Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
File: 0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft (raw, json)
Hash identifier: a2cT2eME77CKFnB5eS205dlR2aAlTPN3x4QGk0eetZ4=
Subject key identifier: E5:8B:E8:87:DB:0C:54:5E:AC:F0:7B:F2:79:6A:04:93:4B:92:D9:E8
Authority key identifier: 0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76
Certificate issuer: /CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
Certificate serial: 658A9C9DE1185CCD7E6E19B64524B3C503FA0F28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
Manifest number: 032C
Signing time: Sat 21 Mar 2026 13:52:18 +0000
Manifest this update: Sat 21 Mar 2026 13:47:18 +0000
Manifest next update: Sun 22 Mar 2026 17:35:18 +0000
Files and hashes: 1: 323830343a313839343a3a2f33322d313238203d3e203631393431.roa (hash: VmgBjkOJIbq0flG2n9FaZFQz/l5n2AqoV+CEF2ys42I=)
2: 0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl (hash: H2czhPSP47S2nYV7EX77/Z19/MrogcXyRtgiCEIuKNA=)
3: 3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa (hash: EoFW/iEX7EzH105TVdicQ7fapNw1Ahv9PHuyFSk5fY8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:8a:9c:9d:e1:18:5c:cd:7e:6e:19:b6:45:24:b3:c5:03:fa:0f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
Validity
Not Before: Mar 21 13:47:18 2026 GMT
Not After : Mar 22 17:35:18 2026 GMT
Subject: CN=E58BE887DB0C545EACF07BF2796A04934B92D9E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:86:ae:1b:05:c7:be:2b:a0:d6:87:3e:7b:
ca:c6:d7:7a:56:0d:cc:cd:58:e6:2d:17:4b:1f:20:
0d:7a:ac:58:79:ee:06:72:25:26:d3:c7:39:ea:46:
4d:26:cc:6f:ad:68:22:22:43:e5:b1:29:e2:03:08:
61:5d:5d:46:83:88:43:c6:11:5a:51:7e:c0:25:d4:
16:2b:11:4c:38:c4:6e:b2:d2:cb:a0:bb:e1:2d:fb:
d2:43:16:94:7c:a2:50:0b:af:02:71:66:0b:05:61:
ca:c3:a4:8f:93:5c:e9:99:1f:34:be:51:c8:20:b3:
e6:9a:6c:d2:40:8e:f1:ef:ff:12:3c:5a:c9:f6:53:
cd:99:11:21:ad:f0:2b:38:fa:12:d7:6a:23:3d:a0:
67:bc:d3:41:48:26:6f:e6:fc:09:02:65:f6:f3:b7:
57:1a:5b:00:f2:e0:9a:ca:10:2a:bf:8b:e5:3d:4f:
9f:75:6f:ef:9c:1b:ad:d5:2e:c2:1d:8c:87:ec:06:
93:35:13:ad:dd:29:b4:e7:19:76:db:46:89:2b:43:
a5:75:7d:f4:9b:eb:3b:59:fa:15:d6:16:01:cd:e9:
19:39:a5:e6:19:c3:67:7d:f1:18:fe:9e:45:8b:5e:
28:56:c1:f9:94:66:55:db:fe:b5:01:b4:2b:50:18:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8B:E8:87:DB:0C:54:5E:AC:F0:7B:F2:79:6A:04:93:4B:92:D9:E8
X509v3 Authority Key Identifier:
keyid:0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1b:af:a0:07:e2:c7:ab:2a:9a:19:00:a3:48:6e:2d:c8:cc:
83:2f:9e:d9:c7:be:77:f7:e1:94:88:16:a2:3a:3d:33:f7:ea:
49:54:1b:c3:5f:34:1c:fd:c3:d4:95:3b:78:1d:cf:f4:64:4c:
11:86:03:5c:13:67:30:ac:c1:65:97:3f:ed:d7:eb:cb:13:93:
48:e0:ec:5a:70:76:f1:0d:f0:5d:17:51:03:39:6c:59:f8:bc:
c6:0d:b7:ae:da:cc:28:71:36:56:30:92:8f:9c:1c:2e:92:a0:
7b:dc:de:30:24:4b:cd:73:0f:02:6a:14:55:2e:d9:17:f8:0a:
10:75:25:a5:17:d5:e3:85:63:f5:d6:74:eb:3f:10:ec:a1:a4:
32:e2:e7:54:14:a7:11:73:b2:ff:22:9c:b4:f5:af:77:ec:32:
36:93:7c:a0:76:a7:5f:8c:35:5b:35:15:54:79:d0:71:22:e4:
a3:88:8e:49:fc:b5:88:03:fe:6a:77:4c:86:5c:f6:d8:49:15:
18:5f:c8:0d:8e:28:c2:f7:40:be:57:99:8c:87:eb:c4:1b:9f:
f1:c4:a0:09:01:70:b1:d4:d1:b2:0d:92:cf:57:4c:60:a5:1b:
66:8a:d4:cf:c3:db:a8:fc:c6:5a:52:3b:e2:66:b7:c6:12:fd:
f2:69:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:18:10 2026 by rpki-client