Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft
File: CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft (raw, json)
Hash identifier: Be/j1ZINJcGatzhUW8WLBUiPfB55Itxz7agLbbgdm9U=
Subject key identifier: 4C:ED:69:AC:99:18:96:1E:32:1C:B1:C2:6A:36:2C:39:2C:21:96:00
Authority key identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
Certificate issuer: /CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Certificate serial: 62EB6EDDEDF6E2E0DAC1F7FB08ECB89E6E8F8917
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft
Manifest number: 0225
Signing time: Sat 28 Jun 2025 22:20:13 +0000
Manifest this update: Sat 28 Jun 2025 22:15:13 +0000
Manifest next update: Sun 29 Jun 2025 23:09:13 +0000
Files and hashes: 1: 323830343a353434383a3a2f33322d3336203d3e20323638363430.roa (hash: 38oZ7qGP7oZFwjPXnHJH0jKBkkY+GIWZKLt9hNZqu60=)
2: 34352e3136342e3139362e302f32322d3234203d3e20323638363430.roa (hash: aURF8xV/1WfF2q4B+wUE+APyvcwke9zut2utOvhQT0Q=)
3: CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl (hash: KQjDmeOdnf6e0Gkz0kLfkME4iKgDL6KgEtnWcCLJcxc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:eb:6e:dd:ed:f6:e2:e0:da:c1:f7:fb:08:ec:b8:9e:6e:8f:89:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Validity
Not Before: Jun 28 22:15:13 2025 GMT
Not After : Jun 29 23:09:13 2025 GMT
Subject: CN=4CED69AC9918961E321CB1C26A362C392C219600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:a4:81:bf:68:aa:72:59:cd:3d:77:ac:92:
05:79:cb:45:bd:11:5e:50:00:ac:b0:e8:bf:36:fa:
a2:26:31:09:38:aa:67:9e:69:a0:e6:fd:fe:ce:2b:
97:c4:26:40:52:7b:57:2b:37:a5:4c:2f:d7:81:75:
ae:e9:e8:43:82:c0:83:8c:26:a9:3d:14:4e:82:1e:
5e:fd:41:7d:4c:cd:05:d3:6e:73:4e:37:00:bb:bb:
15:e2:32:af:57:23:8b:a5:df:b4:5f:85:bb:8e:8c:
ea:ff:bd:cd:77:5f:4d:b1:a5:5e:71:ba:bc:ae:ec:
23:4b:c6:29:fb:4f:a8:e2:06:58:17:bb:e0:01:63:
d9:b7:d8:44:14:c6:f2:d4:cb:65:87:ed:5d:2b:7c:
3f:b0:c4:6c:e5:5f:14:1e:98:28:b5:a8:6d:d3:20:
46:f4:fa:62:bc:51:5d:76:dd:cc:0f:9e:c4:db:57:
91:f3:61:b9:a7:c9:ec:cd:f5:ad:7b:b6:a4:05:64:
18:2e:32:cc:e6:6e:77:23:db:44:b3:04:27:5c:eb:
ec:e1:05:c1:25:ed:50:c1:1c:65:74:73:dc:5e:83:
d4:b5:0e:0d:98:bf:36:fa:93:3a:06:ac:6f:fd:ea:
8b:96:cc:c4:47:e5:29:26:8f:64:6f:77:7a:a8:61:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:69:AC:99:18:96:1E:32:1C:B1:C2:6A:36:2C:39:2C:21:96:00
X509v3 Authority Key Identifier:
keyid:CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bb:36:04:6a:08:fb:31:bd:dd:aa:a5:02:d9:98:28:35:0e:
f9:11:07:0c:bf:51:ba:25:a4:ea:55:1f:59:7c:1e:c2:70:82:
db:4f:74:40:bb:4c:c0:c1:01:ca:1c:5d:de:aa:22:6e:a9:b6:
cf:e2:e8:e8:83:f0:83:2d:83:90:d0:3f:07:59:17:1e:4e:9f:
e1:d8:d0:70:f1:54:da:bb:31:af:6d:42:33:a1:2f:8d:84:87:
9b:54:c4:6a:1e:f8:61:9b:6d:b1:b0:22:98:25:68:27:7b:dc:
35:cd:a8:40:d4:2d:df:2f:ae:3b:f9:7d:22:d2:0e:8e:2a:89:
fb:a9:10:d9:1b:59:48:5f:9b:ee:6e:6f:ef:1d:28:1e:4c:4e:
bc:d5:da:83:13:9a:52:92:8b:66:a8:d5:58:7e:72:88:63:34:
1d:01:cb:5e:2c:91:92:f6:21:8b:9e:e9:2f:be:57:9b:41:83:
a8:a2:cc:00:bc:1d:d6:bb:5a:a1:b9:5d:4c:91:43:19:d8:df:
7b:89:65:0a:b1:ec:17:db:0e:b8:8e:3c:aa:ed:42:90:00:80:
c2:49:14:42:af:75:84:27:bd:86:a1:98:96:d2:20:f8:87:76:
ba:29:12:28:82:a9:1d:56:a8:ad:ef:d3:d0:92:a1:d2:4f:db:
97:04:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:32:46 2025 by rpki-client