Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
File: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft (raw, json)
Hash identifier: 526xaD0UDSMTT1zrvePSNLuYANFxuzTT61ENH1mbvWg=
Subject key identifier: F7:EF:72:D4:FD:A3:45:1F:5D:A6:73:D7:B6:9E:72:96:FB:C3:21:68
Authority key identifier: 0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9
Certificate issuer: /CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
Certificate serial: 151600A716BB5E43BECFB05AD676578F5370AA1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
Manifest number: 0157
Signing time: Fri 12 Jun 2026 07:05:28 +0000
Manifest this update: Fri 12 Jun 2026 07:00:28 +0000
Manifest next update: Sat 13 Jun 2026 08:31:28 +0000
Files and hashes: 1: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl (hash: Kut+/7djHFcZSgiQTP1/j09CgerY5j9xqU60vVBXqKs=)
2: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: I6emds5ngPltq+zX/8WmZ4R9w3ZwGbEw6yUNHUh4RpU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:16:00:a7:16:bb:5e:43:be:cf:b0:5a:d6:76:57:8f:53:70:aa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
Validity
Not Before: Jun 12 07:00:28 2026 GMT
Not After : Jun 13 08:31:28 2026 GMT
Subject: CN=F7EF72D4FDA3451F5DA673D7B69E7296FBC32168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:d8:ce:27:73:71:20:a9:e9:3d:5d:42:cf:
29:66:3b:d6:9a:c8:ae:a6:d1:c6:23:16:a9:7d:da:
5d:bb:f3:0e:65:69:a8:0b:48:7c:cb:6e:61:76:57:
44:c5:bc:fa:60:4e:cb:19:5d:8b:fd:79:b1:25:a6:
bd:7e:9c:3c:8b:6a:c4:8d:1d:66:2c:92:fd:8d:ab:
3a:2b:f7:b7:5d:d4:ba:5d:a7:0c:9c:5b:a1:a9:98:
56:b0:86:36:00:d1:fd:a9:4e:db:4c:5a:f1:f3:24:
87:38:a5:72:ad:14:14:29:38:47:71:94:6d:05:08:
1d:f2:6e:a5:e6:e7:ec:8d:1a:51:4c:cc:67:42:50:
c7:41:8a:e4:2e:8e:6a:ca:c5:7b:de:ee:c1:fe:de:
ea:11:ab:3b:8f:53:04:77:b2:3b:a5:39:11:92:bc:
88:e9:fd:48:95:6d:6c:89:b5:9e:af:f4:f3:d2:18:
b5:fe:e8:ce:5e:36:32:aa:21:03:b4:10:27:8f:8b:
82:0e:36:dd:fa:68:3a:d4:ba:e2:b1:93:d9:86:4f:
92:3c:f5:30:4f:49:8c:5f:ff:50:87:22:c5:76:d2:
2f:ed:ac:64:4a:81:7f:22:4c:b8:f0:fb:9a:c8:9d:
c7:8d:f9:7a:53:90:88:4e:94:28:56:b4:a5:96:e8:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:72:D4:FD:A3:45:1F:5D:A6:73:D7:B6:9E:72:96:FB:C3:21:68
X509v3 Authority Key Identifier:
keyid:0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c0:f7:ca:cf:7b:c7:50:f5:9e:b3:cb:f2:af:45:54:ca:b8:
95:35:93:69:e8:9c:2c:50:cb:bc:85:a1:69:2a:7d:c6:5c:c8:
9e:4b:38:5b:a4:f7:5f:b0:8e:69:f0:ad:ef:2c:c9:25:98:3b:
18:85:f8:20:e5:12:5f:18:d1:8d:36:23:b2:e0:99:a9:fb:e6:
35:36:0d:db:62:51:4f:f2:73:8f:92:00:84:62:66:25:64:08:
bf:a8:1b:35:96:06:e1:f3:a0:a7:34:b7:98:89:70:88:6f:55:
0e:56:62:67:52:4f:4b:33:aa:43:7d:79:64:3e:fd:9f:b2:b9:
d9:dc:f2:80:05:a4:1b:6f:6b:ab:8c:ae:bd:a9:ae:95:10:02:
ac:6a:06:5e:2c:cb:50:b9:9b:28:1d:02:0c:6d:5e:63:c7:59:
84:09:a7:e3:a5:49:70:7e:bb:5a:45:f4:f8:4e:81:f2:ce:82:
21:38:df:61:de:c5:71:c8:81:1d:8e:a4:4e:c0:90:8c:49:d9:
bf:68:c3:fc:3f:67:b0:e2:42:dc:7e:f1:6e:12:2f:24:ee:97:
83:ae:18:67:3f:07:02:6c:fe:2b:11:46:8e:99:41:0f:a1:13:
da:50:0b:4d:d1:24:01:84:2f:b3:22:b9:5d:50:b5:fe:08:74:
8c:e8:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:18:09 2026 by rpki-client