Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/390DE358A808D36C0795E69DC8E59530BF5A0D37.mft
File: 390DE358A808D36C0795E69DC8E59530BF5A0D37.mft (raw, json)
Hash identifier: qLivClcOKG35eCRvEhMyUtwFdn7d8igAfdJbVYeOYr4=
Subject key identifier: 41:E7:B1:08:29:5C:31:B7:9B:F6:75:60:39:40:AC:68:7D:25:12:DE
Authority key identifier: 39:0D:E3:58:A8:08:D3:6C:07:95:E6:9D:C8:E5:95:30:BF:5A:0D:37
Certificate issuer: /CN=390DE358A808D36C0795E69DC8E59530BF5A0D37
Certificate serial: 32CE11A5411EBED35FA6431F399244556D82DCFB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390DE358A808D36C0795E69DC8E59530BF5A0D37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/390DE358A808D36C0795E69DC8E59530BF5A0D37.mft
Manifest number: 44
Signing time: Fri 22 Aug 2025 08:32:20 +0000
Manifest this update: Fri 22 Aug 2025 08:27:20 +0000
Manifest next update: Sat 23 Aug 2025 10:48:20 +0000
Files and hashes: 1: 323830343a383135303a3a2f33322d3438203d3e20323732343436.roa (hash: RK4LVJPnGM7yZk++dlEiR3JSB8KeEF2G9+gGvPLtbOg=)
2: 390DE358A808D36C0795E69DC8E59530BF5A0D37.crl (hash: HQLJLM05E4u386gTlBpu775XFDsRlcGI3AEkfoZt35k=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ce:11:a5:41:1e:be:d3:5f:a6:43:1f:39:92:44:55:6d:82:dc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390DE358A808D36C0795E69DC8E59530BF5A0D37
Validity
Not Before: Aug 22 08:27:20 2025 GMT
Not After : Aug 23 10:48:20 2025 GMT
Subject: CN=41E7B108295C31B79BF675603940AC687D2512DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:8b:d7:ac:95:17:d3:da:00:ca:16:3e:16:
9c:1a:98:9c:94:ed:8f:81:51:7b:93:97:8f:8a:7b:
c0:1b:42:95:55:98:92:de:09:96:dc:89:6c:ed:2c:
7d:05:bc:b2:b5:88:ab:e9:e8:51:46:73:6e:5b:b5:
ef:08:54:c2:22:ed:c6:45:90:ab:5f:49:ef:ff:69:
4d:5e:7c:b9:7e:09:5c:93:d3:a1:ec:10:d7:3a:3f:
23:ab:cf:7b:db:67:95:a2:9a:9a:8f:00:21:25:38:
75:d6:b6:ba:61:2e:92:b0:9c:6e:a3:8c:8f:d2:a7:
5c:bd:67:22:a3:f0:b7:b0:55:3f:d3:01:d7:64:2b:
fc:5e:91:9d:3b:2b:74:12:77:a7:ef:2a:18:15:3d:
ad:78:33:59:7e:41:d4:a6:51:0a:6e:11:e7:7f:e1:
8c:01:fb:f7:78:df:41:0b:71:78:dc:ac:fc:ea:c9:
8e:2a:9b:53:00:49:29:0c:53:fc:ae:e1:d1:52:f9:
eb:4c:1a:c9:5f:0e:7a:0c:f2:ac:78:30:84:aa:14:
77:88:9c:d5:4b:7f:4a:4c:31:1d:48:3a:34:9b:66:
0e:b7:30:85:ef:08:fd:b8:df:c0:4f:46:9b:41:b8:
1e:ec:0f:77:ae:f1:01:95:48:db:c5:6a:aa:9f:f4:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E7:B1:08:29:5C:31:B7:9B:F6:75:60:39:40:AC:68:7D:25:12:DE
X509v3 Authority Key Identifier:
keyid:39:0D:E3:58:A8:08:D3:6C:07:95:E6:9D:C8:E5:95:30:BF:5A:0D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/390DE358A808D36C0795E69DC8E59530BF5A0D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390DE358A808D36C0795E69DC8E59530BF5A0D37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/390DE358A808D36C0795E69DC8E59530BF5A0D37.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c4:53:50:9d:b1:da:01:f0:0a:f1:52:2f:c7:69:06:4e:50:
8e:d3:67:14:36:3b:b8:46:62:d5:c3:ec:f2:6f:19:1a:6a:04:
44:3f:09:ca:60:c7:94:f0:27:fb:e2:52:b0:48:e5:89:96:26:
a3:bb:94:60:66:65:84:7a:2b:9d:96:2b:5d:40:18:91:a2:a3:
d4:91:a4:c9:57:a1:6a:96:4e:cd:3f:7b:5a:08:38:44:18:ca:
31:b2:db:25:70:ca:87:f2:55:c0:34:ad:7a:7d:2f:82:6f:48:
3a:3d:a8:9d:a0:0e:d3:8c:1b:e4:c0:12:11:54:5e:ff:a2:67:
d5:66:ce:0d:46:3c:43:be:d5:27:1c:6a:79:a4:79:52:a6:ff:
05:87:05:a3:8b:d1:6e:ac:3d:b3:cb:dc:ad:60:65:68:fe:31:
88:1e:1d:2a:5b:af:88:18:10:18:e1:dc:e3:8a:09:ea:bb:51:
0f:86:87:e6:03:0e:04:50:4c:f0:1e:25:58:56:9a:f9:cc:d8:
c3:e4:42:a1:c1:9e:28:8d:bf:89:c7:d8:e7:de:13:c6:cf:e1:
a7:f1:84:3e:7f:e3:f4:b6:74:33:55:8e:f6:18:5a:28:46:ab:
2e:ce:5f:b6:ef:56:9b:0f:a1:a6:b3:4e:53:a1:af:55:cc:a4:
13:bc:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:02 2025 by rpki-client