Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/H1xki3vurNomXJ83wLWWMMzP9h2N43SejJbftjEQRtMf/0/5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.mft
File: 5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.mft (raw, json)
Hash identifier: rnoaxl1iQlC9p/NsPGN2OLO6lWeCGFc3m6WU7bk0sBY=
Subject key identifier: A3:82:C6:50:0D:AE:A7:91:15:7E:68:E0:10:CD:27:56:04:2E:0E:08
Authority key identifier: 56:87:B9:AE:43:66:A6:EE:84:3A:AC:40:00:F8:A5:5B:CA:BC:8C:7C
Certificate issuer: /CN=5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C
Certificate serial: 7291DE654000FE3A459562252A6FEAF3E0CB771E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H1xki3vurNomXJ83wLWWMMzP9h2N43SejJbftjEQRtMf/0/5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.mft
Manifest number: 09
Signing time: Thu 21 May 2026 11:08:19 +0000
Manifest this update: Thu 21 May 2026 11:03:19 +0000
Manifest next update: Fri 22 May 2026 13:16:19 +0000
Files and hashes: 1: 5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.crl (hash: ZNtC9LEMkjVV4UuVcKdQ9+TlZ1zR3LiqT40LAPyW3Zg=)
2: 323830343a393737633a3a2f33322d313238203d3e20323735363236.roa (hash: 2wjO8M+6n75yKKejlc/7jrA+/WrapNPZetSvOlcdQNM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:91:de:65:40:00:fe:3a:45:95:62:25:2a:6f:ea:f3:e0:cb:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C
Validity
Not Before: May 21 11:03:19 2026 GMT
Not After : May 22 13:16:19 2026 GMT
Subject: CN=A382C6500DAEA791157E68E010CD2756042E0E08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:2d:d4:1d:f4:ba:ed:a0:3f:de:fc:89:c0:
64:74:a6:db:ad:3a:85:2d:91:61:98:70:59:d6:f2:
be:d7:0e:95:76:61:1e:5a:64:0a:8c:fe:b8:bd:8f:
a7:1d:5b:97:6a:50:fe:a7:c0:a9:f5:aa:ec:74:21:
02:0d:3c:cb:92:30:47:7f:c5:95:f0:31:4a:82:f7:
89:d6:df:0b:1b:c3:69:e9:53:e5:92:a3:61:98:c5:
4a:29:7d:fa:44:98:21:64:28:e8:9f:5b:4c:c3:b5:
9c:75:69:f3:e4:bb:c2:ba:13:2d:45:32:e8:0d:4a:
a8:8f:47:ce:9e:c2:9e:ba:58:3b:39:93:1b:80:cb:
26:37:62:42:f3:9f:05:58:8b:81:6b:d1:e0:3f:c2:
7c:db:37:6c:94:e3:c6:49:d5:56:1f:c0:b2:b7:5c:
44:30:14:02:f4:3e:89:4b:a7:a7:45:fb:15:5f:6f:
14:8d:ae:2d:4f:e9:5f:51:6d:f5:85:d6:be:37:01:
bd:5a:78:c4:16:b9:67:ea:20:3e:3a:c6:54:7f:26:
58:f5:a0:1f:92:c0:25:db:4b:e6:2c:5e:d9:bc:5d:
ee:a6:a0:f9:ab:91:10:05:74:72:5b:92:94:ab:60:
12:4c:e7:c1:3c:ea:c9:22:35:00:77:52:5e:5e:f8:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:82:C6:50:0D:AE:A7:91:15:7E:68:E0:10:CD:27:56:04:2E:0E:08
X509v3 Authority Key Identifier:
keyid:56:87:B9:AE:43:66:A6:EE:84:3A:AC:40:00:F8:A5:5B:CA:BC:8C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H1xki3vurNomXJ83wLWWMMzP9h2N43SejJbftjEQRtMf/0/5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1xki3vurNomXJ83wLWWMMzP9h2N43SejJbftjEQRtMf/0/5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:73:78:cd:3c:46:b4:c2:77:2a:d7:1d:78:78:9e:8c:cf:73:
e2:d4:00:a4:8f:40:b0:e6:74:b1:66:b9:00:f1:a1:82:4e:b6:
b0:60:bb:e7:67:48:c2:50:e9:b8:85:6a:9e:dc:e2:f2:9b:73:
c9:bb:b3:fa:16:f5:de:c8:bc:e7:0e:be:5a:1f:64:22:f5:0b:
65:0e:96:89:22:b8:82:ae:45:0c:fe:46:ec:99:aa:ef:b2:f2:
44:30:15:6a:96:84:0c:62:99:0e:d1:9e:ca:93:04:a5:55:05:
d6:8e:ca:65:1b:cd:59:d2:f8:07:7f:95:c6:d2:b1:a7:4d:8d:
26:df:7f:91:00:c3:66:89:96:fb:8e:43:e2:59:ec:92:2b:8e:
24:bd:f8:b0:07:f8:b3:2f:32:d9:25:ac:0a:a9:94:42:63:91:
dd:10:b7:28:ba:9e:50:12:36:ab:9a:d2:fd:08:a2:4e:5e:9f:
37:da:c0:32:16:64:53:b7:f9:51:b4:00:55:3e:dd:3f:f7:e5:
0b:ba:73:b2:44:40:ef:3b:e2:d4:30:f1:b0:ed:fa:d2:96:62:
52:d9:c1:26:e5:dd:ab:20:a6:32:3a:b3:ae:3e:b1:df:8a:97:
c7:43:aa:dc:fc:8f:60:4e:04:cd:02:20:09:fc:a3:2e:3e:a0:
75:48:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 18:47:52 2026 by rpki-client