Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.mft
File:                     3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.mft (raw, json)
Hash identifier:          noUUT+S2JHFFao102MikhG6hxlhXKavpZfyt03NSYlI=
Subject key identifier:   0D:B9:07:7C:52:4A:22:5B:5D:34:80:DF:5B:D7:31:F6:A0:28:9E:87
Authority key identifier: 36:77:61:1A:CB:73:CA:9D:A1:F1:82:DA:9A:E4:93:5F:AE:5A:87:51
Certificate issuer:       /CN=3677611ACB73CA9DA1F182DA9AE4935FAE5A8751
Certificate serial:       25F7850E2BA13042DEE88AEA7755CECADA85EC01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.mft
Manifest number:          5F
Signing time:             Mon 20 Jul 2026 09:37:22 +0000
Manifest this update:     Mon 20 Jul 2026 09:32:22 +0000
Manifest next update:     Tue 21 Jul 2026 12:54:22 +0000
Files and hashes:         1: 323830343a343263303a3a2f33322d3438203d3e20323637353233.roa (hash: 3ksssnRSJ1PEWgDGV/u3mnO4g17QzZFZzzisqMgEZsI=)
                          2: 3230312e3138322e3136302e302f32322d3234203d3e20323637353233.roa (hash: wbrleR+94YJ6gYHjNevggrN++zZWE6yBnjH079NS2PM=)
                          3: 3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.crl (hash: lrYjBKWiB2RSMfzSbPKZeWnge4vA44ahRO75jtD4F+I=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f7:85:0e:2b:a1:30:42:de:e8:8a:ea:77:55:ce:ca:da:85:ec:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3677611ACB73CA9DA1F182DA9AE4935FAE5A8751
        Validity
            Not Before: Jul 20 09:32:22 2026 GMT
            Not After : Jul 21 12:54:22 2026 GMT
        Subject: CN=0DB9077C524A225B5D3480DF5BD731F6A0289E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:e6:e0:cd:24:07:49:94:82:67:86:ef:bd:
                    1d:68:3f:30:e5:89:da:40:ac:17:ee:20:e4:ac:dd:
                    20:fd:0c:4b:cc:5c:10:e6:38:b5:1b:38:44:6f:09:
                    06:02:66:c3:17:3e:df:9e:6b:1c:12:b7:4e:b7:be:
                    de:c9:e0:bd:db:c4:74:f5:69:da:a0:92:7e:a2:da:
                    83:b7:76:6c:10:26:26:83:c3:6b:c6:6a:da:23:dd:
                    ea:3d:ac:c1:b8:61:6c:0a:8d:d7:f3:d7:c7:8e:92:
                    28:2a:b6:fd:dd:0a:6b:ce:3b:fe:9b:dd:38:5e:1d:
                    71:06:bb:7a:9f:77:38:03:9e:70:b5:80:1b:e0:8a:
                    62:f8:73:a3:52:6b:94:78:de:27:02:b9:51:e0:88:
                    d4:be:ad:a8:05:fd:a5:29:97:7e:02:37:73:17:06:
                    42:06:2a:1f:1a:c0:c0:04:da:0d:d8:4b:62:b1:bb:
                    b2:ff:a1:17:1d:21:36:f9:af:e7:d5:78:1c:5a:0b:
                    fd:42:70:07:e1:78:9f:c3:72:58:7a:2a:91:10:1d:
                    32:31:3d:28:9f:96:6c:80:44:21:1b:0f:e1:e0:0a:
                    f9:68:52:fb:6b:1c:21:80:e1:68:eb:7e:09:e7:b0:
                    cc:56:be:e8:50:83:2c:60:d7:5b:cb:03:1f:7d:2e:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:07:7C:52:4A:22:5B:5D:34:80:DF:5B:D7:31:F6:A0:28:9E:87
            X509v3 Authority Key Identifier:
                keyid:36:77:61:1A:CB:73:CA:9D:A1:F1:82:DA:9A:E4:93:5F:AE:5A:87:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:47:28:4e:e0:6f:d5:d9:5a:29:f3:b6:99:72:a8:cd:0f:e0:
         21:f8:29:50:d3:56:0f:fa:c5:2e:af:89:b6:21:18:8b:f7:a4:
         e2:f8:f7:f9:65:8f:ac:38:c4:c8:03:16:64:5e:6e:45:ff:00:
         99:70:85:e2:8d:13:12:90:60:7e:95:7d:c3:8e:1c:58:5c:17:
         4f:9e:f9:8b:02:72:75:94:a9:f3:96:d8:fe:41:50:6d:ca:24:
         dd:6f:6a:9c:c6:35:53:5d:02:3b:40:5c:81:47:7f:10:5f:23:
         76:8e:55:9e:67:99:84:9c:62:ef:d1:3c:fb:85:cb:ed:e1:01:
         32:ff:02:6c:39:d6:b0:be:a9:84:6d:71:9f:e7:14:32:97:4f:
         e3:79:1b:bd:97:13:09:24:91:96:45:71:e0:f0:2d:5b:23:71:
         d5:03:90:96:66:4f:68:05:20:bf:90:9b:9b:e9:87:ca:5e:84:
         ca:c6:d8:1f:de:f6:47:cf:31:8e:f8:6e:d3:7a:83:1e:a3:c5:
         44:ca:80:20:c6:fe:9b:65:9b:72:8a:be:b2:a6:04:2c:4c:23:
         5f:84:5e:90:7a:05:7d:a0:ee:4a:6e:6e:1b:de:e2:1e:7a:2b:
         d7:64:e9:7e:f8:f0:29:f7:ff:fe:be:da:c7:77:56:b9:ee:69:
         73:4c:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:30:57 2026 by rpki-client