Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft
File: 1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft (raw, json)
Hash identifier: rafbUCkOCOB4Tn6sW3PCW7RMuNSeE+aHx1NJ/c9xFWU=
Subject key identifier: 98:FC:EC:C6:B7:C6:BE:53:D2:D3:98:35:DD:7C:0C:7C:56:97:FC:0B
Authority key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62
Certificate issuer: /CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
Certificate serial: 1A5BF043AB74D4F1931010111EAF9AEF50FBD4D5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft
Manifest number: 02EB
Signing time: Fri 17 Oct 2025 05:33:33 +0000
Manifest this update: Fri 17 Oct 2025 05:28:33 +0000
Manifest next update: Sat 18 Oct 2025 08:04:33 +0000
Files and hashes: 1: 323830343a326665303a3a2f33322d3438203d3e20323634393138.roa (hash: QWG+MZhipO9bcbMipf+Ubhpzc0ha3D6MXWD65sRBCN8=)
2: 1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl (hash: DtDWbD8F3AactXStdA8tRz1vDl/hZyU2tqq8zp6dcCg=)
3: 3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa (hash: mBU+3p7/FRtrSZYwl40UzJfLhpwNBIRp9bEtIDdx3nU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5b:f0:43:ab:74:d4:f1:93:10:10:11:1e:af:9a:ef:50:fb:d4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
Validity
Not Before: Oct 17 05:28:33 2025 GMT
Not After : Oct 18 08:04:33 2025 GMT
Subject: CN=98FCECC6B7C6BE53D2D39835DD7C0C7C5697FC0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:65:7b:56:8b:be:b3:09:3d:cf:38:5d:f9:
7d:6b:28:16:a0:d2:13:ff:43:c9:df:6f:d2:a3:01:
d7:39:1a:40:62:c6:d3:f4:30:06:da:15:46:06:b3:
87:f2:88:49:da:0b:a2:80:89:6e:16:e2:c9:72:e9:
90:f1:f0:e6:2a:15:b7:22:fb:2a:db:e5:25:98:37:
57:df:64:47:5b:e1:4f:6c:d0:5b:75:86:7a:52:ed:
df:d3:cd:2d:b3:60:77:ee:ad:b9:5a:f9:2e:e4:39:
aa:6e:17:61:f2:59:be:ba:b6:b2:9d:f2:37:bd:31:
37:4e:05:32:6f:df:e6:85:41:bc:d2:5d:b5:93:33:
79:d5:85:d6:0b:9d:06:fd:76:2f:80:9d:e6:81:ad:
cb:35:d9:dd:b3:32:33:2c:62:1a:99:90:ec:ed:54:
17:72:11:84:76:85:01:c4:bb:1c:b3:20:78:53:d8:
16:8d:fa:db:5e:17:91:a8:08:2a:cb:40:01:65:59:
f6:90:1a:af:1d:eb:4f:e1:36:70:05:e0:35:70:84:
2d:e4:a9:10:42:eb:71:74:87:c3:f9:83:c7:f8:52:
1e:4a:64:15:e4:8b:cc:ea:14:25:54:59:10:32:48:
2f:5d:0a:7b:87:8f:06:e7:cd:95:c4:7e:1e:3b:79:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FC:EC:C6:B7:C6:BE:53:D2:D3:98:35:DD:7C:0C:7C:56:97:FC:0B
X509v3 Authority Key Identifier:
keyid:1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:41:7c:5a:d7:4d:dd:78:08:f1:2b:7d:7e:44:69:51:b2:05:
3e:f0:d0:7a:76:6a:f7:e3:17:b4:bc:ff:57:e6:58:c9:dc:8e:
4f:de:58:c2:34:94:6a:ae:d4:d2:92:d7:dc:79:63:ae:d8:29:
36:fe:12:0e:c4:33:0a:28:76:ec:7a:8e:a7:22:b8:3f:be:93:
a7:72:5d:c0:f0:5d:36:3f:d4:68:82:4a:89:85:06:3b:28:06:
00:f9:03:13:4a:97:33:48:db:fd:a9:07:1a:70:db:3b:72:2d:
41:13:1a:78:55:9d:ff:60:2f:d3:8c:60:ad:fe:cd:8b:4c:86:
8c:19:0f:18:2a:d9:de:b3:8f:b4:d4:35:63:14:e7:10:67:2a:
47:25:13:ff:61:85:4d:ee:24:f4:73:52:51:eb:dd:03:52:79:
a5:44:e5:6a:05:b2:d8:cc:99:54:e2:f3:5d:66:1a:23:66:72:
a1:5c:13:c3:71:f0:f3:68:ca:b5:d6:cd:fa:5d:0f:0c:00:b3:
30:0d:7f:0d:f2:82:de:55:a1:84:27:ad:42:08:7e:76:11:f0:
b5:5d:92:94:25:5b:73:68:91:a9:6e:27:85:e6:98:47:a0:35:
fd:db:4c:ea:16:c0:3b:78:ea:f2:b9:69:a1:76:4b:a5:b4:f6:
ff:f8:eb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:38 2025 by rpki-client