Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
File:                     D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft (raw, json)
Hash identifier:          6FoahKPRFtL6WF/AGZK5gdpKuYqs8dV/jdU+73eTEvg=
Subject key identifier:   58:6D:BA:4C:18:37:61:DC:92:C7:6E:BA:E2:D7:A7:8C:A5:DD:D6:9A
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       39E41C29FD658062F9C6B48726303F95ACCB207F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
Manifest number:          03BB
Signing time:             Wed 25 Mar 2026 17:47:55 +0000
Manifest this update:     Wed 25 Mar 2026 17:42:55 +0000
Manifest next update:     Thu 26 Mar 2026 18:45:55 +0000
Files and hashes:         1: 323830343a383536343a3a2f33322d3438203d3e20323632333133.roa (hash: u8SEVVGyiDBge8ZaDeVjC+mAFe7/iwmNXfd6QpP2QKg=)
                          2: D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl (hash: SgCUa0X1LQ6oQQ0iyTy8oUe4e7TWi/WpXzDYwBV9Fr8=)
                          3: 3137372e3130352e3232342e302f32302d3234203d3e20323632333133.roa (hash: 66RVH+ryy0Ti/KrQj+gNhv4PTWrgTso4ZYKL2mHEpTs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e4:1c:29:fd:65:80:62:f9:c6:b4:87:26:30:3f:95:ac:cb:20:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar 25 17:42:55 2026 GMT
            Not After : Mar 26 18:45:55 2026 GMT
        Subject: CN=586DBA4C183761DC92C76EBAE2D7A78CA5DDD69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:b1:5c:db:5d:fe:bc:7b:5c:a9:3f:86:6f:
                    b6:4c:43:6b:f4:92:e4:82:75:a7:5b:d7:b3:72:a6:
                    53:9a:72:0e:ba:aa:97:1a:e3:9d:f4:0b:cc:e5:fa:
                    57:2a:47:39:b4:00:6c:83:b4:02:1d:66:39:f9:de:
                    28:ec:ae:a5:0e:16:1d:6a:b8:f1:cb:97:3f:23:10:
                    bc:9a:22:4e:e2:36:83:5e:0a:cf:89:3a:5a:ff:16:
                    f0:a5:89:f4:0e:02:35:2d:e1:7a:77:2b:99:49:26:
                    8e:78:e8:1f:fd:0c:44:09:82:a1:ac:ee:4b:57:16:
                    e0:15:ef:ad:d1:5f:48:5a:16:38:1c:d2:74:41:60:
                    07:87:cc:2b:13:ae:ea:5e:61:4a:34:9e:21:64:12:
                    a7:23:7c:22:45:fe:f8:40:7e:8a:3b:a5:3f:cb:f3:
                    78:39:59:ba:c2:0b:97:85:60:ea:44:33:08:9f:c6:
                    4d:67:1a:b0:e7:f0:3f:0b:f4:39:d8:2e:77:17:68:
                    75:40:a3:60:a6:52:23:8c:68:f8:67:62:a5:7f:49:
                    8a:9b:96:dd:b2:9d:6f:d8:d8:49:13:53:87:a2:34:
                    41:bc:2b:fb:31:43:76:d5:8e:bb:6f:ce:45:ab:7d:
                    57:06:4b:f1:3c:78:db:e9:ef:5a:8c:cb:39:02:a7:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6D:BA:4C:18:37:61:DC:92:C7:6E:BA:E2:D7:A7:8C:A5:DD:D6:9A
