Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
File: 433BC56DE61BF5759F79705E437131F09597AF13.mft (raw, json)
Hash identifier: JRG660iomacpCzDKz9ExfH1eyPp11jSvfhd2+5uAtCI=
Subject key identifier: 40:91:42:E0:A0:68:22:EB:C5:AB:EB:1E:19:6A:70:3E:D1:49:5D:0B
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Certificate issuer: /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial: 3681669E5D5C9399966D48C331CF4A3CB93F8681
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
Manifest number: 0109
Signing time: Fri 17 Oct 2025 09:43:29 +0000
Manifest this update: Fri 17 Oct 2025 09:38:29 +0000
Manifest next update: Sat 18 Oct 2025 10:37:29 +0000
Files and hashes: 1: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: lSHjL4SYeuodW0xgVpynxr5uWpWZiUN+/cxrqS2wpvk=)
2: 433BC56DE61BF5759F79705E437131F09597AF13.crl (hash: 8CNSvULhmkD7jYGB10FAj6Lw111rpBNUcgS5olKbFHI=)
3: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: EZAq029zsCtQXRzu/J/8xnnemD6RLViOIikO8FPSvqE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:81:66:9e:5d:5c:93:99:96:6d:48:c3:31:cf:4a:3c:b9:3f:86:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
Validity
Not Before: Oct 17 09:38:29 2025 GMT
Not After : Oct 18 10:37:29 2025 GMT
Subject: CN=409142E0A06822EBC5ABEB1E196A703ED1495D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:c4:2c:d2:00:a8:3f:1a:76:61:9d:93:43:
a3:bd:c0:8f:67:7f:f0:ea:2e:a5:df:a2:04:61:02:
17:20:9d:c0:23:2c:cb:68:43:6f:54:cb:64:17:cb:
82:11:2e:97:b1:85:be:ff:70:f3:25:e7:ba:4d:0d:
19:c0:bb:97:30:ca:f0:fc:48:a3:8c:76:10:ee:bb:
e6:ca:2c:c1:b8:a7:04:ee:2b:21:b2:c8:96:27:85:
5d:a6:c5:f8:3a:b1:5c:ae:45:fd:be:3c:e1:80:c1:
13:05:1e:f8:c5:38:d6:0d:88:4c:b3:d5:e8:98:71:
da:53:a6:7e:b6:65:c2:96:a4:53:a1:24:de:0b:7c:
44:a4:87:a2:a1:b0:bd:11:fb:85:a8:1a:63:23:8a:
d5:76:f0:e8:04:b9:d1:24:db:81:0d:80:26:7b:41:
9d:b0:3d:b4:6e:cf:10:c6:ce:b6:7e:1d:d9:1f:86:
1b:c3:00:46:db:a2:f9:d4:2c:63:65:9c:88:86:65:
9d:88:7b:e1:de:56:48:99:32:3a:75:24:57:e0:30:
2d:13:a5:98:93:f3:e9:b2:c8:9b:c4:c6:1b:aa:85:
e7:00:3f:e6:82:96:86:d4:56:d5:ca:4b:da:09:fe:
97:09:47:af:91:8b:33:13:98:c9:51:2f:f7:c6:42:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:91:42:E0:A0:68:22:EB:C5:AB:EB:1E:19:6A:70:3E:D1:49:5D:0B
X509v3 Authority Key Identifier:
keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3e:02:e8:0b:a1:4e:c6:e0:7c:a6:dd:83:0c:52:05:69:eb:
0d:f9:8b:63:38:45:ee:7b:ba:47:65:e9:d4:2d:ff:a1:47:2a:
dc:32:e8:94:9a:8c:58:0d:d8:b9:77:fa:fa:ce:a9:78:d3:6a:
7b:36:05:7a:79:c6:f0:df:87:35:d0:75:05:c7:dc:67:db:00:
c3:69:92:6c:d0:f4:ad:76:dc:e4:3b:c7:12:24:40:01:86:7a:
fd:d1:cc:a5:91:ed:9e:cd:80:ba:47:27:af:e2:5f:46:15:54:
f7:07:cd:cb:93:17:f0:77:b2:77:a8:2f:2b:97:00:79:c1:64:
12:ee:d9:66:47:6c:2e:4a:b0:e9:bd:8c:1f:2c:ae:91:93:60:
ae:fa:cf:95:d3:e9:da:2d:1f:db:74:bb:e3:01:e7:41:5d:64:
6b:ae:ac:30:c6:78:b3:bb:fe:e4:e3:a3:61:f6:3b:e4:63:c1:
3f:0a:a1:b3:77:28:8f:bc:6b:4b:02:5d:7e:89:1c:9a:66:7b:
96:d0:89:28:24:2f:ce:03:04:78:56:34:3c:21:b1:57:1b:76:
e4:d4:17:a5:95:d4:ce:e2:8e:58:49:1d:49:bb:05:9c:4b:b0:
c1:b0:3d:46:cf:89:81:6f:a4:ff:ac:3e:c9:4d:a5:e4:b7:17:
ae:03:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:04 2025 by rpki-client