Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft
File: AFE965BA817F79A154F92490C65530EB3402BE56.mft (raw, json)
Hash identifier: pKFVrxMdTo+GkCqDcr7jXx4g0+KpUGMRUBQBFq3kN2g=
Subject key identifier: 2D:B6:54:99:CF:68:9D:54:69:A1:77:14:1E:DF:19:AD:95:F2:2D:5F
Authority key identifier: AF:E9:65:BA:81:7F:79:A1:54:F9:24:90:C6:55:30:EB:34:02:BE:56
Certificate issuer: /CN=AFE965BA817F79A154F92490C65530EB3402BE56
Certificate serial: 25C7851A10EB10D5D402232ADD5518E63ACEE264
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFE965BA817F79A154F92490C65530EB3402BE56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft
Manifest number: 02A5
Signing time: Thu 16 Oct 2025 19:15:06 +0000
Manifest this update: Thu 16 Oct 2025 19:10:06 +0000
Manifest next update: Fri 17 Oct 2025 22:37:06 +0000
Files and hashes: 1: AFE965BA817F79A154F92490C65530EB3402BE56.crl (hash: KMtjznNQwig7YmDzX/dh20rWOldmwfiuqc4imVaWFkU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c7:85:1a:10:eb:10:d5:d4:02:23:2a:dd:55:18:e6:3a:ce:e2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFE965BA817F79A154F92490C65530EB3402BE56
Validity
Not Before: Oct 16 19:10:06 2025 GMT
Not After : Oct 17 22:37:06 2025 GMT
Subject: CN=2DB65499CF689D5469A177141EDF19AD95F22D5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:15:01:d7:d4:76:f3:9b:fb:ce:cc:41:0f:
ca:73:06:8e:67:d2:fb:ab:95:e5:aa:cf:e2:76:6a:
cb:61:af:6e:ad:de:67:97:87:34:0b:3f:3d:9a:8d:
5a:86:ef:93:84:67:31:b6:33:fb:07:45:6e:58:6a:
34:44:85:33:34:7d:c9:fa:cd:9b:48:e7:8a:a4:80:
5f:aa:21:f2:cd:67:18:7e:77:b4:3d:76:9d:3a:98:
e9:ad:15:4d:b2:32:02:31:4c:a8:b4:09:60:62:3e:
f7:9b:81:e4:4e:3a:3e:a6:35:40:5f:21:db:2e:ba:
0e:34:f7:c3:4e:2e:c6:df:6f:2e:d8:a6:e6:4d:26:
96:9c:40:e7:00:60:c4:cb:ed:19:14:20:0f:23:36:
d7:25:f9:5f:0c:11:1b:22:05:f2:86:14:9b:ec:8a:
fb:3a:5b:a8:41:64:ac:87:ff:1d:dd:d8:3b:67:91:
0a:47:1c:08:04:35:5c:ed:c2:83:e3:cb:61:ac:7e:
8e:06:b1:75:99:c8:38:8d:1a:bf:d6:a3:00:aa:5a:
fd:df:d6:75:14:13:41:0e:8d:1e:3b:dd:7c:09:83:
92:05:cf:4f:a6:61:42:d1:3d:72:5c:4e:c3:cd:8e:
58:f3:16:e9:cb:80:cf:cc:53:e9:09:7b:3a:d4:80:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:54:99:CF:68:9D:54:69:A1:77:14:1E:DF:19:AD:95:F2:2D:5F
X509v3 Authority Key Identifier:
keyid:AF:E9:65:BA:81:7F:79:A1:54:F9:24:90:C6:55:30:EB:34:02:BE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFE965BA817F79A154F92490C65530EB3402BE56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:a3:e3:72:a6:1f:d4:88:0a:ef:60:92:cb:dc:65:db:2d:
e5:13:92:fd:fb:a4:5f:92:55:94:d5:bb:58:f5:9d:a2:b0:8c:
a0:a1:26:63:7d:ea:3c:5a:5d:6d:0b:cb:74:43:73:e0:53:6d:
84:2d:94:35:71:6c:94:fd:5d:f5:7a:07:69:3f:f1:de:1a:a5:
8e:5f:fe:11:86:30:7c:ea:6a:4b:51:e0:49:18:1a:03:80:58:
ac:49:be:4b:52:7f:98:d6:ce:5f:46:e6:55:18:b7:9d:d4:8c:
e6:39:82:04:44:52:83:41:57:58:3a:9b:ad:32:27:bc:4e:31:
c5:1f:2f:c1:e9:de:9f:5f:f0:37:3c:f9:64:13:e6:e5:23:c0:
58:6b:b3:bd:52:08:1e:78:a1:1c:d4:33:44:b6:e6:3b:bc:af:
77:68:08:87:29:bf:55:e0:b2:06:de:23:d3:0b:70:3d:0c:fd:
26:86:7a:f8:40:29:0e:32:7c:b0:d8:70:e5:52:77:48:8d:1f:
b8:d8:a3:b3:2f:c4:96:32:d2:56:57:c8:72:4d:c2:60:91:56:
09:43:ed:1a:3c:d1:19:0e:b7:7a:7c:c5:84:35:ca:c4:a6:ad:
d6:ae:5e:c6:3a:38:3b:26:8c:b4:d3:c3:77:65:4e:b3:84:5b:
fd:81:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:47 2025 by rpki-client