
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.mft
File: D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.mft (raw, json)
Hash identifier: qDRt6uJqlIkDT7V/MRkGdOxCtQ0FzzoTrizT5ueG4ts=
Subject key identifier: 9F:C8:B6:3C:0B:10:BE:4A:AA:97:C4:C5:C9:64:7C:74:BA:26:D7:70
Authority key identifier: D3:68:5A:EA:8F:FE:1C:8C:97:23:AB:24:C1:66:7D:BE:37:F9:C6:44
Certificate issuer: /CN=D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644
Certificate serial: 59673615D739988ED81AC34A1951AED1A77E5C0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.cer
Subject info access: rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.mft
Manifest number: 48
Signing time: Wed 07 Oct 2026 07:17:24 +0000
Manifest this update: Wed 07 Oct 2026 07:12:24 +0000
Manifest next update: Thu 08 Oct 2026 09:27:24 +0000
Files and hashes: 1: D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.crl (hash: Ym3erpkWdOorZr2+9DdAouU7dvZziRFZYlRIbudJclk=)
2: 323830343a393538633a3a2f33322d3332203d3e20323734353239.roa (hash: Rj0qcOxL1+Uj9t2vGvshea18OIn1lEWGW/oHof3R1p8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:67:36:15:d7:39:98:8e:d8:1a:c3:4a:19:51:ae:d1:a7:7e:5c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644
Validity
Not Before: Oct 7 07:12:24 2026 GMT
Not After : Oct 8 09:27:24 2026 GMT
Subject: CN=9FC8B63C0B10BE4AAA97C4C5C9647C74BA26D770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e4:72:a4:21:d9:5d:92:ab:b9:4b:e7:6d:3a:
8b:41:49:a8:58:a4:6f:62:72:b4:ce:00:18:ba:b3:
81:3a:29:46:92:2e:b8:be:a8:f7:b4:4e:f0:7b:be:
fc:ee:55:42:da:fb:41:ed:9d:75:d7:3c:77:46:b5:
b7:78:95:f7:ba:e2:a0:92:19:44:1c:10:13:8d:b0:
cc:dc:c7:3b:2a:41:72:20:3a:2c:be:80:5e:e0:45:
60:ba:24:74:9c:b6:85:55:e9:58:22:90:28:b6:5c:
96:c8:e8:1e:5a:df:20:d7:df:f3:9b:26:51:a0:c3:
e5:92:4e:89:f6:2f:e5:6e:83:1f:6a:6f:ad:b1:dc:
3c:dd:c1:bf:bf:2f:9c:3b:05:9a:3a:c0:1d:ed:c8:
18:ac:9e:85:78:ce:c3:32:4b:b4:e8:1e:67:fc:ab:
82:82:b3:0e:28:35:fb:5d:85:6a:80:84:d3:26:5b:
c0:6a:02:c8:74:71:06:47:4f:a4:19:db:37:04:e5:
18:cd:57:b7:6f:1d:a4:50:da:ee:a4:8a:58:e5:b0:
db:ac:58:50:6a:f6:fd:09:36:f4:8d:02:e3:bf:a5:
51:dd:94:42:a8:3c:6c:3c:8f:12:ba:6c:0a:77:ee:
8b:67:cf:26:b4:39:7f:bd:52:58:a6:b1:ae:b1:3f:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:B6:3C:0B:10:BE:4A:AA:97:C4:C5:C9:64:7C:74:BA:26:D7:70
X509v3 Authority Key Identifier:
keyid:D3:68:5A:EA:8F:FE:1C:8C:97:23:AB:24:C1:66:7D:BE:37:F9:C6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:d2:de:ed:1a:a1:0e:bb:f0:c6:75:ac:bf:0d:b6:6a:1d:
01:71:45:50:14:e1:6b:f5:8a:9e:2e:ca:64:74:ac:a1:6f:a1:
da:45:e3:7d:cb:e7:d3:f1:03:e7:86:36:7d:38:3c:cd:5a:87:
65:cc:da:fd:ce:f8:64:0a:7a:b5:61:61:9c:1c:64:76:da:38:
7b:3b:60:d1:53:7c:f3:83:94:34:46:4f:3c:f6:e2:ac:e6:1a:
37:69:38:3a:23:49:57:ab:f8:4a:e1:7e:f5:7a:ed:33:32:75:
ca:f8:f2:a6:22:10:03:19:00:d1:7f:46:1a:ce:7c:0b:92:6c:
a8:ec:b5:95:44:c5:26:ab:11:a9:e1:56:ea:63:41:7a:f2:26:
5c:5e:ff:95:b9:72:7b:5b:e1:78:a4:c4:ea:4d:99:34:da:1a:
eb:50:d8:7e:45:17:6b:64:b5:09:0b:ab:2f:4e:0b:14:9e:51:
04:95:f7:2a:78:6c:c7:c2:4d:b5:6d:1e:19:a4:c9:0e:0c:e5:
0d:8c:11:bb:66:33:95:da:c6:45:a7:fa:80:fc:e6:97:fc:5b:
ff:0d:c3:35:32:f1:d1:af:24:0c:77:65:9f:2a:ed:49:f6:16:
9a:0b:83:00:15:5f:60:d9:e8:05:87:31:dc:62:55:93:89:65:
b8:2f:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:50:16 2026 by rpki-client