Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
File:                     D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft (raw, json)
Hash identifier:          V/sPBQS0V+0fRscBZiE2asoUweIT5Yx0Fpr+uUHPOjg=
Subject key identifier:   A3:1B:D2:55:C1:02:06:AA:B3:BE:FD:99:20:C0:8D:81:9A:63:04:01
Authority key identifier: D2:AE:4E:16:03:54:2F:0C:EA:C3:B5:A1:DF:CF:FC:92:28:08:DE:1B
Certificate issuer:       /CN=D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B
Certificate serial:       7F841D01E3ED1768FADE8F0DE5C3E8988FA61734
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
Manifest number:          17
Signing time:             Tue 24 Mar 2026 21:59:07 +0000
Manifest this update:     Tue 24 Mar 2026 21:54:07 +0000
Manifest next update:     Wed 25 Mar 2026 23:20:07 +0000
Files and hashes:         1: D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.crl (hash: JGVMyweYgE9RViSY5oZGX6jLZTLfTD5wtj0PcUiZEU8=)
                          2: 323830343a346434633a3a2f33322d313238203d3e20323637343232.roa (hash: b2zwvRk6CLJXeep0vRY9NQiaidnBTToB/MBRW8j7PoI=)
                          3: 34352e3233352e3133322e302f32322d3332203d3e20323637343232.roa (hash: MhCZsK/qFboRps/9bWWgwEuEZuqpIW8pZCmtMIt/4PY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:84:1d:01:e3:ed:17:68:fa:de:8f:0d:e5:c3:e8:98:8f:a6:17:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B
        Validity
            Not Before: Mar 24 21:54:07 2026 GMT
            Not After : Mar 25 23:20:07 2026 GMT
        Subject: CN=A31BD255C10206AAB3BEFD9920C08D819A630401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:63:d4:29:db:a5:1d:7d:8d:d6:41:04:2b:
                    62:d5:57:9c:ea:8d:09:57:9b:d9:e3:ac:8c:b7:a5:
                    19:aa:b3:7d:d9:04:c8:ac:c2:2a:15:3e:bb:cd:00:
                    51:47:cf:db:80:ac:db:d3:eb:a2:c8:cf:98:35:b5:
                    61:5f:35:5f:f6:c5:a3:76:8b:e1:bf:7c:2f:7a:98:
                    c2:31:27:79:55:f1:a5:e2:e6:39:62:e0:96:d7:62:
                    e3:61:03:6c:cc:2a:cf:24:1e:0c:ce:ef:62:0a:e2:
                    44:f4:f0:c3:90:16:9a:c0:3c:31:00:eb:8d:a0:fa:
                    1f:91:45:fa:1c:25:6e:14:56:80:64:ef:a3:f3:f3:
                    17:83:a9:b8:34:83:e2:8e:cd:0b:e4:9c:6c:d2:38:
                    92:85:f6:54:fe:c8:d1:8c:cc:db:07:52:31:57:6d:
                    8a:3f:54:f0:37:d1:b1:af:64:8d:68:dd:2e:ad:ee:
                    97:b8:c7:7a:c6:52:55:73:8f:e8:44:78:50:3e:91:
                    84:43:b1:65:12:6e:cb:64:42:da:fc:ad:56:a7:2d:
                    85:19:1a:59:78:fe:e9:6b:0d:51:2a:26:ea:c6:f4:
                    24:a2:57:38:95:5b:bb:9c:09:ae:58:f6:d7:8b:92:
                    ab:96:b3:da:38:03:d5:a3:b4:8c:e3:29:b4:70:ec:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1B:D2:55:C1:02:06:AA:B3:BE:FD:99:20:C0:8D:81:9A:63:04:01
            X509v3 Authority Key Identifier:
                keyid:D2:AE:4E:16:03:54:2F:0C:EA:C3:B5:A1:DF:CF:FC:92:28:08:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:06:8b:f0:b6:cf:db:db:f0:94:df:6f:14:85:95:0e:03:
         8c:d5:27:06:4f:d6:09:60:79:fb:a5:f4:a6:85:f3:de:0b:a6:
         d7:e3:dd:98:07:32:ea:03:e6:50:fa:ce:81:27:b2:3b:e7:61:
         92:86:21:b1:17:8c:85:08:4f:47:5b:12:6a:f9:53:9a:46:7f:
         96:1e:5e:64:a1:cd:5c:8b:25:2a:8f:40:03:2e:ac:b9:fd:1b:
         47:40:4e:fc:e5:ff:d8:5a:5a:3f:f2:6b:81:cc:d8:f8:1a:ef:
         af:56:ee:c7:05:f5:c4:1b:f3:7d:df:66:18:b5:e5:a3:83:07:
         e0:91:7e:e6:6e:75:42:88:c2:e8:e2:f6:a3:74:47:de:eb:65:
         28:eb:06:e4:8d:16:2f:0c:3f:67:ba:86:19:1d:1a:c8:cc:11:
         03:fa:c1:7f:6e:a2:63:c1:19:09:7c:86:5d:f1:07:13:a6:43:
         ec:de:44:6e:14:6d:a6:37:12:18:8d:ce:1f:a7:54:f3:58:c4:
         63:fd:73:52:e0:91:77:38:54:c0:c6:18:3b:90:9f:17:18:35:
         84:dc:0a:2b:2c:86:1a:c7:03:5d:07:e6:e4:4d:71:3a:07:61:
         e5:bf:b5:fd:cb:a3:e7:ee:82:da:29:7d:81:1c:24:39:9d:60:
         46:da:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:20:26 2026 by rpki-client