Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/CA3B3391D1758852C015810B1279FA50D32C02DD.mft
File: CA3B3391D1758852C015810B1279FA50D32C02DD.mft (raw, json)
Hash identifier: YOZFJCViWtZqe+E1W2BWqCfQMnIFTaVH2FmOivLaZxA=
Subject key identifier: 2F:F0:1F:FA:AE:84:A6:99:64:DA:E3:FB:B8:26:1E:BC:54:36:C8:7F
Authority key identifier: CA:3B:33:91:D1:75:88:52:C0:15:81:0B:12:79:FA:50:D3:2C:02:DD
Certificate issuer: /CN=CA3B3391D1758852C015810B1279FA50D32C02DD
Certificate serial: 556AF7DFBFE8B240CCD0878B13AA8BA9AED63137
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B3391D1758852C015810B1279FA50D32C02DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/CA3B3391D1758852C015810B1279FA50D32C02DD.mft
Manifest number: 56
Signing time: Wed 29 Oct 2025 01:00:46 +0000
Manifest this update: Wed 29 Oct 2025 00:55:46 +0000
Manifest next update: Thu 30 Oct 2025 03:43:46 +0000
Files and hashes: 1: 323830343a393362383a3a2f33322d313238203d3e20323734373936.roa (hash: mC/WFRyr6I0os5NAMR2ZvlGGDYvvIfktRWHyZGqrK0U=)
2: CA3B3391D1758852C015810B1279FA50D32C02DD.crl (hash: EifgK+ZC/Y6EgLevAoGsqNfFw/J5by2ldR+yVbmY4x8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6a:f7:df:bf:e8:b2:40:cc:d0:87:8b:13:aa:8b:a9:ae:d6:31:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA3B3391D1758852C015810B1279FA50D32C02DD
Validity
Not Before: Oct 29 00:55:46 2025 GMT
Not After : Oct 30 03:43:46 2025 GMT
Subject: CN=2FF01FFAAE84A69964DAE3FBB8261EBC5436C87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:0b:9f:b4:0c:14:ad:5c:02:cd:b1:88:b2:
f0:88:d5:26:cd:dd:b0:e4:a5:12:ae:91:bd:d3:f7:
22:53:d4:e4:30:b3:f0:db:97:d5:31:b7:72:ab:78:
7b:9c:93:44:66:a2:7c:37:b8:96:b6:1f:c3:46:2c:
43:fd:bf:ad:17:26:d1:ed:d8:16:70:32:05:57:b9:
5d:cc:e6:8e:76:7b:85:d4:5a:9a:ea:70:8d:a1:c6:
0e:ad:e7:e5:d6:c7:30:0c:6e:04:15:4c:1d:32:5b:
93:de:25:fc:f7:4e:21:b5:75:ed:c0:5d:35:71:2a:
9a:c2:f1:4f:1a:2a:5e:10:e8:20:54:8b:af:43:2f:
b1:6e:3b:55:69:e9:a5:2a:ef:a1:87:b6:e4:50:fe:
6d:4e:90:cf:ea:de:dd:16:ca:a4:80:33:32:9f:ba:
f4:3c:24:86:8b:d2:4b:08:27:1a:ad:77:01:35:80:
2b:9a:1e:1c:6c:9e:0f:ae:3e:35:6a:18:3b:1d:21:
14:b1:f9:15:2f:41:4d:82:1f:83:de:3a:02:db:50:
00:f7:b7:b2:08:a7:db:39:85:09:23:41:77:2b:d3:
16:58:90:1b:fb:67:50:87:2a:f3:d4:e3:9b:ee:f7:
51:86:c1:8c:01:cf:c1:6b:ab:27:9b:16:87:ef:9d:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:1F:FA:AE:84:A6:99:64:DA:E3:FB:B8:26:1E:BC:54:36:C8:7F
X509v3 Authority Key Identifier:
keyid:CA:3B:33:91:D1:75:88:52:C0:15:81:0B:12:79:FA:50:D3:2C:02:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/CA3B3391D1758852C015810B1279FA50D32C02DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B3391D1758852C015810B1279FA50D32C02DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/CA3B3391D1758852C015810B1279FA50D32C02DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:71:25:38:3f:b7:73:18:03:f7:f8:92:6f:3f:c9:e5:8a:d7:
76:9e:af:7d:9a:52:69:0d:55:51:0f:03:7f:69:c2:73:47:59:
26:91:cd:6b:bc:aa:08:e6:e5:2c:05:6f:43:0a:96:0e:72:86:
14:03:27:2e:10:31:a3:8b:e9:e8:73:34:3a:73:f3:a7:43:30:
5e:93:ca:33:a7:ee:4d:2e:ad:51:68:04:ab:50:90:1f:3f:54:
4b:6d:a0:f7:f0:b0:db:db:d6:b6:09:da:9a:c6:62:dc:c8:66:
e0:75:79:64:5a:8e:72:48:04:8a:fe:c7:0c:f9:63:a0:b7:55:
47:e7:15:10:61:25:c2:73:3c:7d:17:34:5b:6c:b5:ff:8f:8d:
bf:ac:db:36:2f:e7:42:3c:08:1e:34:50:cd:5e:ea:6e:5b:f4:
c4:6e:02:a6:77:58:13:dc:77:5e:5b:0c:b3:82:c6:b0:d2:5b:
86:58:1a:d9:58:5f:ac:f0:a1:3a:13:b1:a5:e1:77:a7:88:be:
79:c5:e7:b9:56:78:e6:f6:70:96:fd:36:1a:41:c2:49:e5:dd:
01:7d:4e:31:db:d6:91:a4:b2:8d:4e:92:0b:14:3b:58:e7:d6:
9b:dc:72:b5:9b:2f:57:e7:01:57:92:85:e4:e6:56:89:a3:bc:
ed:e2:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:30:23 2025 by rpki-client