Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/2X1p1irf5A2cmvyUyjfZm63WLtkxa6XM3Gmq6Tg4GYTg/0/BDF19A1C2B51F73826390CA8E9CA75E526F892FA.mft
File: BDF19A1C2B51F73826390CA8E9CA75E526F892FA.mft (raw, json)
Hash identifier: 4XRu1x9UlSt2iPf3UHO8wnxQcgZs8UV3NC1ExL2+IjI=
Subject key identifier: 90:66:92:5E:9D:F5:AC:43:2B:96:53:CF:6C:70:74:FD:91:E8:25:7B
Authority key identifier: BD:F1:9A:1C:2B:51:F7:38:26:39:0C:A8:E9:CA:75:E5:26:F8:92:FA
Certificate issuer: /CN=BDF19A1C2B51F73826390CA8E9CA75E526F892FA
Certificate serial: 59C9A7722868F0D59C45F4A6065B6F6C1F74698B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF19A1C2B51F73826390CA8E9CA75E526F892FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2X1p1irf5A2cmvyUyjfZm63WLtkxa6XM3Gmq6Tg4GYTg/0/BDF19A1C2B51F73826390CA8E9CA75E526F892FA.mft
Manifest number: 87
Signing time: Thu 30 Oct 2025 13:57:12 +0000
Manifest this update: Thu 30 Oct 2025 13:52:12 +0000
Manifest next update: Fri 31 Oct 2025 14:58:12 +0000
Files and hashes: 1: 323830343a393530303a3a2f33322d3438203d3e20323734343932.roa (hash: CbMEvGQmZxszNaf2/kD+4fInapF0fo/JrTbmr06LFVA=)
2: BDF19A1C2B51F73826390CA8E9CA75E526F892FA.crl (hash: /2ZbIKKcxX6vnYgPFpWGFmE0vjEnqW174AeJgwbtz88=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c9:a7:72:28:68:f0:d5:9c:45:f4:a6:06:5b:6f:6c:1f:74:69:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDF19A1C2B51F73826390CA8E9CA75E526F892FA
Validity
Not Before: Oct 30 13:52:12 2025 GMT
Not After : Oct 31 14:58:12 2025 GMT
Subject: CN=9066925E9DF5AC432B9653CF6C7074FD91E8257B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:b3:34:67:fc:4e:44:20:d8:50:41:1e:d4:
4b:c2:55:31:97:25:6d:bc:24:a0:19:55:af:39:1e:
82:bd:95:56:90:9e:cd:d6:e2:8a:7a:64:12:c6:fa:
ce:38:90:86:ec:bb:7f:8c:e8:8d:38:47:5a:49:e6:
4b:5a:2e:9c:32:77:c2:a0:77:a2:6b:39:d1:e1:78:
fb:d5:0e:9e:fb:d2:15:43:6c:92:81:d7:4f:0a:e7:
b0:a7:d7:d5:07:21:ea:b8:15:72:56:70:8a:94:2f:
d1:45:9f:4c:2a:c0:07:b3:e2:8c:9f:09:75:e7:36:
97:eb:ad:9b:99:fd:4d:8c:96:53:81:5b:60:25:8a:
87:80:03:c6:d3:0b:61:a1:36:30:32:d6:aa:1a:b8:
be:36:ab:24:31:c8:db:11:a6:07:ab:1c:8c:f5:70:
6c:11:00:d7:7f:73:70:6e:3f:eb:e5:e4:e4:61:12:
ad:0b:55:ba:dc:e0:06:d5:f1:c5:d6:dc:ff:e6:45:
68:1a:a1:42:71:81:d9:4b:5b:c4:d4:c8:64:b5:1a:
bc:bb:c4:6c:9f:20:23:be:0b:3f:34:ae:0a:47:91:
55:a0:ef:29:f2:ac:90:bf:c6:6a:3e:74:60:15:09:
0c:af:b9:25:6b:a4:7d:d7:82:21:3c:01:3e:36:7c:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:92:5E:9D:F5:AC:43:2B:96:53:CF:6C:70:74:FD:91:E8:25:7B
X509v3 Authority Key Identifier:
keyid:BD:F1:9A:1C:2B:51:F7:38:26:39:0C:A8:E9:CA:75:E5:26:F8:92:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2X1p1irf5A2cmvyUyjfZm63WLtkxa6XM3Gmq6Tg4GYTg/0/BDF19A1C2B51F73826390CA8E9CA75E526F892FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF19A1C2B51F73826390CA8E9CA75E526F892FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2X1p1irf5A2cmvyUyjfZm63WLtkxa6XM3Gmq6Tg4GYTg/0/BDF19A1C2B51F73826390CA8E9CA75E526F892FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:58:9a:8f:55:11:32:8c:c3:28:9d:48:ff:25:8f:73:29:
e5:7d:ee:58:c3:3c:94:79:43:6a:66:5d:1a:24:78:20:16:b9:
2b:ce:88:98:7f:78:da:04:91:bb:eb:2c:b7:8c:30:fc:f4:bd:
9c:29:b2:93:f0:15:94:4a:a3:11:d1:5b:99:75:5f:19:22:87:
da:64:ee:3d:98:b7:22:b1:a7:8c:5f:9f:5a:a3:71:6b:25:da:
e0:58:75:42:14:32:6a:29:1f:f2:ca:37:69:e0:67:9f:3c:06:
2b:bb:60:f7:87:2e:c1:30:6f:b0:ff:53:5c:55:5c:f8:00:a6:
6d:54:0c:81:ba:6a:f7:c3:8b:b0:77:79:a3:eb:4d:47:f1:7a:
f1:70:7d:85:64:d8:05:11:09:16:23:e4:04:1a:a8:8c:84:5b:
82:88:c0:9d:60:52:59:5a:c3:c6:06:71:d1:d1:19:bc:51:c3:
67:3c:c6:0e:25:0e:e3:9e:a9:8d:05:bd:4e:42:d1:4f:33:6a:
2c:b2:09:d1:43:03:f2:6c:2a:d0:12:56:b8:54:c7:89:79:ec:
42:a7:25:69:3f:8e:da:81:2d:5f:7b:ed:ca:c7:ba:a1:5d:26:
be:f0:25:7f:0b:15:f7:70:eb:b5:54:df:de:10:01:1b:6c:70:
4e:af:d5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:00 2025 by rpki-client