Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/31365EE5891E2C9F2ED5B8697058132071CC6FDC.mft
File: 31365EE5891E2C9F2ED5B8697058132071CC6FDC.mft (raw, json)
Hash identifier: TloS5vkilZw/Fot2GbVjuoZflLf2b/GDUX9QnPVvDKw=
Subject key identifier: 9F:91:0E:5E:84:33:54:D4:12:C0:42:EB:C7:4B:A9:98:E6:92:1C:35
Authority key identifier: 31:36:5E:E5:89:1E:2C:9F:2E:D5:B8:69:70:58:13:20:71:CC:6F:DC
Certificate issuer: /CN=31365EE5891E2C9F2ED5B8697058132071CC6FDC
Certificate serial: 139C33C24CFD6E29D194745795D189A25DDAA77B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31365EE5891E2C9F2ED5B8697058132071CC6FDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/31365EE5891E2C9F2ED5B8697058132071CC6FDC.mft
Manifest number: 1A
Signing time: Sun 19 Oct 2025 21:51:33 +0000
Manifest this update: Sun 19 Oct 2025 21:46:33 +0000
Manifest next update: Mon 20 Oct 2025 22:32:33 +0000
Files and hashes: 1: 31365EE5891E2C9F2ED5B8697058132071CC6FDC.crl (hash: 9ed/Pfqia3akhBY00V8FEyyLgguJ/8tg+1oWtTUCoe4=)
2: 3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa (hash: 2XltXYpcb0c4K6DcFDb96yDdNy0S0wQieb7oEjuqgOU=)
3: 3133312e3139362e34382e302f32322d3234203d3e20323635383934.roa (hash: XWUi8mzERzBF0DSuB3kechHa4g9btL8EZKR25ElKkSU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9c:33:c2:4c:fd:6e:29:d1:94:74:57:95:d1:89:a2:5d:da:a7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31365EE5891E2C9F2ED5B8697058132071CC6FDC
Validity
Not Before: Oct 19 21:46:33 2025 GMT
Not After : Oct 20 22:32:33 2025 GMT
Subject: CN=9F910E5E843354D412C042EBC74BA998E6921C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:74:2a:14:d2:41:35:f8:d5:20:5d:bd:d4:
63:d8:46:4d:5f:29:cb:10:86:83:85:d8:84:32:ed:
78:e1:40:29:cb:7a:1f:bf:b6:b8:ed:5f:33:c2:40:
2b:dd:c8:3b:e4:36:80:36:6f:5d:35:8f:6b:2c:5f:
72:b1:cd:21:d5:2e:a3:67:51:f0:f3:2e:53:1e:37:
0a:f2:00:11:69:d1:2a:2a:73:68:84:b4:77:a4:cf:
80:22:7f:42:bb:44:ba:8c:08:fc:42:a8:e9:1c:db:
bb:ae:17:52:b7:eb:f1:04:df:41:c7:ba:a7:c0:9e:
09:9f:bc:59:ac:e3:c5:09:0a:e6:49:03:54:80:67:
de:eb:e1:1e:3a:08:b6:07:69:ed:95:a1:fb:7d:02:
22:2d:58:ef:bf:af:e4:30:32:62:1d:75:68:3c:f6:
c6:69:21:31:c9:d6:87:ee:66:08:7f:54:86:94:a2:
ce:52:d8:d4:d3:5b:bf:c0:3d:6f:d3:16:dd:1c:cd:
47:32:cd:8f:f4:e1:26:c1:97:17:1e:56:01:1f:4e:
17:db:72:3d:7a:54:2c:c3:30:1a:81:28:44:83:08:
dc:02:ae:8a:b4:86:58:f1:ef:43:70:70:cb:91:4e:
fd:73:2b:e0:78:eb:8f:df:5d:ef:89:97:74:28:34:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:0E:5E:84:33:54:D4:12:C0:42:EB:C7:4B:A9:98:E6:92:1C:35
X509v3 Authority Key Identifier:
keyid:31:36:5E:E5:89:1E:2C:9F:2E:D5:B8:69:70:58:13:20:71:CC:6F:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/31365EE5891E2C9F2ED5B8697058132071CC6FDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31365EE5891E2C9F2ED5B8697058132071CC6FDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/31365EE5891E2C9F2ED5B8697058132071CC6FDC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:22:0c:d8:d3:b9:f9:43:8c:52:6f:ab:cd:94:a7:d2:d2:89:
3a:4b:94:d8:ec:07:6f:3a:6b:88:27:cc:cb:3d:c3:74:76:f8:
12:c6:9f:47:8c:fb:d6:5e:c0:31:74:16:0f:ac:81:d7:bb:4b:
6e:ea:51:c8:6a:e9:fd:03:20:cf:46:9b:e3:59:9a:c2:a0:04:
43:2a:13:74:1d:a2:44:9f:be:69:9f:e9:b2:29:d1:b1:5b:25:
60:18:97:ff:3a:de:b9:55:2c:5d:ee:e6:86:b4:02:f3:4a:06:
54:f4:21:83:20:60:57:54:51:82:73:62:00:81:81:cd:c0:90:
c6:99:5a:b1:a0:41:95:30:3a:41:38:a9:86:8e:77:2a:ed:9b:
f9:cd:35:7c:70:32:9c:29:3c:03:3b:cd:6b:4f:4a:f5:dd:a2:
1f:02:e2:d6:5c:34:92:20:0b:53:a6:75:4d:8a:90:53:41:9c:
16:51:af:4c:e9:49:77:9d:e6:6a:f2:e6:4d:03:03:18:ff:c0:
bb:07:71:32:59:ea:6c:0f:9d:ff:62:07:99:cc:1a:b0:b8:82:
d7:c0:4f:96:14:b4:0a:b9:4e:78:d8:67:5e:ff:51:ab:24:04:
8d:0e:fe:22:bd:cc:d8:e9:5d:35:a7:3a:3f:5c:9f:16:87:26:
14:07:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:33:12 2025 by rpki-client