Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
File:                     EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft (raw, json)
Hash identifier:          LEGhwKifJTFf5pgj1XWVolKPLHnUXdD/dWzE3c0ojx8=
Subject key identifier:   F1:BF:86:D9:30:1A:8B:0A:EF:26:93:55:67:25:3E:AE:70:FE:5C:36
Authority key identifier: EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
Certificate issuer:       /CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
Certificate serial:       49F3A958DAEDC93E13F1C44A2E1DE8E3AD871417
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
Manifest number:          86
Signing time:             Wed 25 Jun 2025 06:02:57 +0000
Manifest this update:     Wed 25 Jun 2025 05:57:57 +0000
Manifest next update:     Thu 26 Jun 2025 09:06:57 +0000
Files and hashes:         1: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (hash: +y1vilBwLAReV6zpa5/MYexJEeDB2IAxzkPlUoJxrsY=)
                          2: 3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (hash: LpKH0E9Fiqy6p2z7JZlCFoKYg86XuaBmNFMxvxFaUnk=)
                          3: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (hash: Ogv+aWRVYaq/m3tuVWrvpV5SQrW6nzj0FCPiU5vnQgE=)
                          4: 3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (hash: fp71B+OVFduQtnUnUeQM1x6QOqtaPdWFpcDtAkCRBM4=)
                          5: EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl (hash: xx0zrsVYO49TuXScLB3TqoVOgEYcgF7p6b8Uw31CSjU=)
                          6: 3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (hash: eI9IlZl/tRp7/siSUwrP+jwi6ppBfWhGBwwz7vclWQQ=)
                          7: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (hash: PPekn/TbiAwZrUnUTvoGIR/C6CK1xTfX/AL5sBGZ0T4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f3:a9:58:da:ed:c9:3e:13:f1:c4:4a:2e:1d:e8:e3:ad:87:14:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
        Validity
            Not Before: Jun 25 05:57:57 2025 GMT
            Not After : Jun 26 09:06:57 2025 GMT
        Subject: CN=F1BF86D9301A8B0AEF26935567253EAE70FE5C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:27:f2:ed:37:d7:cc:ce:d5:6a:4f:6e:be:
                    b3:16:dc:e1:21:cb:6c:d6:df:a5:a3:9e:9e:6b:af:
                    ba:d7:24:5d:cb:19:f5:7b:a8:dc:d6:c5:61:14:11:
                    fd:47:17:48:46:94:a7:34:6f:29:0a:10:3e:0b:c4:
                    c3:7f:64:16:0d:09:ec:93:08:cc:94:56:a1:e9:10:
                    34:c6:63:f4:c5:ee:16:c4:46:26:7f:c8:18:92:dd:
                    5f:a0:be:93:ab:44:6b:4d:ef:c0:37:0a:6e:23:c3:
                    7c:58:2e:91:55:60:de:c5:7e:54:80:f7:24:85:a8:
                    64:cd:c8:ed:64:b2:35:36:b1:54:1e:44:ff:ba:32:
                    74:55:1b:40:bb:b6:ed:ec:9d:fc:43:40:3d:89:05:
                    dd:ff:21:34:ae:94:b6:d3:cc:fe:10:f4:75:03:8e:
                    b7:0c:fd:0a:e7:4c:95:3b:20:fb:05:fd:9f:52:bd:
                    f7:43:ca:7e:a9:35:f6:d6:f5:a7:4f:5b:77:02:77:
