Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/C743D5F5FC403DB7624D8B21C0325E10BB542EC6.mft
File: C743D5F5FC403DB7624D8B21C0325E10BB542EC6.mft (raw, json)
Hash identifier: 8nGd/htMcuTq6sYDbdldA6i1dc1z+x6Q2y6qMaOolNw=
Subject key identifier: DB:6B:18:2B:97:7F:47:CF:85:27:F8:35:6A:83:8A:28:6D:A9:2B:CD
Authority key identifier: C7:43:D5:F5:FC:40:3D:B7:62:4D:8B:21:C0:32:5E:10:BB:54:2E:C6
Certificate issuer: /CN=C743D5F5FC403DB7624D8B21C0325E10BB542EC6
Certificate serial: 6D9BBCB5150A6B10BFA7108A59C0931AB1283710
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C743D5F5FC403DB7624D8B21C0325E10BB542EC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/C743D5F5FC403DB7624D8B21C0325E10BB542EC6.mft
Manifest number: 0217
Signing time: Fri 17 Oct 2025 14:39:52 +0000
Manifest this update: Fri 17 Oct 2025 14:34:52 +0000
Manifest next update: Sat 18 Oct 2025 14:43:52 +0000
Files and hashes: 1: 3138312e3232352e3137322e302f32322d3332203d3e20323730393930.roa (hash: o85r0Zq+o61BFaelaeaEDuMqFOSpkOwoSesrSmaDV6Q=)
2: 323830343a373439343a3a2f33322d313238203d3e20323730393930.roa (hash: RzYKFzKc/eu25++q6fu1QyY66xgGnM5MPvlKl5/HLPs=)
3: C743D5F5FC403DB7624D8B21C0325E10BB542EC6.crl (hash: Tb9izYZ67CJrcFIdZyNyapUnAczGB0uDyW5MGnS/OAQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9b:bc:b5:15:0a:6b:10:bf:a7:10:8a:59:c0:93:1a:b1:28:37:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C743D5F5FC403DB7624D8B21C0325E10BB542EC6
Validity
Not Before: Oct 17 14:34:52 2025 GMT
Not After : Oct 18 14:43:52 2025 GMT
Subject: CN=DB6B182B977F47CF8527F8356A838A286DA92BCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c3:77:7c:bf:d6:7a:9e:1f:21:95:4f:14:58:
59:73:bb:c9:e2:f3:dc:47:25:5e:a1:bb:7b:bd:a6:
63:e6:e1:8c:3e:90:3a:fc:85:0f:4f:ea:d1:8d:ac:
16:13:d4:f4:c0:87:fc:07:1a:5d:5f:49:b4:5d:72:
7a:ed:c5:f1:8f:e1:b9:99:42:40:24:ee:b8:f8:60:
82:53:b4:9c:74:f1:41:5a:11:a7:a8:12:c1:cd:2c:
30:4d:18:61:42:76:33:da:40:63:99:c1:40:7c:ec:
34:c8:21:16:a1:76:e8:53:90:4a:c6:38:3f:67:5c:
8a:44:a0:c0:9a:d1:0f:cc:06:98:c5:6b:01:af:f5:
48:2b:ea:cf:f2:b1:2c:ce:c6:77:53:5c:40:6f:2a:
a4:d3:19:65:40:cd:de:00:f0:e5:e6:9e:aa:78:d1:
44:88:08:78:b6:15:60:96:7d:d6:87:a7:2c:04:b0:
c1:5e:24:63:cd:a5:06:08:d1:3b:6e:96:f9:e6:84:
af:6c:6f:7d:1d:09:5e:e3:6f:7b:3e:98:44:5f:0d:
af:9d:93:78:ea:36:64:b3:2c:62:af:ec:ff:ec:0d:
89:0c:1e:22:7e:7d:07:1b:00:35:0a:95:f6:7f:fd:
7e:29:21:0a:da:53:25:7d:29:b4:a8:a1:7b:5f:13:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6B:18:2B:97:7F:47:CF:85:27:F8:35:6A:83:8A:28:6D:A9:2B:CD
X509v3 Authority Key Identifier:
keyid:C7:43:D5:F5:FC:40:3D:B7:62:4D:8B:21:C0:32:5E:10:BB:54:2E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/C743D5F5FC403DB7624D8B21C0325E10BB542EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C743D5F5FC403DB7624D8B21C0325E10BB542EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/C743D5F5FC403DB7624D8B21C0325E10BB542EC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:40:90:d7:39:80:14:12:5f:70:fd:4c:e9:c4:5a:0e:10:29:
00:12:57:ea:2a:27:47:6b:b5:68:19:74:98:b9:97:e9:9b:79:
df:f6:0a:b6:09:ac:5c:df:77:cd:81:fb:ed:21:f3:db:6a:a6:
3f:d9:6e:16:f4:e9:d0:ce:3a:e7:af:4d:28:97:d5:7b:2f:be:
04:1d:64:0a:a3:de:5d:c4:70:ad:94:55:26:f4:ad:46:94:96:
6e:7e:51:cd:7e:7e:6d:38:b9:55:b6:98:41:99:0f:6d:8f:f3:
94:b9:26:de:70:5a:59:dc:6b:99:5e:50:0b:35:b3:43:45:4b:
51:98:f3:e4:2e:67:5d:08:a2:7b:1f:56:0d:04:35:90:42:03:
49:dc:6e:e8:21:17:41:68:99:69:b0:72:a9:38:11:9b:fd:7a:
cf:00:a3:79:b8:6f:4a:f6:1d:73:bd:81:36:c5:32:b0:f3:4a:
53:e6:88:7d:6a:98:b9:4c:7e:96:b8:93:88:a6:7d:33:47:87:
f9:98:7d:7d:8c:ac:31:9d:74:d1:99:86:d8:85:f4:06:cf:a6:
db:db:6c:87:42:21:bd:b2:03:b2:e1:47:4f:95:a7:87:be:c3:
a7:f3:ab:d1:6f:38:42:0a:90:8d:f2:4e:ae:96:93:26:80:47:
a4:79:10:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:33 2025 by rpki-client