Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
File: EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft (raw, json)
Hash identifier: lsTkJ9z6ckDJtkmNfwC3/XP5tl4zb+ImSoZpvMjnqh0=
Subject key identifier: 58:35:8B:78:92:A0:10:AA:0B:E7:21:7A:32:58:30:B1:86:7F:C1:CE
Authority key identifier: EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6
Certificate issuer: /CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6
Certificate serial: 7EB7DB31342849BFB2851E97B287AAB9434091EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
Manifest number: 0161
Signing time: Mon 03 Nov 2025 05:37:03 +0000
Manifest this update: Mon 03 Nov 2025 05:32:03 +0000
Manifest next update: Tue 04 Nov 2025 08:29:03 +0000
Files and hashes: 1: 323830343a363362303a3a2f33322d313238203d3e20323639333737.roa (hash: /7XnMicGdZhyziJLgRBhQq7LzcxL6fL5TVn/spvS4Mk=)
2: EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl (hash: d73zhxE+HsFVOnWU6c5Ea96638m71RnO6j331f1yl1k=)
3: 34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa (hash: VYOKYWTW4KYHyjWxZPNuftL4qjJ4ZSOyhDAXEVVS9P8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b7:db:31:34:28:49:bf:b2:85:1e:97:b2:87:aa:b9:43:40:91:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6
Validity
Not Before: Nov 3 05:32:03 2025 GMT
Not After : Nov 4 08:29:03 2025 GMT
Subject: CN=58358B7892A010AA0BE7217A325830B1867FC1CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:bc:4d:e4:b1:95:3f:77:eb:cc:77:61:69:
85:cf:89:c5:39:22:91:58:a9:20:fe:7b:7f:72:09:
90:10:c6:50:82:b1:de:1f:17:eb:82:3a:bc:8e:7c:
81:ab:54:df:6a:51:9e:7f:4a:b6:e1:5d:b7:ff:04:
84:64:f2:bc:1b:c6:42:dc:af:43:8a:62:30:1e:32:
62:c3:9c:f0:1b:66:fd:1b:89:31:19:67:0f:88:03:
3f:c7:16:71:ef:6c:d7:c5:0c:1c:9f:86:3d:a4:b8:
39:83:36:f4:f7:c2:02:af:c0:99:ac:16:63:b0:31:
67:cc:12:d2:eb:5c:d1:1d:f6:d0:c3:16:6a:19:8e:
64:1b:9b:54:63:d1:0c:8f:86:43:db:89:b6:fb:25:
7b:9f:c4:83:6e:22:34:3a:1a:50:88:1a:b7:9b:66:
27:bc:6f:28:0e:4d:87:f3:2e:79:84:da:e7:ea:54:
21:ca:43:b5:4c:ca:34:58:65:53:c5:bd:3b:fd:b8:
6f:b2:82:17:6f:79:11:9c:18:23:5d:06:24:17:ef:
51:64:90:55:67:ad:87:3e:5c:f0:e8:f9:0b:b2:e1:
18:2a:23:8e:78:2c:11:4f:f4:21:58:53:ca:ea:09:
26:d1:50:0a:6a:a3:c4:28:fe:fb:8f:7c:7c:8f:9a:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:8B:78:92:A0:10:AA:0B:E7:21:7A:32:58:30:B1:86:7F:C1:CE
X509v3 Authority Key Identifier:
keyid:EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fc:f9:3b:9e:c7:e8:27:f4:9d:de:9f:47:06:8d:0d:a6:fe:
10:a0:f6:5d:4e:0a:b1:73:19:a9:ae:14:59:08:c5:51:38:3f:
43:1f:cd:39:f2:e9:fc:26:42:e9:9c:b3:ca:26:31:0c:5b:49:
82:26:76:3f:c1:d8:9a:cb:07:fe:b5:8c:4a:c7:67:df:61:04:
2f:21:ba:33:68:1e:13:e1:f8:c7:b5:45:90:70:3b:0e:fe:c5:
67:99:6e:c9:ef:4b:54:bd:7a:00:98:bf:a4:62:2f:93:3f:9c:
f3:8c:84:19:b2:f2:c9:e2:81:97:cf:ea:1c:90:55:a7:c1:3f:
64:66:6e:6e:d8:19:12:10:3c:bb:41:b6:55:49:57:d4:00:46:
50:87:53:e9:e8:7e:bb:2f:14:7e:34:a5:4c:9e:07:8a:57:b3:
7a:ff:06:1a:fb:0c:7c:f0:81:41:be:52:cc:58:cf:77:5d:f0:
75:9a:0c:7a:10:21:f5:98:d4:04:f5:3d:8e:88:92:58:d5:f0:
02:b4:44:eb:8c:1e:57:49:23:fe:c4:a4:2a:f4:2d:76:58:83:
ce:3f:1c:a4:3b:21:1a:fc:87:57:41:fe:c0:d9:97:bb:fa:9e:
97:92:5b:31:11:34:a4:a8:2c:8f:9f:81:7b:f3:48:79:0c:0f:
cf:f0:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:18 2025 by rpki-client