Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.mft
File: A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.mft (raw, json)
Hash identifier: QcIAv9rrLKzX6AV9lH7aMgnni8Uvd8FG/3n8NIL9ess=
Subject key identifier: C8:85:39:DB:3B:72:72:A9:E5:57:B2:A6:C4:C9:F3:B9:47:91:D9:14
Authority key identifier: A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA
Certificate issuer: /CN=A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA
Certificate serial: 4A2B83A285DCB0F25E7E57B52E9DF569C0701C65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.mft
Manifest number: 30
Signing time: Wed 20 Aug 2025 03:22:43 +0000
Manifest this update: Wed 20 Aug 2025 03:17:43 +0000
Manifest next update: Thu 21 Aug 2025 06:51:43 +0000
Files and hashes: 1: A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.crl (hash: dGyzICi5UpqxeaFZ/lOT8Hq3jPJp7WZckIc9LA9B2Mw=)
2: 3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa (hash: 6EotP9RyGs6g/BR63lIOHe3Ct4kjTAiprzrk8K5hlmA=)
3: 323830343a366439303a3a2f33322d313238203d3e20323730353431.roa (hash: swBW3pusBeatAmY5yEvWPZ9jPCdYzNG1b8A38zWPj0U=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:2b:83:a2:85:dc:b0:f2:5e:7e:57:b5:2e:9d:f5:69:c0:70:1c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA
Validity
Not Before: Aug 20 03:17:43 2025 GMT
Not After : Aug 21 06:51:43 2025 GMT
Subject: CN=C88539DB3B7272A9E557B2A6C4C9F3B94791D914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e7:3d:ea:4d:cc:e7:5e:0e:b7:86:33:38:d8:
8d:97:b6:80:f7:db:c0:5f:8a:1f:c5:1f:12:c6:0a:
13:5f:a3:23:9e:bf:27:81:9c:6c:94:c3:fe:f6:05:
cb:0e:34:68:7a:91:33:38:1c:e4:3d:bd:1f:48:de:
96:91:3d:5b:d1:01:1c:4e:36:32:19:87:c5:97:e1:
7b:5e:bc:f9:8b:75:72:f6:72:55:00:da:d7:f9:1d:
d3:ad:c7:42:9f:9d:84:66:c3:b9:f8:e4:ca:42:b9:
d7:41:96:8a:4a:c9:1f:81:3c:d7:51:4b:75:63:9d:
b1:d6:1e:c5:2a:9d:86:a3:d7:43:f0:86:44:5e:6e:
76:ff:3b:ba:ef:75:ff:60:37:9e:18:c0:41:c3:ee:
8d:2d:ae:72:e6:39:01:69:70:70:c0:c6:2c:09:0a:
61:74:4d:7b:5a:56:59:e3:86:53:b4:15:7a:e5:fc:
0b:fe:c1:3d:8b:92:a2:12:a3:a1:b6:d6:87:be:66:
45:18:f3:0a:71:f6:e7:46:41:06:77:83:31:d8:7d:
8d:fa:6d:9b:c4:8b:1e:fc:90:dc:0f:df:a9:f4:6e:
8f:be:e8:88:33:4f:3f:97:8b:98:e2:0f:1f:89:3b:
2c:5e:48:87:fd:6c:4b:08:d6:5f:2f:f0:d4:58:7d:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:85:39:DB:3B:72:72:A9:E5:57:B2:A6:C4:C9:F3:B9:47:91:D9:14
X509v3 Authority Key Identifier:
keyid:A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8b:e4:ec:cf:6b:a8:81:a7:3f:04:a6:fc:93:93:80:6d:f6:
80:0b:77:9c:32:77:45:0b:1f:90:1b:f1:a7:50:c9:91:9e:cb:
6f:85:1c:20:e0:3d:11:83:4c:35:ae:f3:76:5a:87:81:66:73:
92:7b:75:82:ce:eb:73:9a:cc:fe:9d:44:bc:54:b9:bc:05:10:
81:5c:c8:a8:7c:65:95:ef:54:3a:84:70:ba:29:0f:9c:ec:1b:
1b:5d:32:02:1f:85:07:ff:21:e0:26:51:d6:16:07:f9:c1:e0:
5d:63:79:bb:53:9e:44:5f:21:dc:3f:87:7a:2b:c6:59:3b:15:
78:68:d9:09:05:f7:5a:2f:30:cc:24:16:e3:1b:6d:49:e3:a5:
f1:5a:9c:f2:7d:fb:d0:e9:31:15:17:03:9c:32:9c:2b:1e:f9:
6a:35:59:9f:44:fa:a9:c3:10:b9:43:34:d3:e0:d7:0f:7e:25:
75:a5:7b:d6:87:d0:2f:d9:80:6e:a5:a7:84:9e:5f:6b:8e:fa:
ab:1d:94:f8:6e:a8:0d:e2:95:b3:b0:ec:9b:31:fd:dd:7e:57:
e6:51:d5:8a:ee:f0:01:26:52:d0:ba:2e:94:bb:39:ea:8e:ea:
c0:1d:af:7b:6c:49:d6:91:fd:d8:3b:af:c9:02:41:6f:21:6e:
89:64:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:35 2025 by rpki-client