Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft
File:                     5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft (raw, json)
Hash identifier:          ThiiiDGxHiDA4AgUjsc8rZd8pVlSCBzt6q+ZRwbduiM=
Subject key identifier:   4F:24:B2:14:13:B3:AA:BC:3F:72:E6:EE:02:39:6A:9E:09:A9:B7:89
Authority key identifier: 5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
Certificate issuer:       /CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Certificate serial:       6466431C7FD34437E73DA0765FED5EC00EFC712F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft
Manifest number:          01DC
Signing time:             Mon 23 Mar 2026 16:29:41 +0000
Manifest this update:     Mon 23 Mar 2026 16:24:40 +0000
Manifest next update:     Tue 24 Mar 2026 17:18:40 +0000
Files and hashes:         1: 3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa (hash: Y3yPLRgBjEt5mL0WetXqoNVXNn8JXZ+0sZ3zfWgc8nk=)
                          2: 3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (hash: BApWo/oQXFvtq3eX7P5KjHy70SyHxSM+R2suLWScm1k=)
                          3: 323830343a3363303a3a2f33322d3438203d3e203238363035.roa (hash: P/kh4G/rsmsLfkFsR4tU3uWouZ7zlc4hMIFsbSPcMWw=)
                          4: 5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl (hash: JPrQJzoFi+c9jWWVY8acdTAIhHFxW9+CqrkIP7Y1v5Q=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:66:43:1c:7f:d3:44:37:e7:3d:a0:76:5f:ed:5e:c0:0e:fc:71:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
        Validity
            Not Before: Mar 23 16:24:40 2026 GMT
            Not After : Mar 24 17:18:40 2026 GMT
        Subject: CN=4F24B21413B3AABC3F72E6EE02396A9E09A9B789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:c6:fe:b7:e3:f1:3e:99:3c:5d:04:f9:a2:
                    f7:a2:e6:77:3f:50:7c:2a:f5:68:64:fd:3f:d0:e3:
                    e5:d0:8c:9b:26:36:6b:bf:7b:cd:40:ae:32:b6:4c:
                    41:e7:45:67:c4:c6:2f:a3:b6:f1:4d:8b:45:86:f4:
                    cd:0d:12:54:39:ef:a9:09:88:7c:69:ea:87:5f:ca:
                    bc:2f:3a:cf:95:e3:8a:66:5e:81:22:5d:a1:da:b3:
                    4e:55:6a:cc:48:e9:62:77:28:51:bc:6a:b0:b3:b1:
                    61:bc:fe:dc:5b:25:45:40:d5:7b:11:03:dc:20:cd:
                    ea:28:7a:f8:af:36:8e:35:31:f0:c0:01:dd:e0:53:
                    eb:a5:6a:e4:2c:b3:cf:e6:af:70:62:fe:f8:e1:6f:
                    79:75:fc:40:6e:eb:7f:7e:3b:2a:3a:c6:57:b0:23:
                    ad:93:ea:47:20:9b:84:0c:19:6d:bc:b9:c6:af:34:
                    ab:7f:7a:d6:1f:0e:3f:3b:fc:b0:fa:1e:ca:23:ff:
                    d4:14:f9:5b:82:0e:a0:06:94:ea:ef:6f:bf:2f:23:
                    5b:95:18:76:91:02:55:68:b1:7c:4b:cf:20:b7:c0:
                    f1:90:ff:10:b4:1c:4a:fd:a5:eb:55:59:0e:64:cc:
                    6f:43:ed:c2:96:a6:7c:06:02:ee:21:03:0f:dc:e6:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:24:B2:14:13:B3:AA:BC:3F:72:E6:EE:02:39:6A:9E:09:A9:B7:89
            X509v3 Authority Key Identifier:
                keyid:5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b2:9f:db:0c:22:92:54:f7:90:a8:b6:05:c3:03:03:ea:4f:
         af:d4:81:8a:02:cb:e9:cd:0f:9c:2a:b2:d7:a1:04:37:eb:5c:
         32:be:2a:d1:30:79:d2:a0:2c:50:5f:0a:af:a2:41:48:72:27:
         0e:29:e4:bd:6c:0c:c7:56:64:13:7d:c6:1c:0b:ac:b5:8d:60:
         a7:41:ee:ba:34:8a:fd:a5:8d:8e:62:32:a8:8b:61:cc:d2:43:
         82:f2:8b:38:63:be:40:cf:3f:5a:6b:ce:4d:79:ae:7c:d7:1f:
         01:d0:5e:ca:03:ae:9f:23:9e:cd:a9:8c:92:47:0f:bc:a7:79:
         60:c4:7c:5e:c4:ee:20:4e:91:21:2b:0c:c1:47:fc:5b:85:3f:
         05:30:55:58:f2:02:7d:07:df:8c:58:fe:f4:38:3c:7b:56:0d:
         3f:aa:ab:fe:bd:61:a2:4a:59:a9:21:fe:61:d4:05:22:a2:5c:
         00:a0:05:e0:64:6e:e7:a7:fd:52:0b:37:3f:4f:81:ee:f8:53:
         25:77:dc:e6:e9:9b:e8:e4:e5:a2:b7:cb:96:05:76:7a:70:65:
         61:dc:a9:e5:22:67:07:a2:8d:7e:36:9f:eb:88:7d:a5:c0:07:
         bf:7c:35:af:ff:98:53:93:b8:39:8b:56:68:6c:26:17:54:ce:
         33:c9:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:32:45 2026 by rpki-client