Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/995252A0A186A5AC771DA6040FEF634B469DC2E3.mft
File: 995252A0A186A5AC771DA6040FEF634B469DC2E3.mft (raw, json)
Hash identifier: T84Akxezu/Zy6qk28kyMDcVXmA62TGycehUbeuq4InI=
Subject key identifier: F7:DC:2F:27:E4:64:3F:98:51:B3:92:CF:62:3A:78:8C:14:05:3D:86
Authority key identifier: 99:52:52:A0:A1:86:A5:AC:77:1D:A6:04:0F:EF:63:4B:46:9D:C2:E3
Certificate issuer: /CN=995252A0A186A5AC771DA6040FEF634B469DC2E3
Certificate serial: 0EF1626219C03AC077C84BCEF53742F24B6DB88D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/995252A0A186A5AC771DA6040FEF634B469DC2E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/995252A0A186A5AC771DA6040FEF634B469DC2E3.mft
Manifest number: 0C
Signing time: Mon 26 Oct 2026 05:38:11 +0000
Manifest this update: Mon 26 Oct 2026 05:33:11 +0000
Manifest next update: Tue 27 Oct 2026 08:48:11 +0000
Files and hashes: 1: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (hash: Lz58XLwHyKFEbESzIjG8wOQ8/QTpVl/5JZ6HXPRPszc=)
2: 995252A0A186A5AC771DA6040FEF634B469DC2E3.crl (hash: gOC1g1RQD7xWANpfQxz/Yi8wWXaju0f8nb4Lw1mp9go=)
3: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (hash: 4ZaVQjVXwvRbC5ExazWpeYv0cl2fUamURy4tT5ASmO8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f1:62:62:19:c0:3a:c0:77:c8:4b:ce:f5:37:42:f2:4b:6d:b8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995252A0A186A5AC771DA6040FEF634B469DC2E3
Validity
Not Before: Oct 26 05:33:11 2026 GMT
Not After : Oct 27 08:48:11 2026 GMT
Subject: CN=F7DC2F27E4643F9851B392CF623A788C14053D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:86:bc:6c:8f:cb:e6:c2:ce:fe:01:48:9b:
75:1d:a1:6d:49:a1:fb:73:96:b0:aa:b7:d8:ff:05:
62:f7:cc:53:10:cd:03:5b:19:3e:5c:08:08:eb:65:
78:e1:3c:0d:8d:f5:c0:5a:83:56:38:1b:6b:15:7c:
f6:f9:d1:99:e6:b4:c4:31:a3:09:57:f5:6c:63:30:
cf:29:99:7b:0a:64:d1:8c:57:f9:63:b3:4d:9d:0b:
ee:fd:4c:e7:a3:a8:47:e6:97:b3:c6:3a:fb:5c:48:
f4:2f:83:78:b0:99:98:42:c7:b4:ed:d7:ae:dd:7f:
fb:50:8e:02:84:dd:d4:51:f2:f0:d5:44:9b:7e:56:
21:cd:c3:d9:4f:d5:f2:0a:36:60:ab:f4:4d:df:84:
c6:c4:74:5b:02:d6:f8:4a:08:bb:7e:d5:9f:41:60:
32:3f:4c:c2:a6:16:a4:7f:1b:18:52:28:7e:90:2e:
5f:8c:81:d9:57:0a:b5:2f:a8:2e:0d:a1:f8:78:a1:
05:2d:78:d0:f7:32:ce:7d:aa:ca:5f:08:54:9a:d7:
03:5f:35:26:48:b5:f4:6a:43:84:34:0f:8c:1b:87:
1f:cc:a5:00:88:6a:d9:8b:0d:42:7d:68:ee:a7:fa:
60:24:f1:27:54:a4:9c:84:c7:bf:12:ea:9e:ee:0c:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DC:2F:27:E4:64:3F:98:51:B3:92:CF:62:3A:78:8C:14:05:3D:86
X509v3 Authority Key Identifier:
keyid:99:52:52:A0:A1:86:A5:AC:77:1D:A6:04:0F:EF:63:4B:46:9D:C2:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/995252A0A186A5AC771DA6040FEF634B469DC2E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/995252A0A186A5AC771DA6040FEF634B469DC2E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/995252A0A186A5AC771DA6040FEF634B469DC2E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1d:4a:7b:83:af:9c:d4:13:fa:4f:a7:1e:f7:26:46:e6:64:
46:ce:4e:52:2c:b8:08:83:4a:f3:f5:12:cc:77:23:83:0c:6b:
29:48:63:b4:2a:ba:a4:09:28:78:47:87:d0:f4:cf:a1:80:9f:
3e:f6:57:fd:7d:51:a5:df:bf:19:f2:cf:85:53:1c:1f:12:3c:
33:79:68:0c:ad:00:63:8b:a6:3f:91:09:51:68:c0:26:ed:52:
19:8c:81:9e:1f:64:e2:c7:ae:75:6d:40:af:7a:58:82:fc:ed:
c7:8a:fe:a7:1c:4e:3c:fc:75:d6:b9:8e:ec:59:38:1e:c5:30:
95:b4:cd:7c:d6:9e:cd:a1:bd:f2:5b:c9:77:8a:a7:05:b0:6a:
0e:90:48:8e:0b:66:85:d8:a7:61:b2:a8:ca:24:ff:34:41:da:
9d:7f:8f:e0:3a:35:9c:f9:68:72:bc:b6:dd:ed:c5:20:b2:59:
f9:2c:8f:3a:2f:98:0b:e4:35:15:c2:53:d2:72:66:bd:44:9d:
b3:20:79:6e:7d:b2:bc:27:a6:18:4d:c1:66:54:60:ee:8e:df:
cb:98:cb:fc:e8:55:12:5e:db:7b:ba:a3:4e:4f:4e:07:0b:53:
1a:dc:f2:0d:e3:e5:7e:c2:58:25:a2:17:92:cc:e6:7d:ed:5b:
50:5f:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:28:09 2026 by rpki-client