Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft
File:                     BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft (raw, json)
Hash identifier:          T7Chr2xu5SXoasizo7VoAQyCYgOqkHcp25fQiBtfSmE=
Subject key identifier:   3E:AE:15:67:EF:5F:64:3F:66:FE:2D:8A:DF:C3:94:7C:30:B3:87:DA
Authority key identifier: BF:6C:9E:B2:D5:57:C5:10:56:47:7F:E4:30:CC:DE:31:FD:2D:58:E2
Certificate issuer:       /CN=BF6C9EB2D557C51056477FE430CCDE31FD2D58E2
Certificate serial:       49EB0F4984B197BF4E886535DE8418E6CC70DCCF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft
Manifest number:          24
Signing time:             Tue 19 Aug 2025 10:34:58 +0000
Manifest this update:     Tue 19 Aug 2025 10:29:58 +0000
Manifest next update:     Wed 20 Aug 2025 10:50:58 +0000
Files and hashes:         1: BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.crl (hash: tnoSeDvgm/FjFtLDl61cmuVU7o+KNWAaRd7zgtL+dgo=)
                          2: 34352e3232372e37342e302f32342d3234203d3e20323637303331.roa (hash: 6aH6ZQJqtarmshIsgAlnFmKLNNZSP/YKOnRfScyY8os=)
                          3: 34352e3232372e37352e302f32342d3234203d3e20323637303331.roa (hash: IfaquqaoivL26d1OjY6PpZSDsvxzskeTVPDpGvc3jqk=)
                          4: 34352e3232372e37322e302f32332d3233203d3e20323637303331.roa (hash: xL4eCN9ul1sOkaNr10dTrr89dxuxnHuAvZaBgv3zO7U=)
                          5: 34352e3232372e37322e302f32342d3234203d3e20323637303331.roa (hash: w5ovtBzu7Z0KlHqpNI4u+ZsEKHIpNXKgP4ziFqPQmZQ=)
                          6: 323830343a343731383a3a2f33322d3332203d3e20323637303331.roa (hash: 9qwL2su4wrJRHsH0+w0NkndiAM2MA1mn01NB9ublabA=)
                          7: 34352e3232372e37332e302f32342d3234203d3e20323637303331.roa (hash: Vp2I9nHMSr7Yl1jHc5rcIzpxT+3dwPPrpUNGJ/bdvTA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:eb:0f:49:84:b1:97:bf:4e:88:65:35:de:84:18:e6:cc:70:dc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6C9EB2D557C51056477FE430CCDE31FD2D58E2
        Validity
            Not Before: Aug 19 10:29:58 2025 GMT
            Not After : Aug 20 10:50:58 2025 GMT
        Subject: CN=3EAE1567EF5F643F66FE2D8ADFC3947C30B387DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:2d:b7:da:3c:84:ab:28:f2:cd:c3:29:18:
                    20:29:4c:99:6e:35:e8:74:f6:d6:1d:e3:81:77:54:
                    a5:ee:c6:c9:50:b6:e2:68:88:25:02:45:7c:b2:d0:
                    70:cb:26:df:94:14:27:53:96:bb:f9:64:ce:08:76:
                    cb:14:79:03:2b:d8:f9:4b:af:89:8f:58:fe:39:c7:
                    bc:8d:d3:86:01:b3:b9:5c:ee:d1:55:54:26:a8:e8:
                    b1:38:1a:47:02:3d:51:1f:7a:17:f4:32:4e:3e:67:
                    d4:7c:dc:40:5e:a8:4d:52:4a:51:69:8c:e4:01:38:
                    11:73:2a:37:75:d4:7c:91:3c:cd:be:53:7a:b2:8d:
                    07:2f:6d:b4:82:09:5e:5b:4d:9a:0c:b0:3f:1e:db:
                    3d:80:32:35:43:80:70:d0:ee:77:56:56:20:42:15:
                    84:85:98:81:c2:67:fc:71:31:9c:37:46:b8:40:05:
                    87:5c:cb:78:71:cc:a1:39:d3:14:a9:89:f4:9c:a0:
                    b5:e5:05:6d:02:0c:17:53:0e:24:58:4b:d1:21:e6:
                    53:0f:48:1e:e8:62:60:14:02:a2:fa:ad:90:26:95:
                    bd:23:ec:3e:cd:f9:80:b6:43:ae:09:bb:69:14:ec:
                    a5:c1:af:62:e1:82:81:ab:df:42:ca:4b:f2:ac:c5:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AE:15:67:EF:5F:64:3F:66:FE:2D:8A:DF:C3:94:7C:30:B3:87:DA
            X509v3 Authority Key Identifier:
                keyid:BF:6C:9E:B2:D5:57:C5:10:56:47:7F:E4:30:CC:DE:31:FD:2D:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:46:a3:26:8e:e5:e5:49:3c:8f:b2:41:db:f6:ff:87:65:
         47:c8:02:e1:12:aa:30:06:1a:cd:8a:d6:bf:02:a4:e7:68:b3:
         2e:00:e0:50:63:1a:cf:55:f2:1a:36:9f:bc:8b:ef:3f:e6:76:
         16:2d:42:b3:cc:a6:ac:69:19:0d:65:9a:9a:bb:f2:97:7f:c8:
         fc:b3:ad:0d:ee:4a:d6:b6:d2:03:5b:bb:80:ff:3a:bf:64:ab:
         da:5b:ef:66:f4:cb:f2:36:03:c4:9e:0f:69:30:4d:42:db:02:
         21:b3:cd:83:48:f5:bb:98:ab:ec:39:31:f1:02:e8:da:dc:34:
         12:48:3f:97:2f:31:8c:58:9e:0d:50:31:af:31:17:4d:2c:e3:
         36:a8:9f:ea:9b:0d:43:db:09:0a:54:20:47:e3:ec:25:d8:73:
         70:26:8b:b6:1d:b2:5a:c2:68:72:2f:c8:d9:8e:1a:04:59:6c:
         85:07:79:2b:71:47:3d:9c:4a:e0:38:8b:0b:fe:3d:98:87:8a:
         9c:9c:af:99:0d:41:22:99:fc:09:6c:63:0d:0c:ad:d1:02:6a:
         f0:1d:88:79:11:36:22:29:89:41:fd:9f:e7:29:25:fb:1b:18:
         82:91:84:ba:fe:68:27:89:72:a5:50:07:b6:a2:e5:26:3d:2f:
         ea:2f:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:35 2025 by rpki-client