Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/6D33F51873A4A7C93A27E270462259C9A2B02C59.mft
File: 6D33F51873A4A7C93A27E270462259C9A2B02C59.mft (raw, json)
Hash identifier: uaFE4DZ8AicYhJM/ymn1P+l8U07/l2GI056aSyiIreM=
Subject key identifier: 5D:6D:65:18:96:53:ED:51:66:38:69:64:80:09:43:6B:20:1D:9F:6D
Authority key identifier: 6D:33:F5:18:73:A4:A7:C9:3A:27:E2:70:46:22:59:C9:A2:B0:2C:59
Certificate issuer: /CN=6D33F51873A4A7C93A27E270462259C9A2B02C59
Certificate serial: 28EEBB4BC8725B7D665AAA815952339756391608
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D33F51873A4A7C93A27E270462259C9A2B02C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/6D33F51873A4A7C93A27E270462259C9A2B02C59.mft
Manifest number: 16
Signing time: Thu 23 Jul 2026 12:05:14 +0000
Manifest this update: Thu 23 Jul 2026 12:00:14 +0000
Manifest next update: Fri 24 Jul 2026 13:48:14 +0000
Files and hashes: 1: 323830343a386566383a3a2f33322d3334203d3e20323733343539.roa (hash: JhFgb7ImoIpAkSVfajrl4hHn0pf00C7rjEQlFGfpIwE=)
2: 6D33F51873A4A7C93A27E270462259C9A2B02C59.crl (hash: Jk218dIidPuzwDmf4jaQR832Nxym6orgmCDz5UwLhnI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ee:bb:4b:c8:72:5b:7d:66:5a:aa:81:59:52:33:97:56:39:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D33F51873A4A7C93A27E270462259C9A2B02C59
Validity
Not Before: Jul 23 12:00:14 2026 GMT
Not After : Jul 24 13:48:14 2026 GMT
Subject: CN=5D6D65189653ED51663869648009436B201D9F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:cb:ac:fe:f8:48:10:4a:5b:d7:3e:cc:20:
cf:60:f5:1f:12:02:96:06:8d:74:73:83:df:61:8d:
39:38:df:fd:d0:c1:2b:c2:4a:3e:2e:fc:ed:28:78:
d8:26:76:fd:6d:bc:fe:9c:bb:c1:9d:0e:00:b4:27:
fc:70:bf:67:07:85:67:52:58:e5:bd:23:a0:69:6d:
65:6a:b8:02:6d:d4:63:b2:65:a3:ee:72:3f:e2:09:
62:58:c3:37:de:41:30:ba:ad:f3:72:e8:b0:ad:31:
7e:b7:8d:22:87:98:90:8f:ff:07:ab:6c:70:b0:53:
9a:ab:c6:a3:08:ea:1b:00:44:34:5e:e2:86:6f:08:
2d:34:7f:2c:e2:b7:22:f5:45:6a:39:02:15:53:cb:
a3:71:f5:8e:bd:29:32:ff:a6:5a:b7:1e:90:f9:b8:
0c:91:1a:e6:b4:fa:66:94:2a:9b:bc:5c:94:a6:e7:
86:3b:38:4e:b7:3b:80:38:d8:18:9d:19:19:f5:69:
b6:a3:9c:39:dc:7e:44:56:ce:97:5a:1f:52:2d:2d:
b5:63:22:31:4c:06:23:5c:2a:47:99:b3:9b:07:3f:
f1:b0:fd:87:ee:b4:b5:4c:37:ac:32:51:cb:f4:2c:
a5:0c:9d:d7:69:fd:24:b6:61:8d:8d:3b:05:99:f4:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6D:65:18:96:53:ED:51:66:38:69:64:80:09:43:6B:20:1D:9F:6D
X509v3 Authority Key Identifier:
keyid:6D:33:F5:18:73:A4:A7:C9:3A:27:E2:70:46:22:59:C9:A2:B0:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/6D33F51873A4A7C93A27E270462259C9A2B02C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D33F51873A4A7C93A27E270462259C9A2B02C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/6D33F51873A4A7C93A27E270462259C9A2B02C59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5a:7b:f9:73:9c:f4:be:fd:ae:38:7d:01:2c:99:18:69:b1:
92:a3:fc:c0:13:f9:a0:1c:c1:f1:fa:80:45:4a:03:13:97:58:
2f:50:ab:11:e9:a2:30:9e:64:cc:c5:0d:9a:1d:25:06:4b:85:
57:a1:47:48:84:b6:8e:9e:e6:da:67:69:42:cf:0d:6e:7b:04:
03:12:f0:ad:5b:ca:f5:48:b5:7b:93:ca:56:ac:3e:9e:66:f7:
aa:f1:52:c7:0c:99:f0:f4:b6:70:38:b0:a5:b2:31:d3:e5:e4:
03:13:17:94:2b:9f:28:81:50:29:0d:09:a0:47:89:31:e5:29:
a4:fd:ee:70:09:fd:67:7b:a2:19:5c:ec:0b:82:4c:27:47:bf:
f9:c6:cf:33:64:29:15:84:fa:de:ff:d1:01:cb:85:0e:b4:b8:
a7:d3:60:e7:aa:77:96:02:f9:10:65:3c:e2:09:79:9f:56:b3:
f4:cb:96:e2:c9:02:99:42:13:fd:b2:80:e7:8c:46:44:51:6f:
ab:a2:95:b4:5b:e8:3c:ce:aa:21:e9:ce:53:52:27:07:fb:eb:
43:4f:8d:b0:6d:d4:0c:ac:cf:ad:2a:ca:4c:90:b0:0d:10:a1:
ca:bc:55:46:7e:15:f8:6c:ff:cf:53:f7:25:21:06:0d:89:c3:
23:0c:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:34 2026 by rpki-client