Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.mft
File:                     80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.mft (raw, json)
Hash identifier:          /VQKhsSQXJGNkmPvCo+5NTQovRmLMkkjwfrxo1VocJE=
Subject key identifier:   8E:9B:DE:6A:05:83:64:31:26:70:11:1C:8B:54:F5:EA:19:32:FA:9F
Authority key identifier: 80:C2:02:64:AF:C5:25:D5:C8:E6:3C:70:9C:E7:AB:E0:ED:AF:C9:F1
Certificate issuer:       /CN=80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1
Certificate serial:       20629B6631C73B9B420ED03A5460DA5EA337986D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.mft
Manifest number:          0135
Signing time:             Mon 23 Mar 2026 14:30:14 +0000
Manifest this update:     Mon 23 Mar 2026 14:25:14 +0000
Manifest next update:     Tue 24 Mar 2026 16:59:14 +0000
Files and hashes:         1: 3139312e33372e3137392e302f32342d3234203d3e20323633333639.roa (hash: Dl1t88O7pBcq1XZJ1QoB3JTHwP7ZL6eEP1fsaqtxre8=)
                          2: 3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa (hash: g6Zn8yS8GcLarUL1QJADlhzVNRlQvPmZQ3mg3hjeRtQ=)
                          3: 3139312e33372e3137362e302f32312d3231203d3e20323633333639.roa (hash: ctvRQcQKqgHMSAekIz0SoTbY34ZKhlOXjwvz61tzDWU=)
                          4: 323830343a313530633a3a2f33322d3332203d3e20323633333639.roa (hash: 4CCpj+FvjxZSxrWGhTj1YTnbPLu8FxZp9qzTFxZJp2g=)
                          5: 3139312e33372e3138302e302f32342d3234203d3e20323633333639.roa (hash: UZgYRTNS+DfcaRI5VOd450J/AQUsJzodND+sxgm0b5k=)
                          6: 80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.crl (hash: zy7sbZ0CrnzZq77DqNGA0Gt0o3mvhhG0SHyti/1TsxI=)
                          7: 3139312e33372e3137382e302f32342d3234203d3e20323633333639.roa (hash: Hba7OSKJi+agw/azcjrr938Iqbsvv1cbUXFYTF9twrA=)
                          8: 3139312e33372e3137372e302f32342d3234203d3e20323633333639.roa (hash: CfLTgxYHbKUDZFqF8+wqNv7VYpIkgTqXr4xngh11PDo=)
                          9: 3139312e33372e3138322e302f32342d3234203d3e20323633333639.roa (hash: LmIvU3JCORxBsQqrp20lk9XRUvhJ7bv2AiKnyO8geOI=)
                          10: 3139312e33372e3137362e302f32342d3234203d3e20323633333639.roa (hash: hGuKnic61fZHPQvJ4/8sUlWVLeBhRK9zoo/fxyhI8dM=)
                          11: 3139312e33372e3138332e302f32342d3234203d3e20323633333639.roa (hash: i2CSm93SrV4lP7huxrMc2oUiUe7/kwC+WTHQIPV+Xls=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:62:9b:66:31:c7:3b:9b:42:0e:d0:3a:54:60:da:5e:a3:37:98:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1
        Validity
            Not Before: Mar 23 14:25:14 2026 GMT
            Not After : Mar 24 16:59:14 2026 GMT
        Subject: CN=8E9BDE6A058364312670111C8B54F5EA1932FA9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:61:b9:85:29:69:2d:d6:72:b9:9c:2c:03:
                    0d:e4:b8:f1:98:ad:37:f9:63:62:57:51:b0:5d:0c:
                    f7:e1:69:a0:b1:5c:fc:0b:c5:67:b2:cd:a0:df:22:
                    42:cf:77:e4:81:2f:92:12:4f:3b:ca:86:8a:b2:e6:
                    7b:72:57:bd:73:c4:da:1b:23:c7:b7:aa:44:d2:c8:
                    96:7d:fe:b4:18:82:a9:42:6e:5f:51:22:bf:c7:a9:
                    7e:4f:cf:c9:69:25:4e:43:13:8d:48:b4:3d:03:2c:
                    f8:4b:18:d3:6f:ad:02:b6:58:85:5f:dc:f4:bb:89:
                    e6:92:5d:36:2e:c4:76:f4:12:f2:e0:57:d2:46:55:
                    6f:94:bc:4d:a9:95:4a:a2:aa:26:c6:5d:c3:ec:c2:
