Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft
File: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft (raw, json)
Hash identifier: JwnRt+aVtOQsTiztdsM6o8uZqEDrLL7iCDuttIlkRGw=
Subject key identifier: 08:45:F9:1D:D0:04:C1:2B:D6:29:56:7C:0A:E4:8C:0A:EE:13:6C:49
Authority key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2
Certificate issuer: /CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2
Certificate serial: 0647127C5DCD08745C15E392184B25E67233B29B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft
Manifest number: 019E
Signing time: Sun 10 May 2026 05:55:05 +0000
Manifest this update: Sun 10 May 2026 05:50:05 +0000
Manifest next update: Mon 11 May 2026 08:55:05 +0000
Files and hashes: 1: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl (hash: xRkQ/azHR1069py0AMtF0lKLaMls8pA4ybLr5t0rpWs=)
2: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: DETwoG/6qi/ZI8aHY1Z5rVUEPEzo75t1n/OyDZwKtCg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:47:12:7c:5d:cd:08:74:5c:15:e3:92:18:4b:25:e6:72:33:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2
Validity
Not Before: May 10 05:50:05 2026 GMT
Not After : May 11 08:55:05 2026 GMT
Subject: CN=0845F91DD004C12BD629567C0AE48C0AEE136C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:d9:b9:06:87:7d:75:2d:bb:df:c0:de:0b:
a2:67:07:54:51:82:49:d6:e2:1d:09:d8:99:c0:f4:
c0:0c:31:b0:88:83:12:a7:0f:f4:62:0e:f2:32:35:
3d:67:bb:af:d6:c6:61:76:e6:2b:e9:93:bc:e2:14:
51:79:ef:82:4a:c2:4e:06:e3:ba:78:31:62:8d:a3:
c4:f7:97:c0:89:c5:ad:1a:d2:a5:ba:8a:94:96:2d:
2e:28:2e:c2:cf:de:ef:3d:7d:ab:04:1e:ea:af:97:
b0:fc:fc:af:94:3f:16:42:9e:eb:de:6d:56:a3:20:
d9:7b:08:83:98:2b:59:7f:a4:71:fb:08:6c:c0:f1:
a1:16:29:72:e4:f1:c2:9b:84:62:46:d5:0d:2c:91:
77:55:24:5f:84:b7:fd:76:90:9f:68:97:9b:cb:5a:
c3:16:4b:a4:bd:d6:c1:e4:01:3e:6e:c8:fc:06:f6:
5f:21:e7:fa:2e:d9:cb:a9:83:da:18:bf:55:a8:aa:
60:12:62:44:da:e8:d3:76:63:3b:48:9f:3c:c5:87:
f2:3f:4f:f0:17:de:16:6e:ca:b8:6f:16:1e:56:49:
a3:0f:f3:54:f3:7e:4b:97:a3:a6:2d:a9:db:6d:1e:
b4:93:60:cf:ce:90:17:f9:06:53:91:2a:48:fa:77:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:F9:1D:D0:04:C1:2B:D6:29:56:7C:0A:E4:8C:0A:EE:13:6C:49
X509v3 Authority Key Identifier:
keyid:D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:27:f7:42:38:7b:9c:7e:07:c7:bd:28:07:17:19:19:b8:87:
d9:b5:3b:57:e6:b8:c7:ed:3f:93:5a:cd:6e:dc:48:2e:bf:1f:
57:fc:22:a3:c1:5d:00:a0:87:3c:08:ed:8a:d5:3b:70:54:22:
3c:0e:bd:39:49:82:89:8a:9a:ae:c4:50:b8:4c:e6:1f:45:ce:
a0:11:64:72:fb:3a:a1:7c:0a:43:84:82:5b:6a:22:a4:1e:14:
9a:80:74:95:d2:d4:09:00:18:59:57:6b:28:92:53:a2:79:b8:
8e:88:3c:c9:ea:b2:e5:f7:24:d1:c0:93:b3:f4:3b:7e:04:a9:
d6:c8:69:54:90:3f:44:f8:da:71:1c:4f:bf:57:b6:ff:8b:90:
6c:83:fd:c6:b8:4d:c9:4f:84:32:03:f3:01:9f:b9:dc:77:f0:
b9:27:76:23:b2:13:6b:d2:59:76:93:06:c0:8a:69:97:04:75:
61:48:5e:6d:55:a9:1b:93:bd:4b:db:6a:d3:e1:66:1d:60:0f:
1b:47:3f:cc:3e:63:e1:e6:71:72:99:17:52:86:ba:05:77:e6:
23:ea:da:bd:5a:e7:19:1e:9d:d0:bc:72:24:aa:41:37:59:c8:
97:52:42:cf:a2:59:ea:70:05:c1:de:8d:c5:81:09:c9:08:3a:
66:88:09:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:13:35 2026 by rpki-client