Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/5031048E66B9F861ACEBD6E8C134A691F49C37E8.mft
File: 5031048E66B9F861ACEBD6E8C134A691F49C37E8.mft (raw, json)
Hash identifier: 8C5AmuCge35KM524zgSd4W2H6/0pCs5oZGZuGuZ/PAQ=
Subject key identifier: 98:5C:ED:C9:29:B8:D7:68:21:A2:B9:3C:1F:2F:01:AF:2D:10:09:F3
Authority key identifier: 50:31:04:8E:66:B9:F8:61:AC:EB:D6:E8:C1:34:A6:91:F4:9C:37:E8
Certificate issuer: /CN=5031048E66B9F861ACEBD6E8C134A691F49C37E8
Certificate serial: 48865F24E9E473ED8DF6C147F6D8AF779B20BF85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5031048E66B9F861ACEBD6E8C134A691F49C37E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/5031048E66B9F861ACEBD6E8C134A691F49C37E8.mft
Manifest number: 03
Signing time: Sat 21 Mar 2026 10:58:17 +0000
Manifest this update: Sat 21 Mar 2026 10:53:17 +0000
Manifest next update: Sun 22 Mar 2026 11:12:17 +0000
Files and hashes: 1: 323830343a393162343a3a2f33322d3438203d3e20323734363539.roa (hash: uvSAltv/Jj6WVeodKxdFunP37vDnMnIoNGu0s+B8Jkg=)
2: 5031048E66B9F861ACEBD6E8C134A691F49C37E8.crl (hash: eZl1/1L86XLJ9mzdGDuuMEcLeLL8Z4S0tmvnmpt5u4A=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:86:5f:24:e9:e4:73:ed:8d:f6:c1:47:f6:d8:af:77:9b:20:bf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5031048E66B9F861ACEBD6E8C134A691F49C37E8
Validity
Not Before: Mar 21 10:53:17 2026 GMT
Not After : Mar 22 11:12:17 2026 GMT
Subject: CN=985CEDC929B8D76821A2B93C1F2F01AF2D1009F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8d:9f:e7:d5:50:43:a1:88:58:73:2e:60:b2:
d9:4e:06:ec:34:a5:49:88:e4:9b:3c:7e:9d:7c:bd:
c2:fd:3a:0b:df:2d:3a:13:39:55:50:1a:f6:11:42:
cd:54:17:31:65:4f:8d:db:fd:82:5d:ed:4d:6f:07:
93:fe:1b:ae:98:f9:07:58:3b:2a:40:3d:bf:d7:ea:
ba:15:22:81:a2:f8:80:0f:6f:bb:16:41:78:ba:c2:
45:ba:f6:9d:4f:6e:e2:28:2f:e5:2a:6b:cd:9a:0b:
08:7e:b9:c0:74:69:0d:19:1f:58:9b:0a:55:5f:12:
e1:ac:28:2f:31:71:ba:0b:ca:d5:eb:b9:00:84:91:
97:f1:76:f1:e0:d4:48:33:10:9b:8a:93:1b:47:79:
31:ac:79:52:e9:e8:d5:12:08:8c:dd:b3:ed:00:18:
16:6c:fa:83:06:03:98:af:e7:cf:fa:20:b1:68:1e:
7a:9d:29:3b:f0:15:0a:72:f2:9c:3b:bf:41:af:40:
11:d3:b7:ea:6b:41:6c:fd:fa:b2:ab:76:d0:11:e5:
f6:e5:e6:dd:3b:76:b4:4a:c7:a7:53:42:43:09:dc:
7f:db:a4:02:81:f9:d7:be:8a:a5:13:89:60:86:12:
b4:7c:aa:4c:c3:d4:32:b3:16:e8:42:99:22:7b:dc:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:ED:C9:29:B8:D7:68:21:A2:B9:3C:1F:2F:01:AF:2D:10:09:F3
X509v3 Authority Key Identifier:
keyid:50:31:04:8E:66:B9:F8:61:AC:EB:D6:E8:C1:34:A6:91:F4:9C:37:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/5031048E66B9F861ACEBD6E8C134A691F49C37E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5031048E66B9F861ACEBD6E8C134A691F49C37E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/5031048E66B9F861ACEBD6E8C134A691F49C37E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0a:31:5c:eb:57:99:fd:98:bc:4e:b6:91:9e:16:dc:2f:c1:
