Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.mft
File:                     E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.mft (raw, json)
Hash identifier:          SfVXrwkpf02inlhq8+F2+Auww6x1lUf8TkUQjIn5O94=
Subject key identifier:   79:82:A7:92:2A:EF:7B:D5:C5:9E:DE:89:FA:45:B8:35:05:02:DB:A3
Authority key identifier: E4:23:31:AA:E3:C1:DE:63:F2:F6:80:A1:64:FA:0A:74:8F:BD:BD:DB
Certificate issuer:       /CN=E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB
Certificate serial:       2DC578BC3BD654CD8C63A84A51F07BF084736015
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.mft
Manifest number:          C7
Signing time:             Tue 21 Jul 2026 23:39:56 +0000
Manifest this update:     Tue 21 Jul 2026 23:34:56 +0000
Manifest next update:     Thu 23 Jul 2026 02:09:56 +0000
Files and hashes:         1: E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.crl (hash: r/9sarl3BafkpXz2ND8R0tCIlvtkD9FgBVWTvVR+hIs=)
                          2: 3230302e3139342e3138302e302f32332d3234203d3e20323731363433.roa (hash: hBir3SuGoCg2+Ya0KuslHrl2l089l2I9vco7Vm8WBSc=)
                          3: 323830343a376562383a3a2f33322d3438203d3e20323731363433.roa (hash: LS4DNtQrJ+GGMQ4IK5kQgNDAX4T6QDuoseVbAHsiTzc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c5:78:bc:3b:d6:54:cd:8c:63:a8:4a:51:f0:7b:f0:84:73:60:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB
        Validity
            Not Before: Jul 21 23:34:56 2026 GMT
            Not After : Jul 23 02:09:56 2026 GMT
        Subject: CN=7982A7922AEF7BD5C59EDE89FA45B8350502DBA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:fa:94:88:04:21:18:7b:6e:68:8b:d5:4d:
                    4d:34:38:b1:9a:af:11:2b:94:be:0d:28:27:33:6c:
                    1c:f5:c0:6c:1f:a8:68:9f:cb:81:5a:b9:06:89:42:
                    dc:4e:28:9a:93:d0:54:79:66:58:91:b3:04:b2:df:
                    47:d6:45:c9:a9:88:dc:ec:5b:3e:64:c8:3b:61:85:
                    ea:01:cd:8c:69:76:4f:06:94:f5:8d:c7:56:16:57:
                    f0:4e:36:23:88:3e:00:bd:77:af:26:70:b7:ba:6e:
                    94:50:62:d0:16:df:0d:b6:bb:9d:25:e5:aa:9a:a5:
                    d1:fb:a3:80:18:7c:bf:70:62:a5:a3:0d:e8:8d:64:
                    33:26:6e:a5:04:bb:6e:04:c4:51:21:d4:cd:82:0d:
                    3b:e6:f4:58:79:21:b9:47:97:21:5c:8c:ed:ff:45:
                    ae:b7:cb:9c:69:d5:18:a5:54:60:5a:da:a0:82:4a:
                    46:7b:24:87:cb:2f:fe:1b:48:21:cb:79:4c:05:e4:
                    d4:06:42:05:5d:3a:48:8e:bc:74:1f:80:96:0c:45:
                    9e:5c:4c:bd:30:37:83:7b:c1:88:5c:48:f3:00:02:
                    0b:c8:f1:04:92:1b:20:8a:8a:3a:eb:dd:12:52:b2:
                    3b:0b:8c:1c:50:47:ad:f6:35:64:16:70:75:c3:89:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:82:A7:92:2A:EF:7B:D5:C5:9E:DE:89:FA:45:B8:35:05:02:DB:A3
            X509v3 Authority Key Identifier:
                keyid:E4:23:31:AA:E3:C1:DE:63:F2:F6:80:A1:64:FA:0A:74:8F:BD:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:14:d8:49:45:85:10:a0:75:2d:2f:12:c9:93:a7:a0:cb:
         4e:2e:7f:8a:63:d6:d1:08:c1:de:0c:66:7e:e4:18:75:2b:8e:
         81:61:97:72:5c:45:a8:ec:d1:37:eb:17:6e:7d:8f:53:b5:f1:
         64:a0:6d:f2:27:e2:83:16:fd:ec:c4:3c:ed:85:9d:d3:5d:32:
         04:76:3f:b4:30:7a:67:ec:a8:09:45:d7:94:a9:f4:90:d7:17:
         1f:fb:a7:26:a0:3b:8c:b5:47:30:07:0a:86:8c:47:dc:a0:ae:
         63:e0:e0:08:bb:4e:49:42:ff:26:e0:f7:01:1f:c4:33:13:cd:
         54:48:48:c9:c5:09:bc:9d:10:6a:cf:07:ef:c9:39:b9:83:75:
         04:db:44:ec:de:3f:ea:6c:39:37:70:2c:eb:8f:85:44:ac:57:
         30:1b:30:b8:78:0b:09:66:89:4e:bc:9c:32:f2:30:73:61:f5:
         2a:f9:be:48:db:eb:b9:35:e7:e1:00:6a:ed:8b:b4:2e:d2:99:
         8f:83:18:6b:6f:07:ef:86:85:6f:4e:9e:f2:e0:03:4e:ed:77:
         e4:21:26:6d:ae:31:5a:d7:fa:a7:6b:2c:1c:03:1b:6a:67:52:
         d2:29:a6:18:1d:05:9b:b8:54:77:ab:2a:76:1b:bc:b8:81:60:
         c5:d5:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:14:43 2026 by rpki-client