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c0:bc:15:e8:07:89:a2:e1:b3:9f:56:18:77:ca:b2:a8:11:
         66:3c:77:ee:5e:b7:85:60:29:f9:79:3f:d6:66:62:66:ee:a1:
         a8:0c:6b:28:0c:1f:ba:6a:e6:5b:d7:e6:1f:ef:42:55:58:1e:
         f4:12:4e:9f:77:0c:18:7e:4d:ce:a8:52:ee:22:53:89:5f:4d:
         04:dd:33:2f:5f:a7:68:bb:55:d4:dd:f2:1f:e8:d2:8d:40:49:
         12:b6:b8:c3:4a:40:6c:cf:7d:01:be:c3:89:45:b1:78:c2:4a:
         aa:7f:1d:26:d2:04:c9:ae:7f:83:0b:e8:4d:c8:3c:12:56:a9:
         0d:ea:77:9d:8b:f9:d8:95:69:b4:43:4d:ec:b2:8a:38:03:2b:
         95:a1:fc:0f:34:e1:01:6b:f7:4e:fd:25:f1:73:2c:1d:5c:71:
         c3:4c:9b:26:2a:34:f5:ac:93:58:30:bc:23:45:78:dc:76:cd:
         f7:4c:4e:ed:20:5c:d8:47:4e:58:2c:fc:31:a2:0e:b3:3e:64:
         49:94:60:1f:e3:c0:31:48:b7:ed:db:8d:37:42:55:dc:fb:2a:
         10:b2:08:6c:9a:d5:be:6d:7e:1b:2d:c6:38:cc:b0:c3:af:5e:
         1e:12:52:f3:06:e8:8d:a0:c4:d2:fc:6e:97:a6:1d:6b:49:d3:
         b3:44:40:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOeQcKf1lgGL5xrSHJjA/lazLIH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0NzU2Q0IwMEY5ODIyQThBNTBDNDdGRDk0Q0VDNURG
MzFEQTk0QjAeFw0yNjAzMjUxNzQyNTVaFw0yNjAzMjYxODQ1NTVaMDMxMTAvBgNV
BAMTKDU4NkRCQTRDMTgzNzYxREM5MkM3NkVCQUUyRDdBNzhDQTVEREQ2OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TbFc213+vHtcqT+Gb7ZMQ2v0
kuSCdadb17NyplOacg66qpca4530C8zl+lcqRzm0AGyDtAIdZjn53ijsrqUOFh1q
uPHLlz8jELyaIk7iNoNeCs+JOlr/FvClifQOAjUt4Xp3K5lJJo546B/9DEQJgqGs
7ktXFuAV763RX0haFjgc0nRBYAeHzCsTrupeYUo0niFkEqcjfCJF/vhAfoo7pT/L
83g5WbrCC5eFYOpEMwifxk1nGrDn8D8L9DnYLncXaHVAo2CmUiOMaPhnYqV/SYqb
lt2ynW/Y2EkTU4eiNEG8K/sxQ3bVjrtvzkWrfVcGS/E8eNvp71qMyzkCp9pfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWG26TBg3YdySx2664tenjKXd1powHwYDVR0j
BBgwFoAU0EdWywD5giqKUMR/2UzsXfMdqUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0ozTFVzRHhWS1RFZmd5OG1jQ0hlc3FyTnhMc2trS3pxaEVwZ1FDVjZw
WnMvMS9EMDQ3NTZDQjAwRjk4MjJBOEE1MEM0N0ZEOTRDRUM1REYzMURBOTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNDc1NkNCMDBGOTgyMkE4
QTUwQzQ3RkQ5NENFQzVERjMxREE5NEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0ozTFVzRHhWS1RFZmd5OG1jQ0hlc3FyTnhMc2trS3pxaEVwZ1FDVjZwWnMvMS9E
MDQ3NTZDQjAwRjk4MjJBOEE1MEM0N0ZEOTRDRUM1REYzMURBOTRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUMC8FegHiaLhs59WGHfKsqgRZjx37l63hWAp+Xk/1mZiZu6hqAxrKAwfumrm
W9fmH+9CVVge9BJOn3cMGH5NzqhS7iJTiV9NBN0zL1+naLtV1N3yH+jSjUBJEra4
w0pAbM99Ab7DiUWxeMJKqn8dJtIEya5/gwvoTcg8ElapDep3nYv52JVptENN7LKK
OAMrlaH8DzThAWv3Tv0l8XMsHVxxw0ybJio09ayTWDC8I0V43HbN90xO7SBc2EdO
WCz8MaIOsz5kSZRgH+PAMUi37duNN0JV3PsqELIIbJrVvm1+Gy3GOMyww69eHhJS
8wbojaDE0vxul6Yda0nTs0RANg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:56:42 2026 by rpki-client