09:bd:ed:43:55:0b:55:49:ea:72:33:3e:8f:ea:c8:be:5c:55:
7f:47:d2:0b:46:81:fd:66:f6:9e:16:58:d6:84:b2:bd:5c:14:
ec:e4:11:37:a6:41:e6:8f:8a:1b:15:16:a4:8f:69:91:c2:f3:
cf:b3:4a:e3:c3:c6:21:40:77:d1:f6:f3:bb:4c:ca:78:dd:5a:
3c:87:c7:0b:8a:27:05:c8:09:88:f2:db:19:e0:d5:f2:cc:0c:
a1:f2:2e:4a:68:4b:0d:b9:55:d4:f6:31:70:33:04:b2:04:cd:
c2:4e:78:1e:35:f2:08:ca:d9:a9:48:0f:9c:b7:15:83:bf:df:
bd:0a:77:a8:5c:b4:b2:74:31:04:a5:31:e0:36:11:10:66:fe:
42:0c:48:9a:25:f3:48:a4:bb:47:90:38:aa:8c:d2:0b:06:e7:
5c:e6:f6:d0:82:37:fc:ed:2a:3b:23:3e:1d:39:7e:57:3c:2f:
8a:db:ba:c8:07:48:c5:3b:8b:03:5c:5e:8c:36:3e:6f:05:2c:
74:1d:a0:0a:86:18:88:30:2e:09:b3:64:f2:89:08:dc:d4:b1:
a6:37:60:5e:13:51:c8:11:d0:41:c9:66:1b:d0:10:35:71:fd:
6a:21:33:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSIZfJOnkc+2N9sFH9tivd5sgv4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAzMTA0OEU2NkI5Rjg2MUFDRUJENkU4QzEzNEE2OTFG
NDlDMzdFODAeFw0yNjAzMjExMDUzMTdaFw0yNjAzMjIxMTEyMTdaMDMxMTAvBgNV
BAMTKDk4NUNFREM5MjlCOEQ3NjgyMUEyQjkzQzFGMkYwMUFGMkQxMDA5RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1jZ/n1VBDoYhYcy5gstlOBuw0
pUmI5Js8fp18vcL9OgvfLToTOVVQGvYRQs1UFzFlT43b/YJd7U1vB5P+G66Y+QdY
OypAPb/X6roVIoGi+IAPb7sWQXi6wkW69p1PbuIoL+Uqa82aCwh+ucB0aQ0ZH1ib
ClVfEuGsKC8xcboLytXruQCEkZfxdvHg1EgzEJuKkxtHeTGseVLp6NUSCIzds+0A
GBZs+oMGA5iv58/6ILFoHnqdKTvwFQpy8pw7v0GvQBHTt+prQWz9+rKrdtAR5fbl
5t07drRKx6dTQkMJ3H/bpAKB+de+iqUTiWCGErR8qkzD1DKzFuhCmSJ73DbVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmFztySm412ghork8Hy8Bry0QCfMwHwYDVR0j
BBgwFoAUUDEEjma5+GGs69bowTSmkfScN+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUtyYkROZ3ZwSnVwOG5mM3JWYlU0VUNUOTYxdHM5Z0RRV1Y1Q0I5UjFQ
dzMvMC81MDMxMDQ4RTY2QjlGODYxQUNFQkQ2RThDMTM0QTY5MUY0OUMzN0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMzEwNDhFNjZCOUY4NjFB
Q0VCRDZFOEMxMzRBNjkxRjQ5QzM3RTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUtyYkROZ3ZwSnVwOG5mM3JWYlU0VUNUOTYxdHM5Z0RRV1Y1Q0I5UjFQdzMvMC81
MDMxMDQ4RTY2QjlGODYxQUNFQkQ2RThDMTM0QTY5MUY0OUMzN0U4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEQoxXOtXmf2YvE62kZ4W3C/BCb3tQ1ULVUnqcjM+j+rIvlxVf0fSC0aB/Wb2
nhZY1oSyvVwU7OQRN6ZB5o+KGxUWpI9pkcLzz7NK48PGIUB30fbzu0zKeN1aPIfH
C4onBcgJiPLbGeDV8swMofIuSmhLDblV1PYxcDMEsgTNwk54HjXyCMrZqUgPnLcV
g7/fvQp3qFy0snQxBKUx4DYREGb+QgxImiXzSKS7R5A4qozSCwbnXOb20II3/O0q
OyM+HTl+Vzwvitu6yAdIxTuLA1xejDY+bwUsdB2gCoYYiDAuCbNk8okI3NSxpjdg
XhNRyBHQQclmG9AQNXH9aiEzmQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:28 2026 by rpki-client