Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.mft
File:                     F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.mft (raw, json)
Hash identifier:          +U01qs+24SUXUayZc16fG55M5JNZTdyi8f52FzvwJIQ=
Subject key identifier:   DD:F5:90:15:15:B9:DC:34:33:B9:69:C2:0E:1F:BC:37:64:1D:8A:8C
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Certificate issuer:       /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial:       2F776C75299F803E0652D16935A6380E5D8CB924
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.mft
Manifest number:          11
Signing time:             Mon 30 Jun 2025 13:42:34 +0000
Manifest this update:     Mon 30 Jun 2025 13:37:34 +0000
Manifest next update:     Tue 01 Jul 2025 14:01:34 +0000
Files and hashes:         1: 34352e3138362e3139312e302f32342d3234203d3e20323639343334.roa (hash: BvdjXZIvoxcwrS/BGOfi+Px18cVZZzayMXt+filDLVg=)
                          2: 323830343a363438633a3a2f33322d3332203d3e20323639343334.roa (hash: mD5LmtDKI0kyKMcGv/+yn1kkchP1x7L0ENLr7cXu4MM=)
                          3: 34352e3138362e3139302e302f32342d3234203d3e20323639343334.roa (hash: fOSLQEMUUGueqdC4XDrbDl4NOMxhljrl2VnxELzGs/Y=)
                          4: 34352e3138362e3138382e302f32342d3234203d3e20323639343334.roa (hash: IZUaUslJVMjrY52kI00d0oyzvVeofSy/Fk9BOovKXAo=)
                          5: 34352e3138362e3138382e302f32322d3232203d3e20323639343334.roa (hash: brikL2kACJ/jjqPuUDv5kL7LQdctyn0fGXNVrOQUDDg=)
                          6: 34352e3138362e3139302e302f32332d3233203d3e20323639343334.roa (hash: wbI/SNVVtVf4eSWPklhqc7svwXY+SrfaXBcmlQZJzzg=)
                          7: 34352e3138362e3138382e302f32332d3233203d3e20323639343334.roa (hash: oXDw5aVxQ0QkQ25ri8sfFhLOAu5hKeDb19QS6l/eK/c=)
                          8: F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl (hash: scSZCPOSQZ6cmMrdhIseWxwO/H965NU7GhHzwiYqSAs=)
                          9: 34352e3138362e3138392e302f32342d3234203d3e20323639343334.roa (hash: g8ca2UC2adhZHZ40cwuN9TOy7iNmBn8Bt27CYouQ7SI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:77:6c:75:29:9f:80:3e:06:52:d1:69:35:a6:38:0e:5d:8c:b9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
        Validity
            Not Before: Jun 30 13:37:34 2025 GMT
            Not After : Jul  1 14:01:34 2025 GMT
        Subject: CN=DDF5901515B9DC3433B969C20E1FBC37641D8A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d0:00:9f:88:b8:85:aa:6e:b3:61:27:81:4d:
                    e6:50:c7:15:a6:eb:08:19:55:dd:20:b2:1f:06:df:
                    49:12:3d:51:70:b6:36:94:0b:f5:e1:1e:15:d7:de:
                    af:93:3d:28:a5:c3:40:19:f6:67:75:c8:b3:47:24:
                    25:1c:36:53:29:57:97:21:b8:0d:d8:e4:11:28:15:
                    71:7c:04:71:d8:05:c4:8e:6c:ce:e1:04:1a:9d:18:
                    b7:eb:b4:c2:d9:c0:b8:f9:5c:e6:73:13:b6:e1:e0:
                    c3:da:b0:cf:49:11:d3:5f:db:53:38:d6:b4:59:df:
                    80:01:c0:b3:b6:66:2f:4f:dc:7d:e2:33:10:a4:25:
                    4e:32:d0:2a:44:8f:e3:51:41:9a:af:1c:81:d7:65:
                    fb:ee:2a:7e:18:66:cf:8f:3e:ac:90:9e:29:32:77:
                    b5:b3:3e:7a:85:c9:e4:4e:bd:37:4a:64:49:4b:09:
