Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/04025647B40E02B1D6ED1F825223771295356B79.mft
File: 04025647B40E02B1D6ED1F825223771295356B79.mft (raw, json)
Hash identifier: E5PGu+QPZZfUCO6sjGJWynf3mRzF8WmvC3KRYddWLQA=
Subject key identifier: 03:06:3F:84:BA:A9:86:11:81:57:48:4F:AB:CF:6C:40:3E:7C:E5:05
Authority key identifier: 04:02:56:47:B4:0E:02:B1:D6:ED:1F:82:52:23:77:12:95:35:6B:79
Certificate issuer: /CN=04025647B40E02B1D6ED1F825223771295356B79
Certificate serial: 21ACBEA1FDA62483B5E0A8C571E8DE5C5722093A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04025647B40E02B1D6ED1F825223771295356B79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/04025647B40E02B1D6ED1F825223771295356B79.mft
Manifest number: 25
Signing time: Tue 19 Aug 2025 03:33:59 +0000
Manifest this update: Tue 19 Aug 2025 03:28:59 +0000
Manifest next update: Wed 20 Aug 2025 04:27:59 +0000
Files and hashes: 1: 323830343a386537633a3a2f33322d3332203d3e20323639303631.roa (hash: ZJ29S02wm13j+BNdTe7CB3aYk9c4Z8H3VNhagyVDnXc=)
2: 04025647B40E02B1D6ED1F825223771295356B79.crl (hash: us+50sftuavjClJGJ4Aee0TVCcQ7CmK6uWIsMbjAgAA=)
3: 34352e3137382e3137392e302f32342d3234203d3e20323639303631.roa (hash: kmq3d0Q2rUN1KvCwOiHrNva5X/L1nJ5JnrqdivEgHi8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ac:be:a1:fd:a6:24:83:b5:e0:a8:c5:71:e8:de:5c:57:22:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04025647B40E02B1D6ED1F825223771295356B79
Validity
Not Before: Aug 19 03:28:59 2025 GMT
Not After : Aug 20 04:27:59 2025 GMT
Subject: CN=03063F84BAA986118157484FABCF6C403E7CE505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:b9:e9:15:38:a4:9d:bd:2c:5f:48:59:02:
c3:44:0d:de:16:a3:23:03:69:6f:e8:fb:9c:13:5d:
c5:6a:66:f5:24:39:e6:17:41:51:40:15:be:21:ef:
b5:81:9f:f8:45:28:d0:3f:ac:be:62:50:59:eb:22:
4a:d4:b6:ac:47:5e:41:c8:43:ee:23:2b:f4:23:af:
75:c2:2b:b0:09:42:d1:27:84:c4:d3:37:d6:17:2a:
82:9c:c7:21:44:12:1f:ed:bc:3c:12:ce:f4:b2:8a:
b1:6a:2c:ce:33:e0:4d:2e:7a:b2:d8:ae:10:13:da:
a7:92:38:64:21:55:c7:8f:51:7f:ff:7b:5c:77:cf:
13:ae:90:8a:2c:35:02:56:c2:5d:eb:8e:34:f8:66:
4d:c9:16:26:0d:13:ab:b1:90:ea:df:d6:43:bd:ce:
7a:01:68:a6:89:b1:81:d1:14:92:fe:da:d9:90:77:
2f:a1:74:31:43:97:33:b0:8d:9f:51:81:60:03:8c:
1d:ad:20:e1:27:57:43:54:d5:21:00:4a:dc:1c:4f:
81:02:a9:b2:32:f3:54:cc:11:0d:28:bb:96:77:19:
a0:d5:9c:b4:6a:58:38:30:0d:3c:76:07:0f:90:eb:
88:8c:0c:a2:d3:8c:3a:4c:69:ef:89:73:35:25:28:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:06:3F:84:BA:A9:86:11:81:57:48:4F:AB:CF:6C:40:3E:7C:E5:05
X509v3 Authority Key Identifier:
