Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft
File: 2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft (raw, json)
Hash identifier: 7VYsl7VCP5Y+qpeSbCVf2+iAs7lkonCgYImTpnrgS8U=
Subject key identifier: 02:91:BC:6C:55:8B:1E:0D:C5:68:99:CD:FA:14:B7:90:7A:87:12:96
Authority key identifier: 2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A
Certificate issuer: /CN=2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A
Certificate serial: 06702D023B6563A437072DC1860F8EADA1E5C4F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft
Manifest number: 34
Signing time: Sat 04 Apr 2026 17:40:13 +0000
Manifest this update: Sat 04 Apr 2026 17:35:13 +0000
Manifest next update: Sun 05 Apr 2026 20:14:13 +0000
Files and hashes: 1: 3230302e3135302e3234342e302f32332d3233203d3e20323731373434.roa (hash: h0Bcc4Kaexsqxf37FaMflL+ntKV9XIcRJFlokSmynOU=)
2: 2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.crl (hash: 1BVjC+IqKuQyDfIP05qI2gA5F6m5XTfZ9pjshF5BqjM=)
3: 3230302e3135302e3234372e302f32342d3234203d3e20323731373434.roa (hash: Q4ErA+uffiU2U9ylXGP62YNPS3PcIYpq+M7J9p0P6Yc=)
4: 323830343a383035343a3a2f33322d3332203d3e20323731373434.roa (hash: bidTpxcTPOuioRG232kskgZmk/HYSevz0neRxBqbvR4=)
5: 3230302e3135302e3234352e302f32342d3234203d3e20323731373434.roa (hash: LXRPzEKoYdVqGndvrysov6bdfa5+G5JDey02U6R15nE=)
6: 3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa (hash: CF57GYqog4vWgDsMAeCZnms0BMlKG8i38MyRf491B80=)
7: 3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa (hash: NAFu2MLwXgi/G/JGYKHLr9SBn4y2OABNnodqi7v7w3Q=)
8: 3230302e3135302e3234342e302f32342d3234203d3e20323731373434.roa (hash: 0zBLXAQ+/soaucY9uJd9HdxEHGg4ikUPFrbum0P8dAI=)
9: 3230302e3135302e3234362e302f32332d3233203d3e20323731373434.roa (hash: mOkG//y2ad5GgxdXqcEBIJysZKbHLZlo3vYzSmQfgj4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:70:2d:02:3b:65:63:a4:37:07:2d:c1:86:0f:8e:ad:a1:e5:c4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A
Validity
Not Before: Apr 4 17:35:13 2026 GMT
Not After : Apr 5 20:14:13 2026 GMT
Subject: CN=0291BC6C558B1E0DC56899CDFA14B7907A871296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:f1:2f:eb:84:c2:1d:47:61:33:cf:f4:77:
1e:9b:f2:8c:31:32:ba:fd:fd:19:3d:85:f0:f8:0f:
48:24:84:52:a0:bb:06:8e:e1:8d:df:f4:f0:e9:8c:
22:19:07:bb:1c:93:ac:ae:15:b0:f9:96:75:3b:ba:
e4:25:ce:f7:40:85:bc:a6:7f:75:a8:8d:43:50:d7:
ba:87:85:bf:13:83:65:03:a4:a4:0b:0e:88:c4:f6:
ef:b5:2e:1b:86:69:77:8a:ad:fe:f2:b6:23:c1:f4:
16:4d:40:a8:4e:21:da:63:48:d1:39:c7:ff:22:bb:
4c:a6:8d:18:58:b4:90:ea:e2:9d:b4:d7:2d:77:0d:
68:44:d2:b9:e2:45:67:46:64:8b:c4:90:b8:09:92:
ba:d3:74:0b:2a:e7:6e:81:b2:83:9e:95:81:2c:03:
c0:e5:61:df:51:66:d8:c9:4a:bf:a4:40:87:28:31:
50:b2:57:48:75:4a:ab:6e:4c:07:16:9a:e2:b1:0a:
e2:56:45:1b:76:98:85:a5:5a:48:ab:43:81:5c:fc:
ad:8a:aa:ca:c4:d3:00:5c:96:24:4e:9a:72:90:1b:
62:6a:b8:d4:cd:be:11:9c:85:0d:32:82:fb:75:0c:
3e:ef:1b:68:39:81:c0:e2:8c:89:79:70:66:58:a3:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:91:BC:6C:55:8B:1E:0D:C5:68:99:CD:FA:14:B7:90:7A:87:12:96
X509v3 Authority Key Identifier:
keyid:2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:83:6f:df:e5:1b:47:6f:c1:2b:a4:9a:25:ba:b3:c8:3a:1c:
2c:16:d5:fc:29:ef:32:6d:6a:db:9d:0d:0b:b8:5d:b3:f1:8b:
40:33:fb:32:fc:75:d3:31:65:73:0f:93:85:96:59:3e:75:b6:
d3:6a:f9:1c:6f:a4:b4:e8:b6:ee:b0:f2:6d:55:52:60:fb:bc:
9c:a7:24:1f:26:29:95:68:66:ed:37:4a:82:3c:a1:c3:55:63:
09:28:b4:5a:c8:da:68:7d:f3:dc:40:fe:e8:1f:a6:2f:a8:ca:
fd:ee:a8:cb:6e:f7:30:22:fe:0a:2d:b1:c1:9b:48:ce:8f:e0:
b0:e7:22:b9:cb:a2:98:29:d1:9d:ab:ac:ab:99:88:58:e2:55:
62:e2:21:93:14:42:db:d1:e1:af:84:c8:9a:2f:06:1b:4d:24:
e4:19:fb:c4:cf:cd:6b:09:06:8a:7f:84:81:05:a3:40:f6:0a:
c8:77:25:bf:3a:ab:28:20:3f:4b:2d:96:1b:f9:74:83:d9:7b:
de:2b:af:72:5e:a2:bd:12:81:08:8d:0d:d4:40:d2:4a:3f:f8:
3a:1c:d6:9f:28:68:46:71:3f:f3:a5:4d:2c:7c:d9:ae:a2:32:
81:01:52:af:4a:ba:a7:87:39:52:0f:20:61:33:5d:7d:2c:05:
b2:76:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:10:31 2026 by rpki-client