                    8a:5e:81:bf:1c:a4:3a:0a:25:70:2f:20:0c:d9:62:
                    1d:a2:8b:f8:90:94:90:c5:bc:e5:c8:88:aa:0f:e4:
                    7f:f8:a1:39:1d:7f:32:36:06:16:b3:8e:20:77:bb:
                    71:ff:5d:cf:a0:d8:4f:ee:70:97:f7:da:3c:ca:9b:
                    d3:66:b1:38:57:c8:14:0e:70:d2:8b:e4:5b:57:68:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F5:90:15:15:B9:DC:34:33:B9:69:C2:0E:1F:BC:37:64:1D:8A:8C
            X509v3 Authority Key Identifier:
                keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9c:22:8e:b5:52:23:8f:c9:15:8f:12:f4:ba:db:b8:a8:ea:
         dc:56:b6:34:0d:3b:24:42:39:09:7f:a0:58:c2:ef:ae:d0:d0:
         66:34:93:70:31:72:a5:9c:1e:55:6e:f5:68:33:2c:d5:c7:49:
         28:57:88:b4:44:e1:16:f9:84:16:f7:27:71:3a:a2:fb:8e:26:
         a0:30:c9:91:19:52:a4:73:94:d0:97:72:9b:34:41:b6:ab:0b:
         24:5e:31:73:03:f1:e5:5a:72:a3:ea:87:0f:80:97:69:54:62:
         d7:1b:0e:2b:2d:ad:c7:04:81:8f:ac:d0:0d:4d:9f:36:69:0a:
         e5:b7:a7:7c:a6:55:c0:8a:77:7b:4d:60:aa:98:b5:36:f8:6b:
         71:46:c4:b2:e0:67:c5:a7:72:ca:e2:d7:36:17:2f:91:80:2b:
         65:62:0f:9e:fa:da:1d:5e:86:38:1b:9e:26:a0:69:5e:79:29:
         ee:1b:17:a8:26:8a:63:ec:dd:be:c7:f7:af:43:d3:8e:18:84:
         b1:4e:fa:36:c5:14:1f:be:ea:87:45:a1:25:d7:2a:e1:79:14:
         f9:d5:4f:47:e5:d0:1b:b6:c4:4e:fe:19:b2:0f:af:92:73:0a:
         fc:57:90:15:3c:d9:39:5b:f2:6f:6d:f6:e6:e3:28:41:f8:55:
         5f:aa:18:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUL3dsdSmfgD4GUtFpNaY4Dl2MuSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNBRDkxOUZDQ0EwMEJDMzgzRDZENjM5OEI5NkIxRDc3
QUFGQjQ3NjAeFw0yNTA2MzAxMzM3MzRaFw0yNTA3MDExNDAxMzRaMDMxMTAvBgNV
BAMTKERERjU5MDE1MTVCOURDMzQzM0I5NjlDMjBFMUZCQzM3NjQxRDhBOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ0ACfiLiFqm6zYSeBTeZQxxWm
6wgZVd0gsh8G30kSPVFwtjaUC/XhHhXX3q+TPSilw0AZ9md1yLNHJCUcNlMpV5ch
uA3Y5BEoFXF8BHHYBcSObM7hBBqdGLfrtMLZwLj5XOZzE7bh4MPasM9JEdNf21M4
1rRZ34ABwLO2Zi9P3H3iMxCkJU4y0CpEj+NRQZqvHIHXZfvuKn4YZs+PPqyQniky
d7WzPnqFyeROvTdKZElLCYpegb8cpDoKJXAvIAzZYh2ii/iQlJDFvOXIiKoP5H/4
oTkdfzI2BhazjiB3u3H/Xc+g2E/ucJf32jzKm9NmsThXyBQOcNKL5FtXaFhHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3fWQFRW53DQzuWnCDh+8N2QdiowwHwYDVR0j
BBgwFoAU862Rn8ygC8OD1tY5i5ax13qvtHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkx2aWtLSEE0b2J4Nmluc1RQalBUVUxieWVvcUhobWg0OHVaZGhIaDJK
OHcvMC9GM0FEOTE5RkNDQTAwQkMzODNENkQ2Mzk4Qjk2QjFENzdBQUZCNDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQUQ5MTlGQ0NBMDBCQzM4
M0Q2RDYzOThCOTZCMUQ3N0FBRkI0NzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mkx2aWtLSEE0b2J4Nmluc1RQalBUVUxieWVvcUhobWg0OHVaZGhIaDJKOHcvMC9G
M0FEOTE5RkNDQTAwQkMzODNENkQ2Mzk4Qjk2QjFENzdBQUZCNDc2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbJwijrVSI4/JFY8S9LrbuKjq3Fa2NA07JEI5CX+gWMLvrtDQZjSTcDFypZwe
VW71aDMs1cdJKFeItEThFvmEFvcncTqi+44moDDJkRlSpHOU0JdymzRBtqsLJF4x
cwPx5Vpyo+qHD4CXaVRi1xsOKy2txwSBj6zQDU2fNmkK5benfKZVwIp3e01gqpi1
NvhrcUbEsuBnxadyyuLXNhcvkYArZWIPnvraHV6GOBueJqBpXnkp7hsXqCaKY+zd
vsf3r0PTjhiEsU76NsUUH77qh0WhJdcq4XkU+dVPR+XQG7bETv4Zsg+vknMK/FeQ
FTzZOVvyb2325uMoQfhVX6oYJA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:40:33 2025 by rpki-client