keyid:04:02:56:47:B4:0E:02:B1:D6:ED:1F:82:52:23:77:12:95:35:6B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/04025647B40E02B1D6ED1F825223771295356B79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04025647B40E02B1D6ED1F825223771295356B79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/04025647B40E02B1D6ED1F825223771295356B79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:56:5a:7e:79:1a:81:63:b8:8f:06:8c:f2:68:9b:1d:85:2f:
24:1d:4b:6f:65:4d:af:5f:ad:e0:99:dd:0f:32:d2:87:5e:44:
c4:f3:57:20:b7:0a:4c:83:10:d6:f6:d5:5c:71:a4:3e:10:10:
a2:5b:06:73:24:cd:0f:d1:f1:05:93:c7:a5:9a:9f:2a:4d:d9:
25:b1:86:c4:2d:e9:41:a5:ec:6d:52:a6:5a:b8:74:6b:96:94:
c5:d3:12:35:52:ac:21:bb:d5:d6:34:76:98:f1:3b:0b:d4:8f:
bb:e5:bc:e8:ed:80:1c:cd:5c:20:b3:3a:1b:22:9f:76:94:ec:
d7:ed:cb:3c:25:3c:4a:90:98:ff:6a:08:c7:65:b6:8a:b1:c3:
d1:80:49:97:a3:d0:6b:52:2f:b0:44:10:89:e7:14:21:8f:bd:
62:f7:8c:5d:40:60:86:29:02:12:25:8c:82:cc:00:1e:bc:9d:
5f:19:f2:29:21:2c:a1:c4:7f:d8:f4:b1:f5:1c:1a:c8:15:45:
c4:28:0e:c5:92:9c:17:92:83:17:59:cf:12:a0:b5:53:9e:29:
b8:4a:1d:5d:8a:7f:90:29:d1:d6:ec:1d:33:b2:2e:3a:0b:4b:
3d:1f:50:df:f5:8a:82:83:76:3f:23:a0:fb:96:7f:ec:57:b9:
07:0d:6b:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIay+of2mJIO14KjFcejeXFciCTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQwMjU2NDdCNDBFMDJCMUQ2RUQxRjgyNTIyMzc3MTI5
NTM1NkI3OTAeFw0yNTA4MTkwMzI4NTlaFw0yNTA4MjAwNDI3NTlaMDMxMTAvBgNV
BAMTKDAzMDYzRjg0QkFBOTg2MTE4MTU3NDg0RkFCQ0Y2QzQwM0U3Q0U1MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPwLnpFTiknb0sX0hZAsNEDd4W
oyMDaW/o+5wTXcVqZvUkOeYXQVFAFb4h77WBn/hFKNA/rL5iUFnrIkrUtqxHXkHI
Q+4jK/Qjr3XCK7AJQtEnhMTTN9YXKoKcxyFEEh/tvDwSzvSyirFqLM4z4E0uerLY
rhAT2qeSOGQhVcePUX//e1x3zxOukIosNQJWwl3rjjT4Zk3JFiYNE6uxkOrf1kO9
znoBaKaJsYHRFJL+2tmQdy+hdDFDlzOwjZ9RgWADjB2tIOEnV0NU1SEAStwcT4EC
qbIy81TMEQ0ou5Z3GaDVnLRqWDgwDTx2Bw+Q64iMDKLTjDpMae+JczUlKE7RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAwY/hLqphhGBV0hPq89sQD585QUwHwYDVR0j
BBgwFoAUBAJWR7QOArHW7R+CUiN3EpU1a3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlp5Ung5dzNpY29VenFRSDdMUlNOamhOeVNlZThtaGtHY1dzRUJoZ0xm
VkEvMC8wNDAyNTY0N0I0MEUwMkIxRDZFRDFGODI1MjIzNzcxMjk1MzU2Qjc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MDI1NjQ3QjQwRTAyQjFE
NkVEMUY4MjUyMjM3NzEyOTUzNTZCNzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mlp5Ung5dzNpY29VenFRSDdMUlNOamhOeVNlZThtaGtHY1dzRUJoZ0xmVkEvMC8w
NDAyNTY0N0I0MEUwMkIxRDZFRDFGODI1MjIzNzcxMjk1MzU2Qjc5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJFZafnkagWO4jwaM8mibHYUvJB1Lb2VNr1+t4JndDzLSh15ExPNXILcKTIMQ
1vbVXHGkPhAQolsGcyTND9HxBZPHpZqfKk3ZJbGGxC3pQaXsbVKmWrh0a5aUxdMS
NVKsIbvV1jR2mPE7C9SPu+W86O2AHM1cILM6GyKfdpTs1+3LPCU8SpCY/2oIx2W2
irHD0YBJl6PQa1IvsEQQiecUIY+9YveMXUBghikCEiWMgswAHrydXxnyKSEsocR/
2PSx9RwayBVFxCgOxZKcF5KDF1nPEqC1U54puEodXYp/kCnR1uwdM7IuOgtLPR9Q
3/WKgoN2PyOg+5Z/7Fe5Bw1rZA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:54 2025 by rpki-client