Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
File: 254C729A5155256E1BAF89E48E06C4EBA96761EA.mft (raw, json)
Hash identifier: 08Nuv/p4qMQ6B+olfZ6p+BzwPx+WgpnM/byePXKefl0=
Subject key identifier: B6:08:D6:B7:44:FA:48:4A:2A:AE:E0:F6:A2:60:D8:38:73:37:2B:78
Authority key identifier: 25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA
Certificate issuer: /CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
Certificate serial: 2495A96D2E21B3816CC9157FECAE419F58D74C37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
Manifest number: 022E
Signing time: Wed 18 Jun 2025 14:00:00 +0000
Manifest this update: Wed 18 Jun 2025 13:55:00 +0000
Manifest next update: Thu 19 Jun 2025 17:00:00 +0000
Files and hashes: 1: 323830343a383030383a3a2f33322d3438203d3e20323731373235.roa (hash: 4rSv5X1Lyr+dKBZWL1W04oXbgppBiMkeed8Lk/UsDh8=)
2: 254C729A5155256E1BAF89E48E06C4EBA96761EA.crl (hash: HSDtxd3jAudVRcl+YCNWtGLGqcgx/v/6tjosZ+FGg80=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:95:a9:6d:2e:21:b3:81:6c:c9:15:7f:ec:ae:41:9f:58:d7:4c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
Validity
Not Before: Jun 18 13:55:00 2025 GMT
Not After : Jun 19 17:00:00 2025 GMT
Subject: CN=B608D6B744FA484A2AAEE0F6A260D83873372B78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:b3:8d:cf:04:f9:77:85:f0:91:e8:6e:0f:
ec:d0:72:f1:d8:92:79:9c:94:91:60:90:7a:cf:23:
f2:d2:dd:77:9e:f0:73:21:f1:bc:3c:19:ce:88:c9:
c6:5e:b2:18:e0:ec:a3:ed:fe:d2:e9:5d:ee:29:11:
4d:43:3d:31:af:72:ee:92:c5:40:b4:97:37:84:7f:
24:0e:18:8c:d8:9b:1e:fe:4e:35:5c:d7:b0:50:33:
3d:14:c7:58:bb:33:52:5f:85:30:f0:8a:d8:3f:74:
73:c1:64:b9:d4:cd:bf:79:7e:11:a1:4f:b1:7b:1d:
d5:63:ca:25:03:70:ba:26:99:ae:67:bc:a5:df:27:
ed:ba:15:7f:63:b8:e6:de:65:3d:ac:4b:c6:be:0c:
4b:c5:71:e0:d2:3f:78:94:dc:ab:d1:b1:96:19:d2:
32:fb:45:e6:41:34:fc:c8:fb:04:36:4e:ed:2d:82:
18:c7:28:dc:44:03:75:c7:1c:1c:50:f0:62:4b:22:
d3:b3:b2:dc:ea:55:23:d6:3d:0a:36:05:e0:a4:62:
d8:f1:c6:7e:f3:45:7c:f6:77:bb:c4:45:08:53:3f:
ce:48:3a:bc:1c:8c:eb:b1:8d:a3:b2:3f:b2:57:f0:
52:66:8a:b2:40:9f:62:a9:4a:35:71:69:ab:76:51:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:08:D6:B7:44:FA:48:4A:2A:AE:E0:F6:A2:60:D8:38:73:37:2B:78
X509v3 Authority Key Identifier:
keyid:25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:02:7b:cd:88:24:a2:4c:cf:02:08:0f:2b:d7:79:68:50:74:
03:48:37:3e:4f:19:95:23:3a:de:68:c9:ba:4a:2b:39:d7:3c:
75:87:d2:fc:0e:f6:fc:22:82:7e:82:2d:32:07:a6:8c:14:28:
68:31:ce:c2:25:6d:e7:55:a2:38:6d:9b:f0:45:f7:4c:a6:0a:
03:bf:a3:fb:64:b8:29:f8:87:6a:fd:22:12:fe:85:7c:fd:ac:
b6:14:08:e0:6c:99:9c:c5:87:50:45:4c:00:ca:5a:d9:a5:9b:
26:52:57:b6:93:e6:4f:6d:93:90:e1:24:d8:0f:9a:2e:f8:0d:
c3:28:7a:94:fa:82:82:24:a8:c9:48:2c:d3:ce:00:64:65:8c:
ad:66:c0:6e:4a:f1:41:ff:21:4b:83:09:63:9c:30:8d:70:a7:
38:63:21:fd:96:d1:98:ed:7f:d4:c2:c3:8a:9c:c7:20:0f:fd:
8c:4b:01:2a:8f:4e:ff:70:e8:8a:cd:17:fe:7d:e4:38:fc:a4:
57:d4:b0:27:06:92:d7:b8:ab:ff:6b:13:10:34:72:34:59:f8:
44:51:10:a9:ce:38:32:78:a8:22:ca:64:65:ec:96:05:22:c2:
be:03:87:23:96:e3:c7:8c:9d:63:7a:14:8e:ce:1e:1c:f5:6b:
b0:dd:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:50:52 2025 by rpki-client