Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft
File:                     B50F71D69739DBF5914AAB576A379411D64051AB.mft (raw, json)
Hash identifier:          +wr4FOvVf9/kofbTPKogDXrX1J7S7CvyPb4vpZeASVo=
Subject key identifier:   7B:E8:6C:C1:AE:04:9F:A7:88:BC:F5:D3:50:CF:92:68:C6:23:59:A7
Authority key identifier: B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB
Certificate issuer:       /CN=B50F71D69739DBF5914AAB576A379411D64051AB
Certificate serial:       2D1E6C2ACA96D05907BC7A998A2BCB3F49A7E584
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft
Manifest number:          EC
Signing time:             Tue 13 May 2025 15:26:18 +0000
Manifest this update:     Tue 13 May 2025 15:21:18 +0000
Manifest next update:     Wed 14 May 2025 19:00:18 +0000
Files and hashes:         1: B50F71D69739DBF5914AAB576A379411D64051AB.crl (hash: 9N87Gu31Hqado4D0IZ9gvAFTsC6iUaEXQWIKbTVMgCo=)
                          2: 323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (hash: 6eo0fcGmpKIYU73sIUlPP9E1m4xbsbvMhvaUUOarNv8=)
                          3: 3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa (hash: ud/PeBE0fIpwUMUCEIYHCmI+iAx8M9GFvHUpz7+Ms3Y=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1e:6c:2a:ca:96:d0:59:07:bc:7a:99:8a:2b:cb:3f:49:a7:e5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50F71D69739DBF5914AAB576A379411D64051AB
        Validity
            Not Before: May 13 15:21:18 2025 GMT
            Not After : May 14 19:00:18 2025 GMT
        Subject: CN=7BE86CC1AE049FA788BCF5D350CF9268C62359A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:55:47:a2:b6:ea:7d:de:ad:dd:ae:c1:60:
                    43:91:c9:5a:1c:30:44:4b:81:c2:8f:43:d4:0b:61:
                    1c:cd:37:70:ac:9f:4c:1c:28:50:4a:c6:78:7e:98:
                    a6:5b:a1:f9:17:2d:32:b4:bd:fd:78:04:4d:98:c3:
                    cd:ec:6f:a2:d0:89:ed:17:a9:9e:f9:d5:c4:59:5d:
                    e7:ab:7a:86:06:5c:66:86:d0:a3:88:97:e5:a6:f6:
                    0c:5c:76:93:b3:12:33:a5:f2:4f:28:3f:9c:73:b0:
                    ac:0b:10:b1:30:cc:38:e9:af:e0:f5:3d:4d:3c:7e:
                    a7:85:62:2f:27:de:74:5f:62:44:74:73:54:94:4f:
                    5a:a8:eb:52:0b:01:e1:22:88:31:3c:b7:b0:28:14:
                    da:87:28:55:56:7e:c7:07:0f:6e:6c:38:f6:98:38:
                    cf:3d:94:06:48:c0:36:29:3d:e1:d4:ff:32:1a:84:
                    9e:25:1d:d0:22:59:73:f5:f1:a1:dd:7d:7c:3b:b0:
                    fd:e6:fa:cf:d9:cc:71:e3:fe:35:51:f5:bc:d6:5b:
                    cc:2b:90:88:55:68:df:44:d1:ef:1b:24:06:27:f8:
                    12:0c:70:33:a7:b4:df:af:0d:c5:18:79:2e:56:12:
                    c1:4c:04:b5:93:34:8b:ce:f1:2a:df:f2:68:85:2c:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E8:6C:C1:AE:04:9F:A7:88:BC:F5:D3:50:CF:92:68:C6:23:59:A7
            X509v3 Authority Key Identifier:
                keyid:B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:5d:e2:be:cb:89:8b:32:99:ac:fb:1a:0f:4c:d2:14:67:
         bf:ef:c9:92:ee:6b:d0:6b:8b:bb:40:02:7b:c8:60:32:27:e9:
         46:34:94:b2:4b:c9:5e:03:5b:5b:81:b0:12:5b:ac:8b:3f:c1:
         33:67:43:05:43:d9:2e:07:26:ec:30:f4:f2:ab:0b:30:a7:4c:
         11:32:4f:c6:14:cd:d8:f6:35:e0:e6:3f:23:42:8b:bf:f9:0b:
         bc:53:60:ed:35:c7:e4:ff:45:04:20:c2:1e:7d:25:9a:d6:44:
         15:cb:3d:d5:d7:2c:f1:ac:a0:89:04:f8:e0:19:48:f4:89:5f:
         6e:3c:05:54:5e:b3:a5:c0:cb:b5:bf:ce:75:e4:de:52:2c:26:
         fc:60:ee:e7:a1:ee:dc:79:db:f3:9f:27:38:28:1d:78:16:8c:
         36:48:dc:a3:1e:00:16:0c:af:44:36:bd:16:ca:54:c2:60:73:
         56:ba:75:d0:49:89:d8:cf:66:8e:1c:c9:b0:2c:dd:9d:94:f3:
         b3:2c:4f:c2:cb:7e:65:1c:bb:01:c9:c9:b5:ee:17:f8:61:9f:
         9c:3e:60:dd:81:5f:68:62:3f:a6:63:01:fc:ce:ec:17:3a:47:
         0e:12:ab:26:48:e7:c3:f6:69:25:f8:19:dd:e0:63:ab:94:3b:
         12:c0:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----