Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/1C460894C99D7664E541B7600F72B1551292F816.mft
File: 1C460894C99D7664E541B7600F72B1551292F816.mft (raw, json)
Hash identifier: Ptylil3ycSp3bCfAVXwCXmHqPaVwGETaDB1JGR68QOI=
Subject key identifier: 87:2D:C8:F2:BA:43:9F:D0:9F:EB:73:B6:78:76:52:25:4E:8E:ED:05
Authority key identifier: 1C:46:08:94:C9:9D:76:64:E5:41:B7:60:0F:72:B1:55:12:92:F8:16
Certificate issuer: /CN=1C460894C99D7664E541B7600F72B1551292F816
Certificate serial: 5DB96862C786987CD43C4E54EBB236C58A986372
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C460894C99D7664E541B7600F72B1551292F816.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/1C460894C99D7664E541B7600F72B1551292F816.mft
Manifest number: 03
Signing time: Fri 17 Apr 2026 08:36:32 +0000
Manifest this update: Fri 17 Apr 2026 08:31:32 +0000
Manifest next update: Sat 18 Apr 2026 11:48:32 +0000
Files and hashes: 1: 323830343a393162343a3a2f33322d3438203d3e20323734363539.roa (hash: TZrJjXioriW5f1e/R2XQ3Au4JPFyoLcTFsBd4Vkm6Rk=)
2: 1C460894C99D7664E541B7600F72B1551292F816.crl (hash: 97SZjk/ke24txZjIhtyjyQZQMmpqpHIDqxzgyx0U3fg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b9:68:62:c7:86:98:7c:d4:3c:4e:54:eb:b2:36:c5:8a:98:63:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C460894C99D7664E541B7600F72B1551292F816
Validity
Not Before: Apr 17 08:31:32 2026 GMT
Not After : Apr 18 11:48:32 2026 GMT
Subject: CN=872DC8F2BA439FD09FEB73B6787652254E8EED05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:47:be:0f:26:83:37:4e:7a:30:d4:99:eb:
e1:c0:58:ac:10:81:df:5b:87:77:13:2f:4c:42:4a:
56:1b:5c:c8:26:1f:3e:7b:52:8f:aa:bd:cd:d5:52:
33:af:64:4e:75:52:9c:d7:39:c4:66:e8:bd:10:2e:
61:31:04:6a:ff:d9:8e:ed:70:fd:46:f3:8b:1a:ff:
92:39:e1:88:2d:da:f0:aa:09:ba:69:54:09:9f:ce:
50:84:a5:81:92:4e:28:4c:54:14:72:03:ce:74:64:
50:28:04:af:98:e8:92:0e:01:bc:de:25:ca:a6:e0:
85:47:3e:31:27:87:20:38:c3:29:2e:73:10:5a:e3:
5c:39:5a:2c:7d:1b:93:54:cd:0c:4a:09:8a:df:98:
6a:83:27:dd:71:62:2f:46:50:22:01:87:18:1c:f9:
8d:b7:f9:55:21:74:33:98:3f:60:95:3e:85:25:55:
c7:b2:f6:72:47:a0:16:eb:7c:6a:e1:af:e4:28:92:
a4:40:d4:35:7a:9c:93:7b:3c:88:37:4a:8a:7f:e0:
b4:f5:84:33:0d:05:3d:d1:bf:57:88:42:8c:c4:ab:
f2:c2:3f:a5:62:53:f8:1b:45:b0:61:25:c0:c2:f3:
08:00:ee:a6:bf:46:19:91:b5:e8:00:eb:40:24:5b:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2D:C8:F2:BA:43:9F:D0:9F:EB:73:B6:78:76:52:25:4E:8E:ED:05
X509v3 Authority Key Identifier:
keyid:1C:46:08:94:C9:9D:76:64:E5:41:B7:60:0F:72:B1:55:12:92:F8:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/1C460894C99D7664E541B7600F72B1551292F816.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C460894C99D7664E541B7600F72B1551292F816.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/1C460894C99D7664E541B7600F72B1551292F816.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3d:19:39:4c:f5:fa:96:d9:61:da:a1:eb:78:91:4b:b9:e6:
8d:8a:08:a4:ff:72:6c:6a:05:7a:4f:1d:11:4d:e1:b3:47:af:
5b:fc:42:d3:67:20:c2:82:c4:b3:d0:78:71:a7:99:e5:53:7e:
73:06:cd:b3:e5:d2:c5:50:6e:53:90:4b:4d:98:45:46:34:bd:
1e:2c:21:d5:c9:89:48:e0:d5:a9:41:fb:3b:12:08:04:42:cd:
f1:f0:cf:bd:3b:2c:a2:e0:ad:b7:8d:27:88:fb:a8:79:95:de:
5e:3e:87:df:c2:af:08:32:49:04:1a:d4:54:8d:74:6c:20:0e:
be:06:de:8a:8c:01:06:ef:0c:f7:02:ae:d1:e1:a5:ef:61:0c:
9d:65:91:23:f7:28:ee:19:b5:64:f6:1a:76:f8:55:70:74:ec:
7b:8f:9f:fc:3f:06:7a:16:7a:ee:33:1b:3b:0e:6a:67:9c:a5:
5b:09:a7:b0:e6:4c:93:24:bb:89:18:76:b0:0b:70:da:04:46:
34:c8:67:38:1a:e7:dd:54:b5:2c:34:d2:ae:25:82:90:5d:11:
b3:b7:68:f7:77:46:2a:42:99:cd:91:85:9a:f4:b4:40:b4:30:
c1:5b:4c:b8:e4:9d:41:ee:c7:ca:fa:85:d5:68:db:f5:16:27:
c0:48:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 12:21:18 2026 by rpki-client