
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.mft
File: 3969F32AA0FDF3D39ABBAD2837C7749831899397.mft (raw, json)
Hash identifier: qTEMl3mGaqcNMNwAnoytFlhAwpBlFwuPLXrwZZGTECY=
Subject key identifier: 81:D9:6F:CB:66:C2:5B:30:24:BF:74:74:F6:E6:84:69:35:CD:5F:5F
Authority key identifier: 39:69:F3:2A:A0:FD:F3:D3:9A:BB:AD:28:37:C7:74:98:31:89:93:97
Certificate issuer: /CN=3969F32AA0FDF3D39ABBAD2837C7749831899397
Certificate serial: 1561AB31B9A66FD4E57F1ACE3C6F9F2201FC2187
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3969F32AA0FDF3D39ABBAD2837C7749831899397.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.mft
Manifest number: 64
Signing time: Sun 19 Oct 2025 10:26:03 +0000
Manifest this update: Sun 19 Oct 2025 10:21:03 +0000
Manifest next update: Mon 20 Oct 2025 13:30:03 +0000
Files and hashes: 1: 323830343a346136383a3a2f33322d3438203d3e20323637323338.roa (hash: msHoPUSYrUwGeC3fLacj8Ud0xMnhlH3k7zjdzU5zufA=)
2: 3969F32AA0FDF3D39ABBAD2837C7749831899397.crl (hash: wWlNkDc5K+xiao8pQC6u164cAJp5rs64s/9XJSYfBfg=)
3: 34352e3233322e342e302f32322d3234203d3e20323637323338.roa (hash: IjEn1wNwoHRClqbiXTXWTQjexMagU+jk7sCW2H/15iU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:61:ab:31:b9:a6:6f:d4:e5:7f:1a:ce:3c:6f:9f:22:01:fc:21:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3969F32AA0FDF3D39ABBAD2837C7749831899397
Validity
Not Before: Oct 19 10:21:03 2025 GMT
Not After : Oct 20 13:30:03 2025 GMT
Subject: CN=81D96FCB66C25B3024BF7474F6E6846935CD5F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:86:88:3c:f1:61:02:e4:23:16:a5:95:c5:
5c:84:99:74:35:51:c9:5d:aa:04:b2:2d:a1:50:5d:
e4:cc:c8:30:e5:f7:01:b1:e4:8c:8f:5b:0f:ec:1a:
23:4d:57:7c:1d:d8:48:57:6a:8a:dd:36:8a:6e:13:
70:0f:35:bf:f4:9b:a3:0f:8e:22:9e:40:9e:f2:96:
fd:a1:d7:10:b3:fc:29:2d:01:6a:f1:73:36:60:bf:
14:8a:22:33:60:f0:64:15:26:43:27:3b:8a:27:64:
95:82:d2:56:47:c5:3c:6f:59:dd:58:be:ec:63:82:
f4:60:45:ee:1f:60:33:a3:57:42:43:8d:1e:66:81:
54:ef:31:c7:eb:aa:bb:e8:88:cd:ed:24:d8:09:b0:
db:7b:db:da:cc:36:c4:24:ca:4a:95:c9:f0:b8:03:
96:09:f7:dd:5b:52:a4:96:d6:d1:98:4c:f6:c5:97:
58:58:81:49:ef:41:52:3c:32:64:f9:53:aa:6d:be:
4d:80:7e:72:05:cd:b3:46:d2:28:91:a6:1f:ca:e4:
75:05:24:c8:4e:b8:93:6c:f5:02:c6:7c:3b:a2:5c:
a4:f4:10:0b:e5:01:86:3a:94:ff:4d:a5:02:98:8d:
17:e7:30:42:11:6b:0a:af:55:1e:c1:02:8d:ef:56:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D9:6F:CB:66:C2:5B:30:24:BF:74:74:F6:E6:84:69:35:CD:5F:5F
X509v3 Authority Key Identifier:
keyid:39:69:F3:2A:A0:FD:F3:D3:9A:BB:AD:28:37:C7:74:98:31:89:93:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3969F32AA0FDF3D39ABBAD2837C7749831899397.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:79:cd:e3:9d:5e:db:dc:f5:32:72:35:93:f6:19:95:22:b8:
6c:ae:45:77:d5:33:73:53:8e:0f:cd:af:2c:b7:b1:c8:7f:c8:
5a:9f:17:ee:b6:49:ba:4f:ae:1d:92:3c:b1:48:0e:a0:e7:4b:
3d:2f:0f:da:88:51:f5:5f:0c:8b:02:5b:b6:07:c7:7f:c6:e2:
38:4b:65:43:52:08:15:1b:02:f7:0f:7c:6e:18:ff:80:9c:ef:
1a:ac:87:ae:7f:be:79:6f:f3:11:60:fe:a8:7a:62:bf:1f:9a:
bb:c7:73:87:57:06:a6:b3:05:f6:d0:07:89:09:eb:1a:a9:19:
42:7c:0a:f5:9b:d7:3a:79:a6:be:b5:2d:10:ca:61:d6:23:6f:
22:5b:9e:25:34:14:9e:1b:36:0a:e1:5f:28:c3:d9:eb:72:69:
08:12:9e:d9:54:a9:ed:7d:0b:ae:68:7f:b9:0c:06:8e:af:af:
62:d2:b8:33:a0:2c:51:aa:28:c5:0e:ef:a0:0d:ec:68:48:68:
ea:84:ef:c8:63:70:f8:e9:97:df:75:12:63:ca:a0:4a:0d:47:
81:9a:f5:28:55:9e:6e:ac:eb:29:20:fd:7e:09:f5:13:82:48:
fb:9e:c4:6b:8f:11:12:c8:c2:7e:4a:91:bf:7d:5d:27:75:51:
89:68:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:04 2025 by rpki-client