Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft
File:                     BCF333E032A5E62EC142237F97628D0F131FE30A.mft (raw, json)
Hash identifier:          6OkjDSnsxJRV8LD30ws2GRWRRfhjv/OkFCa5zSi6OUw=
Subject key identifier:   55:88:DF:2E:E4:A3:3A:A1:92:01:FD:AA:29:1A:86:77:C6:2C:7C:F7
Authority key identifier: BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A
Certificate issuer:       /CN=BCF333E032A5E62EC142237F97628D0F131FE30A
Certificate serial:       7AFE62C4BD93F66A923B4EFA9690FC4D96EF937F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft
Manifest number:          C3
Signing time:             Sun 01 Mar 2026 03:30:55 +0000
Manifest this update:     Sun 01 Mar 2026 03:25:55 +0000
Manifest next update:     Mon 02 Mar 2026 06:42:55 +0000
Files and hashes:         1: 3136372e3234392e3132342e302f32322d3332203d3e20323635323437.roa (hash: TxYNN5FtYlFE2BefvjhjkJb082YvcmFiVZKFHbUR/qY=)
                          2: 3137302e3233332e38382e302f32322d3332203d3e20323635323437.roa (hash: tD8bzSd/td4gAgsNMdvjp1tJllIejadsCZsau+IIXHE=)
                          3: 323830343a326364383a3a2f33322d313238203d3e20323635323437.roa (hash: 2rb73WMTlVULrRQzvfpNjeHdm4DJYAvni4A0ZCBlOH8=)
                          4: BCF333E032A5E62EC142237F97628D0F131FE30A.crl (hash: UlQlOtXKcYKlc9qzyQOd64MTqI3LnNgLBwujqxU4Azk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fe:62:c4:bd:93:f6:6a:92:3b:4e:fa:96:90:fc:4d:96:ef:93:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF333E032A5E62EC142237F97628D0F131FE30A
        Validity
            Not Before: Mar  1 03:25:55 2026 GMT
            Not After : Mar  2 06:42:55 2026 GMT
        Subject: CN=5588DF2EE4A33AA19201FDAA291A8677C62C7CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:9c:c6:26:e1:a3:ef:71:4d:eb:71:88:34:
                    d0:d7:82:f7:4a:90:57:7d:ab:2e:9b:00:52:81:85:
                    85:0f:3e:b1:dc:47:a9:73:2c:2e:ef:1e:4c:9d:46:
                    bf:7d:37:e9:a2:da:0d:62:17:7a:48:dd:96:46:20:
                    0e:9f:4e:42:aa:c7:57:44:e8:6d:34:b9:fc:ff:44:
                    89:47:3c:26:1b:62:1b:e0:96:22:d5:4b:1d:e6:2e:
                    4c:96:91:f3:a5:dd:43:47:8b:12:6a:60:c8:0c:a9:
                    05:dc:8b:0a:36:71:d8:48:84:33:b9:a3:7e:e4:18:
                    c1:f0:98:86:d5:85:aa:28:12:c4:00:a2:4b:f1:21:
                    05:0d:15:b4:a9:cb:b1:f9:c8:e6:11:b8:15:3b:40:
                    44:82:3b:c7:d1:3d:d7:80:7f:b5:9b:6f:1e:ff:eb:
                    22:97:15:97:ca:05:07:4c:bf:37:19:66:ca:f2:83:
                    65:5d:7f:5d:ba:7b:1e:0c:a5:56:e1:69:16:c8:38:
                    87:7f:20:18:f8:5b:6f:a3:19:fe:76:47:69:d3:d1:
                    14:37:42:42:41:79:af:60:38:34:61:90:da:12:1f:
                    94:98:41:a0:6a:83:0e:d6:0c:85:42:c5:68:e9:16:
                    2c:6c:ae:4a:ef:d5:c0:ca:e1:d4:89:cb:93:b8:19:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:88:DF:2E:E4:A3:3A:A1:92:01:FD:AA:29:1A:86:77:C6:2C:7C:F7
            X509v3 Authority Key Identifier:
                keyid:BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:a9:7c:39:27:aa:27:9b:25:3e:7a:07:29:30:c4:cd:8a:
         33:0d:24:0f:e7:bb:cc:ed:2e:c0:17:c4:ac:b8:2a:11:a5:ae:
         3b:c4:6e:67:b9:47:50:c6:bf:6c:36:dd:41:f8:98:58:1b:1c:
         38:fc:3d:89:bd:3f:50:01:9d:c1:58:49:58:88:db:10:60:31:
         ae:08:5b:c1:05:f1:e3:eb:c3:61:5b:9a:29:ad:b1:df:08:59:
         94:8f:3f:81:28:9c:8a:0a:07:2f:48:0b:53:b1:00:eb:46:81:
         da:04:63:41:a7:e8:73:3e:e1:db:20:bc:30:4a:f9:d4:d3:ee:
         6d:f3:24:e1:1a:94:ab:83:25:15:8c:38:88:3b:1e:6a:af:b9:
         4b:33:5e:3a:7d:16:ea:a7:b3:9a:f2:2d:6b:92:21:8a:fd:e4:
         1b:e2:58:e0:08:65:dc:ac:41:f8:2c:8b:66:b6:64:65:7c:1d:
         58:97:54:9f:98:cc:ca:7b:d4:c4:df:6f:d0:83:97:41:bb:f3:
         4f:9f:e5:5f:62:22:f9:10:0b:45:d2:e9:0c:ac:7f:15:9f:62:
         e8:7c:0a:de:5c:ce:33:17:81:a2:b4:73:74:32:23:1e:72:87:
         14:58:dc:4b:81:a5:7b:e6:b6:8c:40:65:a7:a1:be:e2:1b:77:
         1c:38:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:59 2026 by rpki-client