Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft
File: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft (raw, json)
Hash identifier: xSijUsMA4UJ0SdJsClN7e7gCRRVzW6iPz4txewpp/No=
Subject key identifier: 62:F1:9B:E4:B7:37:2E:3F:55:89:AD:F7:79:30:1E:24:97:A6:7A:AA
Authority key identifier: D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC
Certificate issuer: /CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC
Certificate serial: 0D2612C17BFA8F14774AEBCF9FCFBD3C4C3555BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft
Manifest number: 011A
Signing time: Mon 23 Mar 2026 10:07:56 +0000
Manifest this update: Mon 23 Mar 2026 10:02:56 +0000
Manifest next update: Tue 24 Mar 2026 10:58:56 +0000
Files and hashes: 1: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl (hash: +Tyss9i4wg6OHSAjblt0xbKnWbzEcw8W9Z3UwnRJHcs=)
2: 3139302e392e3132362e302f32342d3332203d3e20323731353936.roa (hash: uGWB+dLXvJyRVohmeQH5EDKbrZFb7329DIF62AsG+G4=)
3: 323830343a376530303a3a2f33322d313238203d3e20323731353936.roa (hash: atkpFiuFx9gI+NQUYhUM8BLIYtiVv1QBW1r3n1UGNww=)
4: 3133382e39392e38302e302f32332d3332203d3e20323731353936.roa (hash: HLRC3ILU1/Q0mbHQEP1oVDDagjnMAzt8TFJhqxGdn2k=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:26:12:c1:7b:fa:8f:14:77:4a:eb:cf:9f:cf:bd:3c:4c:35:55:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC
Validity
Not Before: Mar 23 10:02:56 2026 GMT
Not After : Mar 24 10:58:56 2026 GMT
Subject: CN=62F19BE4B7372E3F5589ADF779301E2497A67AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:fd:94:4f:22:2c:6d:0d:19:2b:eb:6f:27:
4b:92:94:5b:6c:aa:21:b4:cf:27:3c:17:da:25:0e:
59:b4:05:06:7d:03:4b:41:4e:a7:43:26:16:41:57:
64:4f:c5:12:8a:d1:e1:79:77:07:98:3e:d8:9b:cf:
8d:de:34:73:43:91:7c:f3:e1:79:df:97:c5:02:bb:
4f:44:63:ef:a8:c2:56:02:9d:21:35:9a:f1:8f:3a:
fd:a0:b5:1f:6c:9b:e0:32:de:19:ac:17:51:0b:19:
3e:be:0c:73:16:34:02:df:b2:b4:cb:06:83:ce:e8:
b5:1c:58:c5:c1:a4:dc:73:22:76:99:b7:42:c2:ad:
1f:d4:53:2b:27:e6:8d:dd:e2:68:e8:19:5b:88:af:
7a:ce:b1:5e:b8:6a:10:27:22:b9:c4:8a:5a:28:e3:
ee:7f:16:97:4f:b3:97:b6:ca:6d:e0:c7:57:16:83:
4f:3b:98:b4:fe:02:b4:a5:1d:e8:c6:b1:f4:17:f4:
ed:f9:30:97:a5:d3:83:df:3e:21:b9:df:e0:25:b4:
ab:30:62:96:cb:18:57:e4:de:c6:f5:27:be:f9:49:
25:91:71:b8:c5:ef:56:d0:f2:dd:2f:4d:73:22:cc:
3c:5d:84:06:6e:e3:cc:ff:a3:d6:45:dd:58:ee:5f:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F1:9B:E4:B7:37:2E:3F:55:89:AD:F7:79:30:1E:24:97:A6:7A:AA
X509v3 Authority Key Identifier:
keyid:D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2b:ec:48:a3:46:18:65:cb:04:32:0a:8d:17:23:22:ce:09:
ac:89:44:99:5c:40:76:65:1f:f2:e0:ee:4d:29:1f:d1:cf:e5:
f5:0a:4e:7a:7b:d2:9b:0b:92:f3:20:c1:72:76:bf:58:3f:71:
12:c1:e8:1b:18:8b:ab:46:03:48:e4:4c:9f:7e:eb:76:2f:d5:
1a:56:c6:47:07:59:c2:1e:75:bc:43:e3:37:7f:78:9d:88:af:
6f:78:1f:22:5a:6b:64:4e:34:84:a3:6b:0d:da:c2:eb:80:47:
fe:cd:fb:6e:50:2e:73:94:82:08:64:7d:dc:ac:7c:25:a5:0f:
21:dc:2a:bd:22:06:dd:64:0d:da:b3:d9:89:9c:e1:3f:8f:79:
4e:12:fb:60:31:3a:93:05:48:78:46:f1:bb:52:6a:cc:18:a1:
01:aa:1e:27:69:52:9f:56:df:5e:80:b1:61:38:d7:a5:a6:86:
34:73:38:0e:8f:cc:49:37:61:62:c8:7b:f4:67:14:5e:1b:e8:
b1:d5:35:06:09:e9:dd:34:be:4b:85:99:70:38:f8:c4:4d:c9:
85:e2:92:00:10:29:98:ac:2e:dd:55:19:a7:55:d8:21:73:7b:
1f:a4:28:1b:68:73:ef:ea:ea:bb:de:36:c6:a6:2d:3e:ea:d9:
14:61:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:14:04 2026 by rpki-client