                    0f:dd:4e:7e:7a:53:71:d3:d1:b5:44:a8:e5:75:05:
                    89:de:c5:16:64:93:e6:d3:5e:f5:2a:4a:bd:20:42:
                    c9:ef:4a:bf:40:ec:49:8e:f9:44:9f:79:99:55:8e:
                    78:f6:4c:f8:a6:0b:75:e4:7d:c3:7b:c8:57:72:95:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BF:86:D9:30:1A:8B:0A:EF:26:93:55:67:25:3E:AE:70:FE:5C:36
            X509v3 Authority Key Identifier:
                keyid:EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:a4:8e:1c:24:91:12:9e:3c:75:f7:ec:1a:e3:54:d4:61:
         6a:29:0b:a6:8c:a9:66:da:18:7c:c3:04:73:0f:68:64:3f:b7:
         45:95:6a:dd:dc:48:d3:6a:99:36:dd:c4:03:01:3f:03:57:69:
         bd:4b:86:17:72:32:14:31:e2:98:67:0a:74:06:31:81:9b:7d:
         bd:22:dc:83:6c:5c:0e:7d:58:b1:53:50:71:30:65:d3:dc:15:
         30:1b:01:08:1a:21:11:f3:ed:fb:c6:1b:93:a5:90:e4:54:8c:
         3a:c6:28:64:7f:5e:b7:76:45:13:f5:2e:ea:02:b5:9b:fd:54:
         09:55:77:3c:75:6d:4a:29:2a:8a:64:59:9e:0b:7e:eb:64:b8:
         ac:98:93:97:83:9d:3c:d3:f4:70:62:9a:78:7e:60:ed:9c:9c:
         9d:e5:be:9e:ca:92:d8:9f:e2:ca:08:b1:25:94:44:7e:f4:1d:
         0c:8b:cc:33:da:a1:0c:a6:bb:d1:7b:be:2d:3c:0b:80:b7:b0:
         99:b6:c0:70:9a:91:c3:71:53:31:44:fd:f0:0e:8c:b9:77:84:
         03:a8:33:a9:e8:41:b6:07:db:84:99:91:8b:54:0a:4a:14:c0:
         26:79:82:d6:11:57:9b:17:38:78:eb:59:7c:0d:a6:4f:c0:73:
         a8:aa:36:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSfOpWNrtyT4T8cRKLh3o462HFBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzN0FDM0FBREQzRUIwRjQxNjUzNEJGNEU4Q0IzQzcx
QzMyQkFBRDAeFw0yNTA2MjUwNTU3NTdaFw0yNTA2MjYwOTA2NTdaMDMxMTAvBgNV
BAMTKEYxQkY4NkQ5MzAxQThCMEFFRjI2OTM1NTY3MjUzRUFFNzBGRTVDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbQSfy7TfXzM7Vak9uvrMW3OEh
y2zW36Wjnp5rr7rXJF3LGfV7qNzWxWEUEf1HF0hGlKc0bykKED4LxMN/ZBYNCeyT
CMyUVqHpEDTGY/TF7hbERiZ/yBiS3V+gvpOrRGtN78A3Cm4jw3xYLpFVYN7FflSA
9ySFqGTNyO1ksjU2sVQeRP+6MnRVG0C7tu3snfxDQD2JBd3/ITSulLbTzP4Q9HUD
jrcM/QrnTJU7IPsF/Z9SvfdDyn6pNfbW9adPW3cCdw/dTn56U3HT0bVEqOV1BYne
xRZkk+bTXvUqSr0gQsnvSr9A7EmO+USfeZlVjnj2TPimC3XkfcN7yFdylUbPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8b+G2TAaiwrvJpNVZyU+rnD+XDYwHwYDVR0j
BBgwFoAU7zesOq3T6w9BZTS/Toyzxxwyuq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC9FRjM3QUMzQUFERDNFQjBGNDE2NTM0QkY0RThDQjNDNzFDMzJCQUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMzdBQzNBQUREM0VCMEY0
MTY1MzRCRjRFOENCM0M3MUMzMkJBQUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQalMvMC9F
RjM3QUMzQUFERDNFQjBGNDE2NTM0QkY0RThDQjNDNzFDMzJCQUFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU7ikjhwkkRKePHX37BrjVNRhaikLpoypZtoYfMMEcw9oZD+3RZVq3dxI02qZ
Nt3EAwE/A1dpvUuGF3IyFDHimGcKdAYxgZt9vSLcg2xcDn1YsVNQcTBl09wVMBsB
CBohEfPt+8Ybk6WQ5FSMOsYoZH9et3ZFE/Uu6gK1m/1UCVV3PHVtSikqimRZngt+
62S4rJiTl4OdPNP0cGKaeH5g7ZycneW+nsqS2J/iygixJZREfvQdDIvMM9qhDKa7
0Xu+LTwLgLewmbbAcJqRw3FTMUT98A6MuXeEA6gzqehBtgfbhJmRi1QKShTAJnmC
1hFXmxc4eOtZfA2mT8BzqKo2nw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:32:31 2025 by rpki-client