Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.mft
File: 2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.mft (raw, json)
Hash identifier: HVpS49jEpinUNP/O5nHbmTAYmWtWZ5LA9qkVEcbwATo=
Subject key identifier: 76:A2:85:D7:79:F4:22:18:9A:4B:E4:07:3A:A4:CA:33:61:8B:57:96
Authority key identifier: 2A:3F:75:56:AF:2B:12:8A:75:CF:98:6E:87:E1:AC:BC:AF:FE:31:94
Certificate issuer: /CN=2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194
Certificate serial: 7314ED9B4041F78BD04993DABC492BE6741C2C63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.cer
Subject info access: rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.mft
Manifest number: 02
Signing time: Wed 08 Apr 2026 01:34:01 +0000
Manifest this update: Wed 08 Apr 2026 01:29:01 +0000
Manifest next update: Thu 09 Apr 2026 01:57:01 +0000
Files and hashes: 1: 2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.crl (hash: KGI9j5F4ir5Ji0uyE9Y30j8sKWVCfPJADDWLJ1vdHYE=)
2: 323830343a393538633a3a2f33322d3332203d3e20323734353239.roa (hash: pUCoAEdEy6mYmLmW6L67dbh0XwHSfUAAPIuVw4xjULI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:14:ed:9b:40:41:f7:8b:d0:49:93:da:bc:49:2b:e6:74:1c:2c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194
Validity
Not Before: Apr 8 01:29:01 2026 GMT
Not After : Apr 9 01:57:01 2026 GMT
Subject: CN=76A285D779F422189A4BE4073AA4CA33618B5796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:69:7f:8e:5b:ae:76:26:a7:6a:86:79:c0:
46:38:ed:dd:14:d8:13:06:ed:3e:ba:9f:f5:15:10:
5d:14:b3:4c:58:5c:c6:cb:56:78:be:b9:31:33:57:
3f:bf:30:8a:1f:09:29:c3:63:6b:a8:2c:e1:3d:c9:
5b:73:af:ec:7a:9e:5b:c8:e4:c0:ad:5b:93:06:2d:
f9:cf:29:d7:3c:f8:9e:66:b0:0f:5e:f6:74:18:4a:
de:63:fd:1a:95:19:99:2e:d6:3f:db:67:ae:c5:3a:
9c:2e:f4:33:af:46:fe:37:9f:10:f6:7f:02:05:26:
52:46:2d:66:83:22:0d:38:92:e7:83:d7:00:ca:22:
a1:61:19:a5:ca:a6:72:60:47:f6:64:89:57:d9:a2:
3d:81:21:00:79:9c:7e:38:72:61:39:e5:e1:3f:13:
94:bb:19:9d:22:d7:67:82:e6:d7:b7:03:ed:bb:a3:
58:9f:11:70:26:88:65:55:08:da:bd:59:af:4c:e2:
04:44:cb:8d:3a:39:01:bf:48:04:8a:be:fb:64:55:
7c:57:44:ee:ea:ac:8e:97:9a:9f:52:1b:73:45:d3:
fe:3b:ee:d4:27:5a:f2:7b:ca:f1:08:d5:5d:3f:0e:
32:ae:8f:c2:94:f4:df:be:45:74:a2:e5:e6:94:9e:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A2:85:D7:79:F4:22:18:9A:4B:E4:07:3A:A4:CA:33:61:8B:57:96
X509v3 Authority Key Identifier:
keyid:2A:3F:75:56:AF:2B:12:8A:75:CF:98:6E:87:E1:AC:BC:AF:FE:31:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:db:8f:5d:5e:bd:cc:94:5f:64:74:14:13:35:79:a6:ba:48:
b0:c6:45:46:05:b0:86:90:5d:14:dd:8b:82:50:48:ef:74:a1:
2a:22:0d:e9:b6:f2:65:91:d5:0e:bd:d7:58:b4:4d:73:49:d3:
92:6a:e5:86:2f:c2:4f:a3:42:49:95:40:4a:78:8f:7c:59:30:
d0:fc:dd:f8:19:d3:31:ea:26:ff:db:7e:1b:c2:5f:e5:39:37:
71:30:64:5e:ad:2f:32:96:ba:ba:67:4d:cb:f2:f4:be:78:0e:
ed:a1:5c:95:1c:60:10:bc:ee:24:4c:1f:e9:eb:f7:3b:5f:8f:
3b:91:ba:11:5e:9a:70:78:a9:bb:5b:5b:34:79:b7:6f:ca:20:
87:08:77:b7:2d:48:cc:72:ff:df:af:3a:4c:a3:01:28:8a:18:
fa:64:12:3a:cf:7b:58:14:64:13:8c:9b:08:c6:42:43:89:a5:
d6:2f:b3:c8:66:03:d7:5b:86:63:56:c5:95:2d:68:e5:0f:02:
af:98:37:0b:4e:37:9d:7e:e0:f6:d8:07:ce:49:21:b7:05:6d:
29:3a:ab:d4:51:d0:41:dc:9a:f9:56:ab:a1:b3:d4:b9:62:a0:
b3:ce:97:a6:44:3a:ca:7d:3b:0f:df:d2:24:17:50:0a:77:16:
87:d6:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:48:22 2026 by rpki-client