Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft
File: CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft (raw, json)
Hash identifier: a3HjJoOsmZYo0+CChfu2h+QeNFPtuDbi27v2pCNNtZU=
Subject key identifier: A8:8B:B1:26:77:15:B3:60:7E:81:08:9F:D2:EF:87:4D:D7:F3:80:C5
Authority key identifier: CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
Certificate issuer: /CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
Certificate serial: 2B7681B27AFA7145FEB1089A19FA3E779B506F21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft
Manifest number: A8
Signing time: Fri 13 Jun 2025 14:44:54 +0000
Manifest this update: Fri 13 Jun 2025 14:39:54 +0000
Manifest next update: Sat 14 Jun 2025 17:42:54 +0000
Files and hashes: 1: 34352e3138372e36302e302f32322d3232203d3e20323639343537.roa (hash: H8vg+/aGRep9VIXudtxLNxdC5kTOFSH+n2sFWuHCzEE=)
2: CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl (hash: /zEx1crCQ26Yq1qSfDdYUCsGpyrGD8znC7QBpsrfJkY=)
3: 34352e3138372e36322e302f32332d3233203d3e20323639343537.roa (hash: 0QY9GpejJghvNVjajtaiFW5uKSTj2YhGAcaSnk8J4pM=)
4: 323830343a363465383a3a2f33322d3332203d3e20323639343537.roa (hash: ++wPJ3C/mJVmNLKg2RJpWh9Ctx5LS0gw+l1Ur9v3FUA=)
5: 323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa (hash: zGh7UqL2DDmX9WrYgb+qU0kcX1WftTr4K3sjVCejqoQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:76:81:b2:7a:fa:71:45:fe:b1:08:9a:19:fa:3e:77:9b:50:6f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
Validity
Not Before: Jun 13 14:39:54 2025 GMT
Not After : Jun 14 17:42:54 2025 GMT
Subject: CN=A88BB1267715B3607E81089FD2EF874DD7F380C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:d0:4e:de:8c:91:8c:c5:ed:f5:d8:37:99:
2e:e7:9e:69:9c:2d:f9:43:25:5a:c9:56:60:48:68:
fc:78:bd:f6:97:6d:19:e4:cc:7d:b8:83:36:95:1c:
0f:e7:71:53:01:86:c1:a7:09:70:2b:4b:11:1c:00:
7d:b4:0f:6f:3e:09:e7:9e:fc:a8:aa:4b:3b:b9:e8:
e0:23:a4:42:e2:fb:a0:39:82:d6:71:af:0d:a3:4f:
b5:de:72:84:aa:26:a3:89:61:ab:bf:15:76:31:a3:
cd:a7:e8:97:06:a9:a6:57:61:1f:ed:d5:47:97:1d:
0e:a3:19:71:70:b1:14:6e:5e:63:69:d1:de:13:a6:
c3:95:a7:15:f1:74:5d:9b:cd:05:84:12:cc:37:ad:
18:9b:12:02:37:17:fa:74:21:3b:1c:5e:ee:84:70:
79:9c:42:66:0a:9a:b0:eb:4a:c1:f3:b1:96:da:40:
31:21:1f:95:bf:0e:11:15:da:19:49:7f:5e:43:0f:
11:6a:03:4d:a5:a2:45:71:65:e3:06:08:f4:9d:75:
5b:46:a3:6e:1f:8e:5b:e0:18:74:4b:a3:94:aa:bc:
85:c3:4f:e0:f9:1d:e5:8f:25:a7:be:1c:e0:d7:43:
e0:bc:f2:36:35:aa:67:89:c6:2e:28:7a:06:f3:eb:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8B:B1:26:77:15:B3:60:7E:81:08:9F:D2:EF:87:4D:D7:F3:80:C5
X509v3 Authority Key Identifier:
keyid:CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bf:8c:85:ca:86:d6:b8:e1:a3:89:f2:44:73:ee:bb:c9:a0:
f8:75:7d:3f:db:f5:5a:b5:80:5f:78:8a:0e:b8:88:93:d0:e0:
26:6a:b8:36:2a:e3:35:7d:84:49:06:3c:c1:6d:6f:d4:76:f2:
ec:15:ad:8b:31:a0:2c:67:eb:13:64:d4:fa:4d:e6:9a:ed:73:
67:25:f4:58:48:c5:01:32:5f:cb:8b:af:d4:cd:f0:1d:53:24:
16:f7:fb:ab:59:5a:7e:01:e2:97:91:96:f4:3b:19:6f:96:04:
fa:ab:a5:4b:3d:30:00:55:d2:32:e4:c2:a3:5c:37:59:c1:eb:
70:a2:72:c9:1a:99:9c:5a:ce:86:09:0c:a8:73:37:d3:93:d2:
74:a8:6a:ad:15:4f:ad:18:8f:e0:3d:d6:3d:ae:b3:a5:e4:6d:
ed:d0:ca:54:47:a6:1b:56:2b:b9:f5:45:76:d1:bb:96:41:e7:
4c:90:00:3b:a0:bd:59:e5:ad:f4:25:b1:06:98:e3:58:db:16:
9d:4a:54:cd:8e:83:a6:c4:37:68:7e:b1:eb:11:31:cf:f0:5f:
ce:b8:23:7c:69:a8:59:6b:8c:c3:87:cc:13:ff:56:36:19:4e:
f2:c8:05:a3:f8:b7:bf:97:9d:82:d7:fd:c3:03:60:aa:eb:cf:
60:df:a5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:02:25 2025 by rpki-client