Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/8F743B299584D4A1925BBC2732555A07B4494D6D.mft
File: 8F743B299584D4A1925BBC2732555A07B4494D6D.mft (raw, json)
Hash identifier: QpSKAU/F39K2brGXxi+ofMu5U1HKMBN/FtveTZmt5eM=
Subject key identifier: 8A:4A:D8:0D:92:AE:78:99:24:64:37:5B:98:83:C1:BF:4B:5F:0A:DE
Authority key identifier: 8F:74:3B:29:95:84:D4:A1:92:5B:BC:27:32:55:5A:07:B4:49:4D:6D
Certificate issuer: /CN=8F743B299584D4A1925BBC2732555A07B4494D6D
Certificate serial: 7027CE540273941A3561B5F2645F076C39A10D12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F743B299584D4A1925BBC2732555A07B4494D6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/8F743B299584D4A1925BBC2732555A07B4494D6D.mft
Manifest number: 64
Signing time: Fri 17 Oct 2025 12:48:01 +0000
Manifest this update: Fri 17 Oct 2025 12:43:01 +0000
Manifest next update: Sat 18 Oct 2025 16:24:01 +0000
Files and hashes: 1: 8F743B299584D4A1925BBC2732555A07B4494D6D.crl (hash: gIijdBS90KNoncuoegsbez23kNykh+NqyUp7wpTKAeI=)
2: 323830343a393166343a3a2f33322d3438203d3e20323734363738.roa (hash: VHpWrJCvNSBOmdxMvOi91VGTyZ2W+TWCMwxnOIR5OFc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:27:ce:54:02:73:94:1a:35:61:b5:f2:64:5f:07:6c:39:a1:0d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F743B299584D4A1925BBC2732555A07B4494D6D
Validity
Not Before: Oct 17 12:43:01 2025 GMT
Not After : Oct 18 16:24:01 2025 GMT
Subject: CN=8A4AD80D92AE78992464375B9883C1BF4B5F0ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:68:13:94:64:64:28:ba:7d:ce:0c:18:ec:
c3:af:0b:2c:db:eb:d7:4f:78:37:9e:bd:85:44:db:
15:cd:e6:b6:77:9f:fe:b8:15:b1:a3:62:71:86:dc:
e6:d3:10:ad:50:df:77:6f:a8:ae:21:d5:d7:f5:82:
93:67:cf:e8:0f:1b:05:5f:31:fe:8d:c6:f5:5e:f3:
40:7d:2a:d8:73:99:46:e5:5f:c5:ee:bf:4c:23:98:
d2:0a:e7:82:40:66:c9:e0:59:36:eb:d7:43:6e:14:
ef:39:6b:69:0d:eb:38:6c:92:f8:f5:26:8a:da:2e:
81:a9:aa:6b:df:a3:10:cc:79:6c:65:71:93:b7:19:
c5:8e:c6:6b:d2:c5:8a:82:68:7f:78:19:a9:f8:3c:
d7:96:38:8a:22:a5:e7:90:88:15:b4:c2:c8:54:83:
44:a5:d4:3b:c8:5b:0c:5a:6a:e6:2e:69:37:c5:a4:
41:e7:b0:1c:66:97:b1:f4:4a:cd:f8:b2:04:0e:9c:
d7:92:bf:b7:76:49:f5:95:56:ea:ee:8d:33:4b:4c:
6c:2d:2a:31:69:b8:a8:97:93:73:5b:e5:5d:39:f5:
ff:50:ce:9a:90:b7:a5:99:22:41:c8:f7:db:83:dc:
e3:0d:04:9d:56:d2:93:fd:b4:d7:35:e7:15:71:de:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4A:D8:0D:92:AE:78:99:24:64:37:5B:98:83:C1:BF:4B:5F:0A:DE
X509v3 Authority Key Identifier:
keyid:8F:74:3B:29:95:84:D4:A1:92:5B:BC:27:32:55:5A:07:B4:49:4D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/8F743B299584D4A1925BBC2732555A07B4494D6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F743B299584D4A1925BBC2732555A07B4494D6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/8F743B299584D4A1925BBC2732555A07B4494D6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:24:1f:ee:cc:ff:bb:02:aa:f1:4a:f3:81:d3:b6:53:4d:0c:
