
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
File: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft (raw, json)
Hash identifier: LccH3tOW/J1KAK4JTxZe+nqPBBc4I5fMmh4Y+UJQREU=
Subject key identifier: 32:DB:FB:29:31:4F:EF:4E:07:EC:B7:DA:6B:02:A2:C0:48:2E:26:06
Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
Certificate issuer: /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Certificate serial: 19F9AF92C419C5AE08E1DACDDA4E1418F16AD458
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
Manifest number: 0397
Signing time: Fri 27 Feb 2026 14:28:17 +0000
Manifest this update: Fri 27 Feb 2026 14:23:17 +0000
Manifest next update: Sat 28 Feb 2026 16:51:17 +0000
Files and hashes: 1: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl (hash: x3FVQZN5A0rdRjZLg6hN8IGp6RfvmYy6MRIFF2X5kio=)
2: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (hash: BwRwmgIHWeDARa94JoFNEpQBGjwXPkw+Zkp+KNcnaDE=)
3: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (hash: i0AkParnkvg9SLv0+BGlG+0LVSDm/fjBUVmbMF07kzw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f9:af:92:c4:19:c5:ae:08:e1:da:cd:da:4e:14:18:f1:6a:d4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Validity
Not Before: Feb 27 14:23:17 2026 GMT
Not After : Feb 28 16:51:17 2026 GMT
Subject: CN=32DBFB29314FEF4E07ECB7DA6B02A2C0482E2606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:2c:a1:82:7e:14:0c:7f:d9:f2:3c:ad:0f:
58:34:b0:77:ec:ba:0c:a4:4e:82:92:23:3a:c5:57:
7b:ae:bc:23:48:8e:1c:75:7b:a8:0c:d6:c9:06:4f:
6f:39:17:63:70:b3:5a:44:de:07:b6:6a:90:e3:c1:
69:09:33:df:0b:4d:3c:cc:82:07:5f:f0:0a:c2:f5:
c1:4d:1f:5e:83:52:3b:61:03:87:b3:26:a6:84:fa:
d2:c2:90:59:87:a6:c0:4b:24:fd:ea:a7:50:9d:67:
01:fd:f2:72:be:f1:38:b9:8c:21:53:3a:46:64:16:
6a:fb:3d:a7:3e:a8:d1:d7:a1:a5:8f:5e:bb:e9:a0:
7f:b3:29:6b:75:06:37:06:0f:26:17:cf:7d:f9:37:
8b:c7:20:f7:ef:60:ae:aa:31:77:05:45:48:0f:39:
c5:39:00:eb:14:2b:c6:25:25:54:92:9e:d3:dd:09:
4e:a5:ce:3c:29:86:dc:23:22:25:20:e3:c0:aa:bf:
39:6f:cb:f6:4b:15:39:9f:9e:7a:cc:f9:15:87:1b:
be:98:64:55:4d:71:bf:0a:43:1c:d7:03:0d:fd:f4:
10:d7:26:25:40:dd:52:09:c0:e2:af:de:28:2c:ca:
d5:66:c0:d7:20:c2:44:9e:bf:97:8e:30:a8:33:ee:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DB:FB:29:31:4F:EF:4E:07:EC:B7:DA:6B:02:A2:C0:48:2E:26:06
X509v3 Authority Key Identifier:
keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:37:22:22:36:2c:65:36:92:b6:4c:25:15:f5:35:f9:62:6c:
df:78:1e:21:d9:ce:26:94:11:60:e5:35:0d:db:d6:0b:4e:be:
ac:ec:7c:ab:a3:5b:0f:23:d0:8a:48:69:b5:ba:8f:20:89:ba:
1d:de:0e:0c:ec:ad:82:64:07:aa:25:45:f6:9f:03:0e:de:2d:
67:fc:88:d8:a3:6a:74:25:8a:bf:3f:d5:d1:f1:4b:cd:00:e9:
5e:be:c0:04:b9:cc:e5:e5:ab:f6:be:92:b9:aa:13:ac:a5:cc:
2d:ea:28:0f:91:ce:2b:29:3b:36:68:a8:e0:17:66:d5:f4:96:
68:ad:00:75:27:19:c8:7c:42:aa:18:25:91:2f:a8:2a:6c:4c:
75:47:1e:cc:17:6b:2a:48:66:44:56:20:32:c9:ab:39:c2:f3:
4d:91:13:7b:4f:a4:7a:2f:52:16:bf:a0:5e:4d:78:41:1b:18:
3d:b0:f7:23:b8:e4:a0:7b:15:04:73:4b:df:05:03:35:d5:be:
30:84:a4:22:8f:24:ee:71:c8:07:4c:18:0c:c7:3a:01:bb:32:
39:12:42:0d:91:fb:c2:48:42:6e:52:0d:35:cc:28:26:8d:60:
15:32:c5:6f:4f:92:9d:d7:42:cb:1c:b3:5b:70:b6:29:f8:63:
69:00:ef:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:45 2026 by rpki-client