Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.mft
File: 4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.mft (raw, json)
Hash identifier: 835Xa2mSt7fbvDmNwONaL2j/CNVX/BLBgmvgGyPmfwQ=
Subject key identifier: 2E:6F:A4:BB:9F:E6:DC:AD:BA:6D:A3:81:F6:63:F8:36:47:9B:A5:F1
Authority key identifier: 4D:33:C3:C8:64:AE:90:DA:C4:6E:AE:76:AC:D6:DE:9D:EB:EA:61:FC
Certificate issuer: /CN=4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC
Certificate serial: 77360AD6EC7BB0EE9E10E384F993A9A0BD77ABE2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.mft
Manifest number: 02
Signing time: Mon 13 Apr 2026 16:42:29 +0000
Manifest this update: Mon 13 Apr 2026 16:37:29 +0000
Manifest next update: Tue 14 Apr 2026 20:20:29 +0000
Files and hashes: 1: 4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.crl (hash: 9tHHpFzaWKLx3v+XZFHG7Gsl0LPXsEBDdTwimT1rnKE=)
2: 323830343a393262633a3a2f33322d3438203d3e20323734373239.roa (hash: JP1lEoGmb3wNazXrPGFPqxfb7qlHLtX1/3NjDt20RBQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:36:0a:d6:ec:7b:b0:ee:9e:10:e3:84:f9:93:a9:a0:bd:77:ab:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC
Validity
Not Before: Apr 13 16:37:29 2026 GMT
Not After : Apr 14 20:20:29 2026 GMT
Subject: CN=2E6FA4BB9FE6DCADBA6DA381F663F836479BA5F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:5a:7e:db:01:40:65:31:0f:7b:28:00:7b:
13:fb:88:e8:70:c5:86:38:1e:29:23:f3:08:72:d2:
7f:7c:b1:c0:84:47:2c:2c:57:2f:94:87:2b:3f:74:
aa:b3:9c:40:f4:cf:9f:a7:3f:6a:7f:56:60:70:e6:
79:8b:cd:8a:af:6b:59:32:ff:13:d0:d0:78:f0:03:
26:cd:e5:22:be:68:a5:bc:14:f6:65:c2:5a:99:a7:
37:e5:17:0f:20:52:5b:a8:65:d0:b2:ab:e2:98:99:
23:57:b7:4f:b5:c9:e1:73:89:2d:f0:6e:56:b8:96:
18:cd:36:de:57:cd:d8:ff:e4:9b:d9:75:c5:e3:d8:
34:db:f3:24:f3:fa:4a:98:ba:22:75:7e:5c:fb:7e:
72:bc:bb:d5:a7:98:9c:0e:a7:91:1b:80:be:3f:ec:
16:2d:dd:e9:f5:27:2a:09:6d:81:21:9f:74:3f:5d:
b1:50:2b:cf:c9:7e:ea:0c:f9:26:b8:75:0b:89:71:
d1:7c:49:dd:e0:bb:36:68:8d:b4:d9:e9:64:af:e1:
d8:87:34:4a:84:62:5c:ee:e2:ac:8a:01:9a:99:a9:
9d:23:d1:cd:62:89:38:c7:92:57:99:53:7f:42:68:
63:90:df:b8:4f:3a:fe:ad:7d:08:23:ac:db:4f:21:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6F:A4:BB:9F:E6:DC:AD:BA:6D:A3:81:F6:63:F8:36:47:9B:A5:F1
X509v3 Authority Key Identifier:
keyid:4D:33:C3:C8:64:AE:90:DA:C4:6E:AE:76:AC:D6:DE:9D:EB:EA:61:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:13:d3:0f:f7:fa:25:4e:52:38:57:bf:d2:33:83:c7:6d:fa:
62:f0:d0:a0:35:f9:65:6b:6c:03:24:ed:a8:74:f4:0e:ea:15:
a4:9d:40:47:f8:c0:25:a3:2a:ac:56:b7:6e:8a:bc:c0:a3:9d:
75:d6:1e:3b:d9:59:3b:4e:28:12:41:4b:82:c3:30:53:20:03:
0f:08:e8:ff:35:a1:f9:82:f3:d0:a8:9b:78:cd:f8:ae:92:4a:
e5:5c:7e:57:e5:25:eb:cb:6a:db:c8:a0:12:9e:35:1e:a6:79:
72:10:ef:58:b2:cd:a8:19:bf:36:cc:ab:4f:65:53:b0:97:38:
7c:93:9c:2b:3a:c5:1d:3a:b4:fe:6d:27:36:7f:e6:e8:c3:02:
02:bb:f3:ac:0f:15:f1:b7:01:e7:da:af:2b:d5:3d:57:65:29:
2a:2d:75:a2:cb:81:13:db:b2:cd:a9:3f:6c:03:61:8e:22:0f:
0f:50:fe:e4:51:9e:f7:4d:c0:5a:f9:97:80:72:bd:8d:c7:e8:
48:bb:94:ef:16:eb:d7:a9:b3:33:4e:ea:27:c4:df:ac:eb:3a:
77:c6:a5:7c:be:ab:d5:54:78:b0:6a:21:92:99:9f:f5:85:c6:
c5:b5:e4:58:7e:d2:7d:14:e1:4a:2d:53:fc:74:14:f8:5b:f7:
d2:b6:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:11 2026 by rpki-client