:36:42 2026 GMT
Subject: CN=6289200709BB95B4F86D4B5579C4C24972931269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:15:ea:39:b9:0e:1d:0a:22:c3:ac:7e:fe:
1c:2c:57:04:8e:51:0b:24:30:bb:0d:89:22:ae:6f:
f1:44:39:0b:8c:48:cb:4f:9b:73:48:ab:c1:6f:fc:
19:d5:99:ae:3a:37:6e:18:cd:53:23:2e:64:c3:9d:
0b:29:54:df:8b:83:a2:01:b1:7e:27:e8:14:a7:96:
5e:3e:33:a4:54:c8:06:0f:2c:1c:0e:0e:0a:95:17:
f4:cf:47:b4:41:23:28:d2:b5:06:cc:0e:9b:54:b4:
a9:8f:70:37:a5:6c:43:9f:ff:57:99:42:e9:49:ed:
70:1e:c7:5e:9e:80:a4:30:29:23:df:f0:5e:59:1b:
32:db:c4:27:26:38:27:20:8b:70:97:ca:69:7e:5f:
b8:86:91:5c:dd:c1:d8:13:97:e7:bd:d5:5a:48:3a:
40:20:7b:23:0b:1f:53:98:33:7d:62:b6:1a:b8:e0:
c2:5a:d9:60:f0:3f:45:a8:c5:bb:90:c9:81:c5:fd:
e9:21:a1:82:cc:a7:b5:bf:ca:09:4a:ec:fc:68:69:
ef:11:d1:c4:c1:70:4d:0e:d8:bf:c7:94:35:b5:2b:
f0:38:50:4f:c5:14:52:c3:12:a2:59:2e:f8:0c:03:
d0:30:92:25:b6:53:6d:16:d6:09:13:83:cd:c7:24:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:89:20:07:09:BB:95:B4:F8:6D:4B:55:79:C4:C2:49:72:93:12:69
X509v3 Authority Key Identifier:
keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1a:3b:07:b4:da:3e:2c:52:f3:17:5f:4a:b7:9c:62:87:6c:
f1:8a:af:43:dc:f4:27:5a:59:ee:19:89:0d:62:57:88:ba:43:
e0:7e:ba:98:7f:f0:a5:a5:26:7b:0b:5a:4c:9a:90:28:05:72:
bd:45:69:88:40:57:91:81:66:d9:1b:2d:d1:6d:ca:fe:f0:8e:
cb:83:7e:68:c5:c7:bf:43:61:f2:1d:58:ce:e5:af:d9:02:51:
f6:5d:b4:00:43:07:35:72:26:62:8a:93:39:bb:ce:96:86:ca:
9c:e9:80:44:af:d3:c7:51:7c:42:f4:f2:44:53:ad:44:09:3c:
e0:ad:8a:7b:d8:f9:da:e7:a4:0b:a7:9f:50:a1:65:63:34:3c:
04:9f:8d:10:32:a5:7c:7d:07:03:b7:df:13:47:f1:c3:d5:4c:
bf:ef:85:83:83:b4:b0:36:23:82:89:bb:09:50:af:8a:3a:97:
81:c1:ec:4d:f0:de:4d:db:cf:3d:9f:96:4a:59:18:ca:a8:24:
bd:1e:18:15:8c:d1:99:7b:88:60:15:be:f4:5c:7a:61:38:46:
fe:2e:35:4f:96:24:83:2c:ec:b6:71:07:80:33:ed:28:10:55:
86:ae:82:9c:d0:67:c9:a1:1e:1a:9c:52:78:2d:9e:64:e7:22:
12:2a:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:52:42 2026 by rpki-client