Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.mft
File:                     67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.mft (raw, json)
Hash identifier:          6ejPpkoCnO7hmLhPR5DN19BFcl9ZMZLnRpNiGp50eak=
Subject key identifier:   19:0E:A0:99:0C:A8:0E:C5:57:25:BC:18:64:FB:B3:1E:75:97:99:0D
Authority key identifier: 67:F4:6E:91:95:5D:B6:CC:22:A4:F3:A0:BA:0A:45:DD:EB:AE:0A:44
Certificate issuer:       /CN=67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44
Certificate serial:       6DBE6FA87C25AF4E038325BCD7BA71E451B952C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.mft
Manifest number:          D2
Signing time:             Tue 01 Jul 2025 10:11:58 +0000
Manifest this update:     Tue 01 Jul 2025 10:06:58 +0000
Manifest next update:     Wed 02 Jul 2025 13:03:58 +0000
Files and hashes:         1: 3136382e302e3233362e302f32322d3234203d3e203532383732.roa (hash: Y8HYCiqTqdU0sJiEcoHybWxEWDI70igX2ZYThy0Lpu4=)
                          2: 3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa (hash: KCQrXBq4C+WEYzcjojJ0BzDUiHqgV8uf48xewEmsCbM=)
                          3: 323830343a3838633a3a2f33322d3333203d3e203532383732.roa (hash: XxNrlGrzniPNdiIzz0sYbbCPmDoqsny7Le/kxAbRd4s=)
                          4: 67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.crl (hash: NAp/cIviPbD5Hy9E4bl5wk9v+qoCBKRJTaKh4wQX4wg=)
                          5: 3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa (hash: q7G9zIWY9ceV26aRdSDMojOq84B5QQvrANGS1smPt38=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:be:6f:a8:7c:25:af:4e:03:83:25:bc:d7:ba:71:e4:51:b9:52:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44
        Validity
            Not Before: Jul  1 10:06:58 2025 GMT
            Not After : Jul  2 13:03:58 2025 GMT
        Subject: CN=190EA0990CA80EC55725BC1864FBB31E7597990D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:15:bc:b8:3b:7e:52:f4:91:6f:a7:21:a3:0c:
                    5a:ff:59:9e:44:6b:f8:3e:bc:8d:dd:de:8d:e5:4d:
                    3d:ea:51:2a:23:c5:db:89:30:49:d9:cb:de:65:54:
                    d2:53:f8:a4:dc:83:f9:9e:13:24:9a:90:7b:8b:10:
                    37:e2:dd:3a:40:7d:80:9e:70:6b:f9:99:78:ee:92:
                    d5:a7:eb:9d:05:41:ae:aa:eb:1b:2a:fc:3b:1e:b1:
                    a9:53:34:49:dc:02:04:fe:e4:31:eb:e1:81:ec:e4:
                    0a:54:72:99:b8:3f:0f:f7:08:f7:17:4f:58:20:7b:
                    92:fb:51:bc:bd:d4:38:99:60:1b:7d:a4:22:a3:14:
                    b7:ba:49:55:7a:0b:04:85:de:21:e1:30:7c:96:c1:
                    05:40:66:1b:14:9f:9f:55:07:94:3f:3f:d7:8d:a7:
                    59:61:bc:55:91:76:09:65:3d:34:23:fe:70:62:30:
                    04:27:ba:34:d2:c6:cb:72:f6:3f:b4:5c:1d:7c:fb:
                    89:49:8e:6c:d0:01:a6:96:05:f8:f6:93:3f:cf:32:
                    63:a5:c8:4e:ab:e8:53:d6:66:fe:e2:28:14:be:0b:
                    6d:40:8f:23:dd:3b:ae:c2:33:93:40:57:30:ef:4a:
                    6d:05:64:fb:1a:01:da:a1:74:fc:bd:f9:48:0d:d2:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0E:A0:99:0C:A8:0E:C5:57:25:BC:18:64:FB:B3:1E:75:97:99:0D
            X509v3 Authority Key Identifier:
                keyid:67:F4:6E:91:95:5D:B6:CC:22:A4:F3:A0:BA:0A:45:DD:EB:AE:0A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4c:eb:53:10:94:93:46:62:6f:74:6e:bb:76:f4:d0:22:c1:
         7b:bf:f0:3c:6e:5a:64:31:23:77:81:ee:f8:68:60:a7:4b:3b:
         a2:88:cb:ac:c5:79:59:6f:13:11:85:85:75:bf:77:7e:a2:e0:
         ca:82:9f:50:18:07:1d:4e:de:3a:d8:d0:ee:91:14:ee:c0:e1:
         91:94:59:d9:b5:0f:7c:bd:ff:ac:84:8c:59:65:a3:ac:0c:bf:
         de:66:5f:3d:0a:e6:6f:ed:63:7c:f8:46:79:08:88:eb:96:f3:
         9a:96:aa:1b:c6:a2:bf:05:a5:92:69:fc:59:cd:60:f6:2e:c9:
         1b:65:36:4a:d1:c6:a7:38:ce:9f:ff:7f:2a:dd:12:87:84:46:
         8e:95:e0:de:6f:81:8b:7b:70:1f:05:69:2a:95:e8:ed:b8:97:
         b2:39:8b:c0:b9:2d:4f:da:59:e0:df:f1:5a:ca:e2:02:b6:38:
         19:f4:1f:1a:0d:4f:87:7f:d6:87:37:1a:59:6b:32:0d:e5:1d:
         17:bc:d5:28:39:2c:36:55:c7:f7:76:16:73:6b:ed:cf:e1:e9:
         6e:30:15:1b:78:5c:62:79:cc:2f:bf:af:76:7f:75:f9:c1:c2:
         6c:f3:28:d7:e4:0f:00:a7:e5:71:b5:67:7f:11:84:16:b7:70:
         63:2a:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:23:04 2025 by rpki-client