Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.mft
File: 4B2729CF8C18402C5DC7D25D3A9CD209AD820096.mft (raw, json)
Hash identifier: Q7J8OtFMJ8Gc3kH7axTBjMBzo8aCy29qd7MCHoi54Jc=
Subject key identifier: F6:ED:B5:54:ED:AE:1D:CC:E0:00:72:42:3C:85:59:63:BB:E0:F5:29
Authority key identifier: 4B:27:29:CF:8C:18:40:2C:5D:C7:D2:5D:3A:9C:D2:09:AD:82:00:96
Certificate issuer: /CN=4B2729CF8C18402C5DC7D25D3A9CD209AD820096
Certificate serial: 57B5ED24F87ADAF393BF39D0098EBAE99F24B8D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.mft
Manifest number: 02EE
Signing time: Fri 17 Oct 2025 08:19:48 +0000
Manifest this update: Fri 17 Oct 2025 08:14:48 +0000
Manifest next update: Sat 18 Oct 2025 10:19:48 +0000
Files and hashes: 1: 323830343a373735383a3a2f33322d3438203d3e20323731313732.roa (hash: RngR9Jku6zsCagpUefZ1Bxq+jf2zGZrl1xavrQA5ChU=)
2: 4B2729CF8C18402C5DC7D25D3A9CD209AD820096.crl (hash: Oh9rdFyVgisrtu+VOg7Sii5zQdu6K0m5jIlrNQN+IsQ=)
3: 3137372e3232332e3133362e302f32322d3234203d3e20323731313732.roa (hash: 1urKb4JpGzzollF4P+BfJn8mc5LThzvZf8vZJbWsBdk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b5:ed:24:f8:7a:da:f3:93:bf:39:d0:09:8e:ba:e9:9f:24:b8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B2729CF8C18402C5DC7D25D3A9CD209AD820096
Validity
Not Before: Oct 17 08:14:48 2025 GMT
Not After : Oct 18 10:19:48 2025 GMT
Subject: CN=F6EDB554EDAE1DCCE00072423C855963BBE0F529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:9d:5f:00:1d:fe:48:7a:31:9d:76:1d:ed:
4d:e9:61:1e:f7:c8:b1:05:44:ab:38:97:27:f3:3e:
27:2f:1d:0d:3f:99:a3:3d:e7:1f:89:ca:ed:21:32:
d5:d0:b2:2c:8a:03:87:7f:1f:9c:c1:9b:9c:5b:45:
df:9c:de:33:04:c4:27:b5:d6:ca:d1:8f:fa:51:95:
21:e9:8e:7f:8e:c6:23:ac:3a:68:25:09:1d:8b:ed:
48:3c:a9:5c:53:db:70:db:c1:bc:42:35:98:1f:6a:
88:49:f6:da:27:a9:93:3d:6b:c5:0e:18:dd:56:ba:
5c:07:19:7c:bf:33:ee:7a:ce:20:6d:9b:3e:92:d1:
c2:2a:85:a5:04:68:13:19:31:3e:b8:6d:1c:04:99:
62:05:fe:ba:bb:86:90:37:a2:25:7d:62:ba:de:5e:
86:03:2b:e7:53:19:a1:87:71:1b:59:04:85:29:b4:
3c:39:fe:5f:3b:27:a1:f9:41:e4:51:22:a3:37:32:
bf:65:c2:52:d8:32:1d:42:90:8e:34:b0:33:c9:5f:
3f:e0:38:c2:2c:ee:09:1f:58:17:cd:5c:7e:35:a6:
34:2a:06:92:ec:34:94:03:8e:63:bc:05:f9:da:14:
50:59:eb:df:10:91:e8:a1:35:74:f2:80:04:4e:75:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:ED:B5:54:ED:AE:1D:CC:E0:00:72:42:3C:85:59:63:BB:E0:F5:29
X509v3 Authority Key Identifier:
keyid:4B:27:29:CF:8C:18:40:2C:5D:C7:D2:5D:3A:9C:D2:09:AD:82:00:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:a2:0f:1a:50:51:b1:f3:08:59:29:5e:7e:33:1e:a2:0f:
3e:cf:d9:4c:c0:e5:86:23:e7:96:4f:f8:31:e4:0c:5c:8c:9b:
27:8a:d8:b6:51:32:3b:65:e9:25:9e:4f:09:30:3b:ec:25:c9:
38:ed:a8:f2:61:c8:b0:ad:40:4a:44:dc:9b:a5:67:20:20:34:
e6:6b:0a:1d:dc:e9:21:4b:25:cb:eb:bd:0c:88:f7:6b:d3:c4:
f9:33:5a:30:15:e9:78:77:01:d4:48:02:35:8b:6d:97:50:df:
0d:0b:01:6e:03:40:03:de:bc:32:7c:e4:c8:47:05:32:53:17:
2b:70:cc:86:5f:86:af:06:51:ec:be:d2:64:f1:d9:5d:3b:80:
4a:22:d6:d0:1f:31:7b:fe:7c:17:7f:4f:d1:85:39:46:90:f4:
f9:59:3a:7d:ae:fd:fb:72:dc:60:a5:de:98:93:8c:49:0b:ca:
85:7e:ac:2b:55:7e:ad:59:d9:af:7b:af:76:1f:d4:7b:94:a8:
6b:2d:d3:f3:0e:be:2f:63:23:4c:8f:1f:c6:be:a7:b1:cd:54:
9c:22:b8:d7:46:1a:2d:68:85:21:0d:20:92:e3:26:5d:97:9a:
c0:46:f7:ab:d5:5b:ed:32:f9:35:02:88:cc:d2:d2:ee:06:50:
d3:89:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:58:28 2025 by rpki-client