                    bc:1a:91:25:3f:35:1a:d2:e2:7d:e5:50:df:92:01:
                    5f:3b:12:99:18:93:0e:69:e4:91:95:f4:9b:5d:c0:
                    24:91:27:5a:e4:f4:62:8b:0b:a6:74:a3:29:92:b4:
                    cc:f2:99:c6:e1:c6:3b:4e:af:3c:41:1d:dd:1a:de:
                    53:11:e2:1a:73:eb:27:16:cd:74:3b:fb:e9:a2:21:
                    8d:bb:82:0a:13:ba:83:41:de:61:df:8a:0b:cb:2a:
                    c2:50:02:d4:2c:80:fd:98:e6:7f:22:d0:d3:cc:d4:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9B:DE:6A:05:83:64:31:26:70:11:1C:8B:54:F5:EA:19:32:FA:9F
            X509v3 Authority Key Identifier:
                keyid:80:C2:02:64:AF:C5:25:D5:C8:E6:3C:70:9C:E7:AB:E0:ED:AF:C9:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7d:00:b4:69:8b:c5:73:71:9d:a9:8f:81:82:2d:cc:32:ef:
         32:38:04:67:83:66:9c:3f:1f:5f:61:69:1e:d8:57:ea:eb:07:
         60:de:aa:52:42:79:18:66:81:f3:2c:43:29:85:42:4f:ce:81:
         54:49:d4:88:4a:f4:79:fa:75:09:34:09:8a:f1:a3:f2:c6:95:
         0e:dd:6f:cd:a5:18:5e:9b:2f:92:d6:cd:77:64:cc:d8:4b:09:
         d3:4a:b5:cb:a7:dc:ca:c0:9e:8a:4d:aa:66:a5:26:0f:05:37:
         53:0c:99:a6:5d:54:60:e1:e8:d2:ef:a9:db:af:19:6d:44:65:
         fb:70:54:12:39:2c:5c:0c:84:35:d3:cd:ff:15:c1:e6:a3:b7:
         4a:47:3e:d6:bd:bd:8b:8b:eb:8b:64:15:11:81:bf:e3:1a:1c:
         44:0b:98:98:e0:bf:a5:68:94:cb:e5:35:07:b0:50:84:8d:1e:
         4a:42:de:27:ff:78:6c:f0:bc:91:b9:13:c9:d6:e2:69:07:43:
         bb:73:e7:5d:62:28:40:d6:50:57:6b:3c:da:63:e1:78:ef:13:
         cd:5e:8b:9c:1b:d6:dd:9a:6a:a4:3b:0d:b8:2b:4d:0b:31:44:
         79:a1:ca:7d:a0:0e:9e:9d:1a:e5:76:00:f6:3f:69:a0:84:75:
         99:a8:8a:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIGKbZjHHO5tCDtA6VGDaXqM3mG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBDMjAyNjRBRkM1MjVENUM4RTYzQzcwOUNFN0FCRTBF
REFGQzlGMTAeFw0yNjAzMjMxNDI1MTRaFw0yNjAzMjQxNjU5MTRaMDMxMTAvBgNV
BAMTKDhFOUJERTZBMDU4MzY0MzEyNjcwMTExQzhCNTRGNUVBMTkzMkZBOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5umG5hSlpLdZyuZwsAw3kuPGY
rTf5Y2JXUbBdDPfhaaCxXPwLxWeyzaDfIkLPd+SBL5ISTzvKhoqy5ntyV71zxNob
I8e3qkTSyJZ9/rQYgqlCbl9RIr/HqX5Pz8lpJU5DE41ItD0DLPhLGNNvrQK2WIVf
3PS7ieaSXTYuxHb0EvLgV9JGVW+UvE2plUqiqibGXcPswrwakSU/NRrS4n3lUN+S
AV87EpkYkw5p5JGV9JtdwCSRJ1rk9GKLC6Z0oymStMzymcbhxjtOrzxBHd0a3lMR
4hpz6ycWzXQ7++miIY27ggoTuoNB3mHfigvLKsJQAtQsgP2Y5n8i0NPM1EajAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjpveagWDZDEmcBEci1T16hky+p8wHwYDVR0j
BBgwFoAUgMICZK/FJdXI5jxwnOer4O2vyfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODE4a1lFY3lXb2h4UzlLYWF0d3prZFU1SEh6ZVk2UnA0Qzg3dnBCMzNT
bVEvMC84MEMyMDI2NEFGQzUyNUQ1QzhFNjNDNzA5Q0U3QUJFMEVEQUZDOUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwQzIwMjY0QUZDNTI1RDVD
OEU2M0M3MDlDRTdBQkUwRURBRkM5RjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODE4a1lFY3lXb2h4UzlLYWF0d3prZFU1SEh6ZVk2UnA0Qzg3dnBCMzNTbVEvMC84
MEMyMDI2NEFGQzUyNUQ1QzhFNjNDNzA5Q0U3QUJFMEVEQUZDOUYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg30AtGmLxXNxnamPgYItzDLvMjgEZ4NmnD8fX2FpHthX6usHYN6qUkJ5GGaB
8yxDKYVCT86BVEnUiEr0efp1CTQJivGj8saVDt1vzaUYXpsvktbNd2TM2EsJ00q1
y6fcysCeik2qZqUmDwU3UwyZpl1UYOHo0u+p268ZbURl+3BUEjksXAyENdPN/xXB
5qO3Skc+1r29i4vri2QVEYG/4xocRAuYmOC/pWiUy+U1B7BQhI0eSkLeJ/94bPC8
kbkTydbiaQdDu3PnXWIoQNZQV2s82mPheO8TzV6LnBvW3ZpqpDsNuCtNCzFEeaHK
faAOnp0a5XYA9j9poIR1maiKwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:02:58 2026 by rpki-client