Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
File: B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft (raw, json)
Hash identifier: yOhBHEZPj8vMoPMUI2pbQeSGlBMK3BsffaAjxRyRbTQ=
Subject key identifier: 8D:FF:9D:35:24:C9:82:6A:32:0C:5F:AE:AB:63:B8:7D:34:99:4C:D7
Authority key identifier: B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4
Certificate issuer: /CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
Certificate serial: 53586ABDBDA74741791672CE20930071F145F646
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
Manifest number: 0382
Signing time: Fri 20 Feb 2026 23:06:30 +0000
Manifest this update: Fri 20 Feb 2026 23:01:30 +0000
Manifest next update: Sun 22 Feb 2026 02:24:30 +0000
Files and hashes: 1: B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl (hash: OptF29goI4tJF5zWGkvsRwex5+Ggd0OzJyS3qlZAEwY=)
2: 323830343a386661383a3a2f33322d3438203d3e203631363137.roa (hash: qRW3XX744thRP3Tttuqqk2JBIASQulXALpKztqm/mAI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:58:6a:bd:bd:a7:47:41:79:16:72:ce:20:93:00:71:f1:45:f6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
Validity
Not Before: Feb 20 23:01:30 2026 GMT
Not After : Feb 22 02:24:30 2026 GMT
Subject: CN=8DFF9D3524C9826A320C5FAEAB63B87D34994CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:7f:5a:00:2c:7e:05:7b:49:a7:03:be:37:
4e:51:4f:4a:3c:e3:7e:aa:8c:a4:f8:32:9a:3a:6a:
66:fc:16:ba:ae:40:a9:77:a5:e6:1e:ce:11:9e:55:
e0:13:70:56:72:0f:bf:e9:92:af:00:1b:1a:1d:96:
a0:ae:5b:40:7c:e1:c4:61:62:29:b4:7b:ff:a7:97:
fb:82:af:70:0c:96:70:3c:ee:3f:ca:02:50:01:14:
1d:01:6f:bb:d6:33:82:a2:ef:75:42:6a:d8:53:a3:
2a:05:3c:3c:2e:0e:de:1c:70:8f:b8:b5:0b:8c:da:
03:c7:bc:bf:77:85:33:eb:01:7c:f1:0c:97:70:77:
5a:93:45:4c:c9:08:bc:e9:79:d9:90:60:e1:88:35:
8a:70:b8:06:65:2e:c5:df:e6:fe:ce:dd:b2:c2:88:
ea:cf:d3:f3:d9:b4:16:26:14:c3:d3:d6:b7:09:a4:
2e:1f:9e:d7:ca:de:3b:03:f2:8d:71:92:cf:14:df:
8b:af:2f:ff:19:de:11:dd:e3:d5:af:ca:9c:41:6a:
04:a5:b9:5a:18:1b:19:7b:18:79:fc:9f:0b:fc:71:
fb:71:be:97:05:19:47:a6:4e:75:db:85:60:c6:ca:
b8:42:ab:08:a6:ee:f1:f0:fb:e8:ab:b7:cf:26:26:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FF:9D:35:24:C9:82:6A:32:0C:5F:AE:AB:63:B8:7D:34:99:4C:D7
X509v3 Authority Key Identifier:
keyid:B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8e:57:a2:31:ab:57:f7:04:41:39:dc:70:18:02:73:53:b9:
70:9a:17:3b:29:53:60:c1:66:14:bc:da:d2:cd:52:9a:aa:a7:
0a:68:6d:43:58:80:c7:cf:5a:49:cf:c7:cc:46:f6:7b:54:fb:
b9:c4:08:af:63:ce:c4:c7:f9:b0:20:25:4b:94:74:78:a0:b4:
69:ef:b5:0b:e4:12:f6:ac:03:be:33:d4:8b:7d:dc:53:2d:85:
36:6b:e6:4d:84:fa:fd:04:0e:5d:ef:4b:94:60:67:00:ad:45:
b1:b4:84:f7:16:1b:8d:0f:f1:ce:41:a5:bd:53:0c:91:e1:4c:
ee:40:91:7c:8b:9d:d6:60:d4:1f:7e:1a:b5:a7:28:fa:bc:48:
d1:7f:58:94:44:2d:39:eb:a5:f7:6f:aa:91:c1:90:a5:e2:ab:
ca:8a:79:a0:a0:6c:c9:44:01:35:03:d2:5b:f9:9e:e1:44:0c:
16:2c:d0:d2:e2:1d:ab:76:9d:f8:ec:78:2b:3a:43:f3:07:74:
04:8e:de:ec:0a:ea:f0:3b:f1:3d:70:77:c3:c2:fa:79:91:f2:
b3:98:56:d9:b6:4c:8b:62:05:2d:7d:94:89:f6:41:9c:79:46:
b3:36:a8:ee:44:bd:a0:23:6f:31:fc:4a:9c:20:fc:45:9b:38:
f3:f9:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:49:30 2026 by rpki-client