Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft
File: B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft (raw, json)
Hash identifier: WuUWqMAfPbepdU98rf53IWr1r+kVZaWDwsjAlrHzGWk=
Subject key identifier: 5E:A8:84:F6:70:4C:7F:CB:D5:D2:48:CE:AC:C5:44:6F:F1:4F:89:11
Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
Certificate issuer: /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Certificate serial: 7DC06D44F3FC99BF9D9FFAA285CA3058D0D5996B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft
Manifest number: 0229
Signing time: Sun 29 Jun 2025 09:44:41 +0000
Manifest this update: Sun 29 Jun 2025 09:39:41 +0000
Manifest next update: Mon 30 Jun 2025 13:10:41 +0000
Files and hashes: 1: 323830343a323639343a3a2f33322d3336203d3e20323633383430.roa (hash: Suyd1BGQfCVfrKz7eXe3gTSFcsCn18+rgyvtqMeiLXU=)
2: 3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa (hash: nTHnk58+NlGCzA2boJphxaatQL1TrBKE4lQslsXvu7o=)
3: B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl (hash: 8uFrwXn8AJkjlf0YR5YZ5SxpMQoaxrEtRFIjxyu0MRE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c0:6d:44:f3:fc:99:bf:9d:9f:fa:a2:85:ca:30:58:d0:d5:99:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Validity
Not Before: Jun 29 09:39:41 2025 GMT
Not After : Jun 30 13:10:41 2025 GMT
Subject: CN=5EA884F6704C7FCBD5D248CEACC5446FF14F8911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:37:fe:93:7e:3d:71:0f:c1:c5:4c:75:7e:
13:21:96:1c:0b:f8:4a:a9:d0:a6:7d:3b:2e:2e:b5:
47:5d:fc:a9:6d:84:12:14:53:85:dd:98:10:36:3e:
d7:b6:81:b3:b9:58:45:01:0f:79:e9:66:36:20:fa:
2d:05:cf:54:24:df:be:ae:47:7d:b8:ca:ab:14:9a:
0d:7a:3a:4c:9f:d1:80:3d:b7:cc:dd:ed:13:cd:99:
11:1b:02:ed:f6:a7:92:5d:ab:6f:4b:6c:3c:e6:ab:
01:f5:71:13:d4:cc:13:77:71:62:fd:ff:06:a2:ea:
99:1d:99:ee:5d:53:6b:3a:c6:5d:57:8c:fe:dd:09:
48:db:ae:45:3d:d3:96:b0:79:d4:8f:1a:82:49:78:
89:78:94:82:d6:9f:2a:9a:45:1a:c6:52:72:c6:c2:
0a:61:e3:b2:ec:c7:97:b0:59:ae:f9:48:28:93:a8:
5d:1d:75:52:0f:7a:3e:ad:8c:d4:d2:ad:03:a3:47:
a6:14:dc:81:ac:16:3a:32:65:1b:e7:66:92:30:27:
c2:d9:e1:d9:38:d0:92:fc:76:b5:33:52:be:4d:2b:
75:96:7f:1e:4d:8a:22:f8:97:48:eb:b8:17:ff:59:
91:b8:ab:ba:cf:98:f3:4a:27:3c:9f:ba:9b:46:62:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:84:F6:70:4C:7F:CB:D5:D2:48:CE:AC:C5:44:6F:F1:4F:89:11
X509v3 Authority Key Identifier:
keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0c:55:da:4c:ed:b4:c1:43:3a:4e:df:a9:3d:2e:22:5d:d9:
b8:b6:f4:39:78:1b:12:b5:a9:c6:bc:1e:59:bf:b6:d4:55:c0:
09:c6:9a:2f:ae:0e:7a:4e:5e:d8:0e:2a:1f:92:37:10:c6:ee:
96:28:71:e0:0a:82:04:89:4c:d2:11:2c:6a:96:b2:19:c0:1b:
21:b8:f1:2f:77:9e:d4:a3:3c:a0:81:01:cd:e7:2a:7b:a3:89:
6f:c5:a2:10:7b:9e:15:25:47:1b:17:a8:a5:dd:85:74:15:27:
71:a7:c2:52:59:d9:36:64:6c:ba:9e:c6:d1:b5:28:a5:a3:72:
90:58:99:78:ad:75:35:db:ca:5f:dd:f3:dc:34:0a:c5:68:09:
9a:41:7f:1e:4e:01:da:3b:6e:e5:36:0e:02:5e:82:3b:fb:aa:
a0:12:f0:21:fd:2e:99:23:f5:f9:5b:1f:81:ee:90:0d:dc:c1:
b4:b9:39:cc:44:7a:ed:1c:4f:fa:3b:ce:0b:d3:25:67:ff:9b:
bf:b5:00:a2:de:b1:de:f5:ab:8c:0f:0d:c1:28:ca:8b:36:84:
57:b4:1a:fb:4d:c4:72:88:4b:03:cc:29:1b:e7:96:a1:b0:00:
b5:cd:b0:27:d2:b8:d0:98:8e:31:41:db:a2:67:53:a0:83:89:
47:69:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:46:50 2025 by rpki-client