Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
File:                     F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft (raw, json)
Hash identifier:          tVCNtTQwJ/mRtSRFPKwWxaBbrcFCMe0Eyhf8sdSTanw=
Subject key identifier:   3A:FE:1F:86:69:05:DA:B5:2B:98:4A:B3:CB:33:F5:2B:D2:72:9F:88
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       357B3727FBB75A92C21413208EBB625788B3AC88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
Manifest number:          0299
Signing time:             Wed 20 Aug 2025 23:53:17 +0000
Manifest this update:     Wed 20 Aug 2025 23:48:17 +0000
Manifest next update:     Fri 22 Aug 2025 01:13:17 +0000
Files and hashes:         1: 3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa (hash: 7ZXxq9OS4WCGt7TX7u4pSqQ5SXc1VMW9ihf2a8YBcIo=)
                          2: 323830343a333730383a3a2f33322d3332203d3e20323636333835.roa (hash: xB2Hlz8Y5j5gzYEBljWyzu9Gb4SuC6vLpB9lSjCb5z4=)
                          3: 3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa (hash: vswYP+Ab0I8IM3pwO+pcSROv2UcJI0NOJ07qrpmdUSk=)
                          4: F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl (hash: O8oC0jeiiUltsCxzk8ucdEf1cEitIYVNyH7MdJiETk8=)
                          5: 323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa (hash: IgOLBR30/zRtvd5taJpCN5D49F7Os56R7bqzu5j9J60=)
                          6: 323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa (hash: y8LJcjycfY1UJVKQP49+aa5SDzNSNeockL7W7RT1KcY=)
                          7: 3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa (hash: 8xmCE3bhY7fLzAItc/3mcWm3eYcPgNO/LwJYaw+cL7s=)
                          8: 323830343a333730383a3a2f33332d3333203d3e20323636333835.roa (hash: 2ea2zUok3QicjwTRLjyp8YcIwK2t9c4LcSt30zEetgE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7b:37:27:fb:b7:5a:92:c2:14:13:20:8e:bb:62:57:88:b3:ac:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Aug 20 23:48:17 2025 GMT
            Not After : Aug 22 01:13:17 2025 GMT
        Subject: CN=3AFE1F866905DAB52B984AB3CB33F52BD2729F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:28:69:1e:fd:9b:4c:0f:87:33:52:87:b6:
                    7f:4d:e7:4c:5b:39:1c:9e:76:6d:e7:b6:55:c5:f8:
                    93:a5:7c:12:e0:ed:f4:97:ed:3f:db:c6:00:e9:bd:
                    df:02:07:0f:b1:27:b2:a3:a2:79:ef:95:34:3f:c1:
                    6d:bd:25:8a:49:8e:5d:39:47:7c:b7:8e:f1:42:f5:
                    67:90:38:c6:1f:92:3a:84:7f:7a:a4:a2:81:32:e7:
                    cd:39:dd:a4:2b:00:7b:1b:7d:c8:cf:e3:08:94:9e:
                    1e:ea:7f:bd:ab:ac:6f:e6:0a:d0:04:96:75:3b:08:
                    d9:44:ed:b4:9b:3d:b2:ae:68:fd:9c:54:15:e1:16:
                    57:73:17:d6:3e:06:fc:fb:39:b1:5a:65:1e:99:e6:
                    b5:d9:6d:cf:17:83:c0:6c:03:83:5a:6d:0a:70:0b:
                    6c:63:9a:c9:1d:1f:43:8d:06:9d:2e:be:84:d3:71:
                    94:d4:7d:21:32:bd:3a:92:5f:11:9e:8c:d8:cd:a4:
                    b7:17:13:78:11:d5:6a:b2:6e:65:b1:65:5d:4e:3d:
                    38:ba:26:6f:e4:21:f6:c0:18:0f:2b:0e:48:66:40:
                    11:93:06:b7:45:d4:17:00:56:76:54:8e:33:78:ec:
                    ae:c9:7f:3a:f5:09:23:fb:96:f1:5c:9f:7e:09:1e:
                    56:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FE:1F:86:69:05:DA:B5:2B:98:4A:B3:CB:33:F5:2B:D2:72:9F:88
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b6:0e:70:13:f0:47:68:c7:94:05:9f:56:4f:70:a4:f9:dd:
         3e:71:05:92:af:fb:92:4b:71:77:95:6d:ae:c9:d7:0b:f3:4a:
         61:92:39:01:55:f2:ea:b2:71:53:29:36:0d:fc:df:ea:96:0c:
         25:85:c7:8d:57:5d:1f:45:85:9a:57:78:aa:8e:b9:94:7d:17:
         c5:f6:3e:d8:ac:56:db:aa:f2:c4:b9:47:ef:de:9a:1b:94:ed:
         0d:84:e3:2e:18:e3:2b:5b:37:b2:b2:62:db:f5:38:cf:09:56:
         72:fa:22:db:ef:e1:70:20:d1:91:ac:46:80:bb:ac:76:67:ac:
         40:df:6f:5c:5d:1a:6f:ca:8e:92:3a:74:02:f7:42:64:6c:b5:
         4b:e5:13:74:6e:3b:c2:41:1e:e6:6a:0b:08:8e:3e:91:70:18:
         a0:15:a8:53:50:06:d6:b1:9f:71:89:e8:25:29:66:e3:34:c9:
         80:cc:e5:e4:d8:73:52:06:cc:ec:db:b1:b6:17:72:59:1f:59:
         04:02:8f:17:0e:6e:80:86:e9:53:00:b9:08:0a:35:b2:6d:2e:
         05:52:8b:0c:29:ff:d2:73:d0:fc:b4:2d:35:b1:df:fb:39:a5:
         f8:5f:ce:c2:74:50:e8:9e:b8:ac:6e:80:f1:83:fa:f8:1f:85:
         bc:c3:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:15:36 2025 by rpki-client