65:7b:51:f2:c0:0b:1a:37:b3:38:2c:0c:7f:5b:73:bc:01:9f:
38:5d:f1:d8:92:8f:76:28:f2:e1:f3:94:f2:1a:cd:8d:e1:92:
33:b8:24:22:54:ac:4a:3b:5f:94:fd:b1:7f:71:2b:f9:1c:d0:
33:c8:83:7f:7d:fe:09:58:bc:5e:e5:39:1a:1d:b2:e1:f4:8d:
50:75:b9:46:9a:8b:d1:8d:cc:40:47:d5:d9:b7:94:6c:3a:69:
5a:53:f9:1d:86:a1:e0:b8:ef:3c:2a:73:96:92:d1:fe:a0:5c:
4d:6f:a3:b5:a4:7e:c6:db:b6:7b:55:34:22:78:7b:b6:3d:ff:
83:3c:30:97:3a:23:0b:c4:ff:52:c9:21:f6:58:e7:1b:20:52:
12:45:0b:73:25:fb:54:9e:92:ba:23:50:8e:5e:00:b1:d8:80:
b9:e6:81:c2:eb:3c:b2:b5:3c:0c:bc:eb:00:0a:c9:0d:7c:9c:
d4:ec:5f:d3:e5:93:f7:4e:c9:d6:20:e8:4f:2e:5e:36:dd:6f:
eb:17:35:89:f8:70:57:45:0f:3d:6f:55:4e:63:71:c2:05:05:
db:3e:66:c1:e7:b7:2b:d6:4b:46:79:df:d7:82:e0:64:59:02:
d2:51:7b:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcCfOVAJzlBo1YbXyZF8HbDmhDRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY3NDNCMjk5NTg0RDRBMTkyNUJCQzI3MzI1NTVBMDdC
NDQ5NEQ2RDAeFw0yNTEwMTcxMjQzMDFaFw0yNTEwMTgxNjI0MDFaMDMxMTAvBgNV
BAMTKDhBNEFEODBEOTJBRTc4OTkyNDY0Mzc1Qjk4ODNDMUJGNEI1RjBBREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuomgTlGRkKLp9zgwY7MOvCyzb
69dPeDeevYVE2xXN5rZ3n/64FbGjYnGG3ObTEK1Q33dvqK4h1df1gpNnz+gPGwVf
Mf6NxvVe80B9KthzmUblX8Xuv0wjmNIK54JAZsngWTbr10NuFO85a2kN6zhskvj1
JoraLoGpqmvfoxDMeWxlcZO3GcWOxmvSxYqCaH94Gan4PNeWOIoipeeQiBW0wshU
g0Sl1DvIWwxaauYuaTfFpEHnsBxml7H0Ss34sgQOnNeSv7d2SfWVVurujTNLTGwt
KjFpuKiXk3Nb5V059f9QzpqQt6WZIkHI99uD3OMNBJ1W0pP9tNc15xVx3mOvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUikrYDZKueJkkZDdbmIPBv0tfCt4wHwYDVR0j
BBgwFoAUj3Q7KZWE1KGSW7wnMlVaB7RJTW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFlrRkp1UHlic21jcFkxb1FlN1pUTm5zVnplTUxrVndzNHZBMkt2ejFO
Y1ovMC84Rjc0M0IyOTk1ODRENEExOTI1QkJDMjczMjU1NUEwN0I0NDk0RDZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNzQzQjI5OTU4NEQ0QTE5
MjVCQkMyNzMyNTU1QTA3QjQ0OTRENkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFlrRkp1UHlic21jcFkxb1FlN1pUTm5zVnplTUxrVndzNHZBMkt2ejFOY1ovMC84
Rjc0M0IyOTk1ODRENEExOTI1QkJDMjczMjU1NUEwN0I0NDk0RDZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaCQf7sz/uwKq8UrzgdO2U00MZXtR8sALGjezOCwMf1tzvAGfOF3x2JKPdijy
4fOU8hrNjeGSM7gkIlSsSjtflP2xf3Er+RzQM8iDf33+CVi8XuU5Gh2y4fSNUHW5
RpqL0Y3MQEfV2beUbDppWlP5HYah4LjvPCpzlpLR/qBcTW+jtaR+xtu2e1U0Inh7
tj3/gzwwlzojC8T/Uskh9ljnGyBSEkULcyX7VJ6SuiNQjl4AsdiAueaBwus8srU8
DLzrAArJDXyc1Oxf0+WT907J1iDoTy5eNt1v6xc1ifhwV0UPPW9VTmNxwgUF2z5m
wee3K9ZLRnnf14LgZFkC0lF7mg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:48 2025 by rpki-client