Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
File: BDE43E626C927270D334976A9B665C443892DF57.mft (raw, json)
Hash identifier: 6JCB5Etz+FQSOdl6UnYC7atS/T+VWo8+uh5vIdFlnlA=
Subject key identifier: 83:41:F1:6D:C5:9A:36:18:EB:52:D6:88:92:7C:2D:D8:6A:E4:68:AB
Authority key identifier: BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57
Certificate issuer: /CN=BDE43E626C927270D334976A9B665C443892DF57
Certificate serial: 4B0E065E78284A05F047C4FAAB0BE396EDD6C792
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
Manifest number: 011F
Signing time: Sun 29 Jun 2025 07:01:22 +0000
Manifest this update: Sun 29 Jun 2025 06:56:22 +0000
Manifest next update: Mon 30 Jun 2025 10:28:22 +0000
Files and hashes: 1: BDE43E626C927270D334976A9B665C443892DF57.crl (hash: oFgTYekQ1c8pIaWswn3rHeQTRFSqfg0XybYy6xWf+hg=)
2: 3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa (hash: GWKkTNtEG1a63Qu8OhR6vF+4t4EKoI1EZSj7BNhuiYw=)
3: 3139322e3134312e3234302e302f32342d3234203d3e20323637353432.roa (hash: cYpAj5rgDR58Mw3pivkFtZn7NdA+uT4E+M5gGoGV4/A=)
4: 3139322e3134312e3234302e302f32322d3232203d3e20323637353432.roa (hash: XvVi8S94j3/kae6qTxK1+1xB7j15KqcYw5m/G30X+4Y=)
5: 3139322e3134312e3234312e302f32342d3234203d3e20323637353432.roa (hash: iJ6ltOQJVNmJbZeqxftraIZmSiZ90s12Z7mWp2U363U=)
6: 323830343a343330303a3a2f33322d3332203d3e20323637353432.roa (hash: tkDsUCaLqwHwe6ULCaF5Q1JfquPcF5Bcw3ECyhgtg5s=)
7: 3139322e3134312e3234322e302f32342d3234203d3e20323637353432.roa (hash: OL2ItaAq9W2vkNvG+8dkRmuvqXqbVX6IK2PH4GBGRZw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0e:06:5e:78:28:4a:05:f0:47:c4:fa:ab:0b:e3:96:ed:d6:c7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDE43E626C927270D334976A9B665C443892DF57
Validity
Not Before: Jun 29 06:56:22 2025 GMT
Not After : Jun 30 10:28:22 2025 GMT
Subject: CN=8341F16DC59A3618EB52D688927C2DD86AE468AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:4e:9b:cd:1f:89:fb:47:60:8f:ba:c1:e5:
8e:c3:3d:2a:b8:31:b4:8e:05:24:e3:35:e2:cd:3b:
1d:d9:0f:0e:36:c0:bb:c3:fc:4e:cc:cc:2c:87:bb:
2a:cf:0e:63:47:43:9d:5a:f7:7d:5b:a3:e8:10:5d:
20:7b:29:4a:4f:04:8e:a7:47:67:c4:c8:8d:22:79:
d7:eb:af:17:fc:d1:34:db:6f:d1:9e:2e:7a:92:e6:
d1:e5:a0:0f:5c:cc:4d:71:38:bf:38:7d:fd:11:8f:
fa:30:82:73:77:93:5e:2a:d4:70:de:f4:e6:6d:a3:
8d:c1:d0:17:1d:d7:fc:49:98:cd:59:3b:64:04:74:
64:d9:25:6d:f6:03:ac:bb:53:7c:9c:c9:7a:fd:cd:
ec:f2:a6:1f:53:b6:1e:aa:d1:f5:c2:e1:95:d0:b7:
31:d8:79:b5:91:5d:dd:ad:ce:44:db:d9:e5:0f:9a:
75:3a:82:b7:91:07:d7:01:4f:80:84:c8:57:5d:e1:
83:91:11:59:41:da:a4:c2:e3:a1:30:41:14:78:73:
df:49:c6:c6:a5:dd:b5:b5:76:1a:cf:79:75:ec:a1:
d2:6b:b7:e9:a4:e9:c2:c3:b0:8a:22:fa:c9:86:77:
e4:8b:cb:86:21:5a:c7:10:d5:a6:a5:df:6a:d6:2d:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:41:F1:6D:C5:9A:36:18:EB:52:D6:88:92:7C:2D:D8:6A:E4:68:AB
X509v3 Authority Key Identifier:
keyid:BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:52:65:ad:8e:a2:37:de:40:4a:59:5c:83:6e:74:df:c4:88:
63:22:e9:87:34:39:31:5e:6f:1e:46:d3:45:b0:ec:c7:90:89:
9b:bb:c8:4d:b9:3a:b8:ed:13:ac:3c:44:6b:41:ff:1a:44:ed:
f5:3f:e6:bb:b1:6f:4d:b7:b8:74:65:2b:f7:f2:b8:e3:55:49:
90:da:ec:c5:7a:c9:37:16:4e:91:8a:05:3e:e1:1b:87:b3:32:
dc:7a:f3:be:ac:a0:a3:c4:4c:8f:13:26:03:4a:ec:ef:51:39:
45:1a:29:36:70:58:a9:9d:7a:d2:fa:db:94:bc:8e:ce:09:ee:
3d:ae:08:2f:3c:44:a9:e1:01:d5:9e:98:a9:8a:14:43:6d:a9:
65:b1:ee:0a:7b:7d:3d:08:83:d1:01:6d:6c:ea:af:27:c0:82:
61:b2:13:18:06:1b:20:3d:8b:91:57:14:28:30:c6:12:06:c4:
f3:e2:9d:b7:ca:ae:ad:e9:7c:3d:2e:f0:66:46:d4:7e:41:aa:
09:c5:62:f7:4d:63:5a:ee:c4:9b:b6:b3:a5:c7:e8:22:95:fa:
00:dd:ea:f0:b7:01:15:6f:cb:24:aa:9e:5e:b2:2a:36:9d:7e:
b0:cb:0e:1b:c2:e5:67:b4:4f:fb:32:6c:d6:f9:d0:f1:ad:13:
f9:a9:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:29:20 2025 by rpki-client